
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json)
Hash identifier: i+C4XP8Z2Il+WQKSQgcNjtBWc4/0SEPL/xNZeSWI8RY=
Subject key identifier: 79:8F:4B:17:F5:A4:76:54:40:8C:17:18:C7:E0:A2:78:01:62:B8:62
Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Certificate serial: 0507
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
Manifest number: 0500
Signing time: Tue 12 May 2026 23:47:17 +0000
Manifest this update: Tue 12 May 2026 23:47:17 +0000
Manifest next update: Tue 19 May 2026 23:47:17 +0000
Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: VlekJ06lWi1dNv3vTXPGGmpqr/81zUvWy/cO47srRbc=)
2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: s+tgLB+pF+5avCp/zLgOBTjy0rHN55LZZRbWJEXSZEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287 (0x507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Validity
Not Before: May 12 23:47:17 2026 GMT
Not After : May 19 23:47:17 2026 GMT
Subject: CN=6a03bc05-4eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:bf:1a:7c:68:b3:4d:60:7e:36:33:5a:62:
9d:1a:0e:0f:29:c8:77:dc:ed:9d:93:c7:c2:1a:94:
ad:3e:51:45:32:6d:c7:75:2b:2a:a2:32:73:9f:43:
4e:52:03:55:c0:7a:20:55:28:37:30:72:46:51:58:
9b:8f:71:15:7c:14:c6:8d:b6:a9:51:b8:88:b5:69:
93:92:71:19:46:b0:f4:e0:06:85:49:4d:73:0a:c4:
41:ba:32:14:dc:94:1d:f2:0a:79:5c:50:d0:31:67:
33:44:cb:b7:17:61:73:ab:87:05:83:9c:80:68:22:
5f:a1:d1:5b:72:96:48:a8:b8:58:74:18:dc:6f:bf:
d9:6c:d0:a2:65:22:42:e9:2b:36:90:c4:84:33:e5:
ec:6a:df:96:be:f5:11:a3:61:54:23:05:f2:63:6b:
86:4a:22:d6:da:b2:32:51:32:e9:45:eb:fb:18:0d:
b2:e4:7c:5c:ac:7c:48:3f:6c:28:5f:e4:0e:52:e2:
ac:98:3c:5e:1c:b6:53:5f:17:30:3c:f6:98:59:12:
e4:be:5e:ab:41:ec:53:ed:c6:fa:31:4f:eb:0e:a3:
46:fc:f9:00:27:a9:9a:2d:6f:82:97:33:f3:e8:2a:
34:a5:41:b6:c3:f1:b6:37:46:19:f6:4e:42:e7:c3:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:4B:17:F5:A4:76:54:40:8C:17:18:C7:E0:A2:78:01:62:B8:62
X509v3 Authority Key Identifier:
keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:48:3b:c7:aa:4d:66:68:c3:f7:aa:af:19:8e:9b:ad:54:d8:
d2:3e:51:02:0d:88:9c:d0:9b:e0:a0:bd:81:38:60:22:01:5f:
fe:5b:2a:0b:32:c4:60:b8:7f:ff:79:ad:53:9d:a6:e9:16:3e:
da:5c:28:44:87:d5:0f:53:98:c8:54:a4:b6:68:5d:30:03:57:
a5:e4:b6:16:6f:cc:15:fa:84:96:2a:02:f0:52:ac:29:bf:e1:
ba:d5:c9:24:c6:41:79:a2:a7:3e:39:8c:7f:7c:2f:c2:91:b4:
8b:61:1c:58:95:c4:de:58:ce:73:23:8d:0c:cc:03:33:57:70:
57:f4:e6:c8:58:0a:ad:02:24:6e:56:77:9b:ae:c0:12:27:cb:
ce:08:3b:68:e7:7a:e5:3f:c5:d4:1e:18:d5:98:11:c2:50:e0:
64:8f:1d:93:67:10:43:18:f0:cf:f7:c9:19:74:2a:17:d7:53:
f5:47:e2:72:1a:31:1d:be:03:11:6f:12:be:c6:54:31:ad:b8:
7e:ea:34:fb:ec:02:68:34:68:21:96:86:47:34:45:07:e2:1f:
08:dd:c0:3e:a3:e4:9d:3c:57:1c:94:0e:44:61:be:08:56:7e:
cd:41:70:ae:5f:bc:11:43:b9:27:40:36:37:08:6a:e7:1d:94:
65:b9:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:00:35 2026 by rpki-client