
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json)
Hash identifier: XLtLTI5LsipXhenjVkXYc7mOZ/pjauXgS4PZkSXlLAQ=
Subject key identifier: C3:E0:0A:D1:0A:57:C0:1B:66:71:5F:F1:7B:A1:80:82:11:56:CD:4E
Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
Manifest number: 011C
Signing time: Wed 13 May 2026 05:55:06 +0000
Manifest this update: Wed 13 May 2026 05:55:05 +0000
Manifest next update: Wed 20 May 2026 05:55:05 +0000
Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: DsBN4EdKF355E6CRo+C1B2GdJZ50yWW5Xmltaf1tI1E=)
2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: PJLa3dcXC2/TqvhR77SxkhOWTThse4ZX840dFNg6P88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl
rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Validity
Not Before: May 13 05:55:05 2026 GMT
Not After : May 20 05:55:05 2026 GMT
Subject: CN=6a04123a-2709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:8f:d4:46:4f:ca:29:3b:86:cf:03:dc:fb:
15:a9:31:1d:eb:9c:33:ef:4a:bf:48:68:15:c2:6d:
eb:d7:63:6f:27:7e:55:82:c0:17:15:15:95:52:b6:
fd:b7:bb:da:e8:e0:a8:aa:5f:15:8e:e0:a4:08:96:
f7:3f:ed:53:2e:48:0a:b4:ee:d5:6f:d0:12:fd:1e:
e8:12:6c:34:b1:3f:c7:d6:5a:0d:b6:92:ee:e0:8d:
c3:e6:16:e6:f8:6f:bc:fb:f2:f6:2a:13:8b:5a:15:
55:97:6e:72:a8:09:45:5d:1d:08:02:31:d6:4e:c6:
dd:88:73:2f:93:42:86:32:fe:91:a6:a8:82:4a:84:
c7:24:b3:6a:32:37:7f:f7:75:a8:75:72:8c:bc:9e:
c4:a3:f8:88:25:dd:80:90:0c:82:d0:6d:10:71:ec:
1c:16:bc:74:95:66:3b:a4:4c:c1:12:4b:61:4e:e9:
46:0c:5f:96:6d:a8:ac:c0:3c:36:fd:3c:43:13:96:
4e:38:dc:e9:d5:17:7d:60:18:49:fb:f0:98:59:d5:
39:7a:03:5c:02:e0:15:d5:d0:bf:fb:1b:f5:cd:49:
95:5d:90:52:1c:26:26:af:26:68:47:db:89:7c:30:
7b:8f:1e:a2:3e:85:1c:08:cd:10:4d:c1:09:35:05:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:0A:D1:0A:57:C0:1B:66:71:5F:F1:7B:A1:80:82:11:56:CD:4E
X509v3 Authority Key Identifier:
keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cf:37:c3:07:7a:14:d7:4c:95:fd:1b:16:f5:be:4b:bf:f3:
cd:1f:fd:b9:a5:04:5e:59:c1:b9:5b:9f:b1:9a:5b:89:46:90:
f6:50:ba:56:24:d1:7f:05:a6:78:e7:ba:07:15:e1:46:20:e7:
db:87:3e:0e:ff:86:1d:56:9a:f1:42:06:20:05:67:93:24:1a:
1c:7d:ad:6b:e2:bd:37:a5:19:b1:8d:6f:35:65:23:1d:da:c1:
68:27:5b:83:5a:8e:ae:52:a2:ed:fb:0d:93:af:04:2c:c2:c4:
19:92:81:08:07:e4:8e:19:90:8c:cf:04:e9:60:52:00:c1:04:
da:d1:2b:90:41:af:e8:04:fe:a5:ce:9a:70:dd:64:d5:06:d6:
c1:03:b9:c4:24:47:0a:6a:b9:74:b0:44:1e:21:92:00:a8:0c:
7a:5c:d5:d3:b4:3e:d6:9b:2c:57:b5:32:2d:7f:90:df:f0:de:
33:05:23:29:7e:7a:c0:13:ee:0e:6d:56:f5:e5:ba:f5:ec:93:
86:e8:fc:08:82:13:98:4f:9f:dc:02:07:01:a8:8d:5b:2e:db:
ba:47:d8:8e:8d:98:3b:b3:16:d4:54:cb:4f:c4:c7:21:a2:3d:
98:16:80:eb:16:b1:08:e8:2d:05:cb:f4:b5:5c:d3:a0:ae:23:
5f:d8:81:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:53 2026 by rpki-client