
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json)
Hash identifier: G197ar7j7vBxSG5Z4FC9svnZat8v+Ko/wFLuykrOB2g=
Subject key identifier: DD:3B:E5:4E:A5:DE:74:90:E9:A3:02:79:87:39:2A:FC:3A:37:D7:BD
Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
Manifest number: 013F
Signing time: Thu 23 Jul 2026 07:01:09 +0000
Manifest this update: Thu 23 Jul 2026 07:01:09 +0000
Manifest next update: Thu 30 Jul 2026 07:01:09 +0000
Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: aqydHeIm6uLiwIgx8lom/AYQlzgTGEghHlpkHrug7KQ=)
2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: PJLa3dcXC2/TqvhR77SxkhOWTThse4ZX840dFNg6P88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl
rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Validity
Not Before: Jul 23 07:01:09 2026 GMT
Not After : Jul 30 07:01:09 2026 GMT
Subject: CN=6a61bc35-2cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:76:ec:7b:5f:79:1c:41:00:28:82:46:6f:
5c:5c:9c:98:a4:0e:a9:54:82:54:6a:a0:0a:6b:3d:
d5:39:ba:5c:a1:ce:55:c6:30:cb:08:76:3b:35:ff:
6b:14:da:bd:ce:99:64:c4:8f:47:80:4f:71:19:b4:
13:d1:30:1d:28:64:de:9d:8b:5f:dc:44:28:17:76:
41:83:31:26:45:02:47:3b:aa:94:44:f9:5f:0a:fd:
85:71:d1:16:93:4c:c9:a3:a1:e7:27:7e:32:6d:6b:
db:95:17:7a:1b:8d:65:56:ce:40:b3:5f:b8:f7:ee:
68:f5:9f:f6:8a:f4:23:d0:17:46:5e:32:9b:19:df:
c7:4e:14:65:a4:f4:61:0b:57:26:45:b0:8b:34:ee:
e1:5e:3c:5c:58:1d:75:3f:be:10:3c:74:db:fb:d2:
f0:71:6d:70:7d:d1:7b:b6:b6:bf:da:0f:03:40:25:
7b:06:ab:e4:07:07:7c:9e:94:b9:d0:cc:df:7c:ed:
57:2a:8e:eb:0a:12:2e:9b:cc:e6:65:9a:6d:a6:b6:
d5:2d:ed:cc:40:8c:0a:cc:3e:eb:cd:4b:88:76:b4:
88:4f:2b:31:99:60:7c:a5:4c:52:41:6d:36:b3:d2:
ec:15:80:f2:20:48:77:1b:cc:4a:fb:e6:d6:b1:1d:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:E5:4E:A5:DE:74:90:E9:A3:02:79:87:39:2A:FC:3A:37:D7:BD
X509v3 Authority Key Identifier:
keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:0c:af:85:18:72:73:53:6d:6b:17:67:0c:c9:ed:8a:47:09:
a5:59:01:cc:1f:91:ed:eb:12:8d:ef:a4:60:05:6d:c9:36:32:
d2:12:7f:60:69:50:da:86:09:93:a7:17:b5:91:12:04:e7:af:
d3:e5:fc:a3:f4:ed:f2:e0:d4:b9:c1:3b:c6:d5:c4:83:f5:b7:
1f:a4:b9:42:68:b6:0d:8d:87:6b:f1:4d:ff:7a:8e:0d:0e:b6:
82:51:71:35:a5:07:7a:ee:d8:87:4a:a1:07:8c:3f:7c:46:ff:
f6:8f:9a:28:70:68:da:33:26:d6:88:df:45:b4:02:39:f6:f4:
e2:a3:26:e2:df:21:5a:b7:05:37:51:fd:3a:5f:71:17:27:d5:
dc:42:e4:ae:75:a5:5b:b1:a6:78:fb:24:f3:55:63:8c:ad:29:
6b:13:82:89:5c:54:84:9b:07:93:5c:13:da:4d:e9:a1:b4:05:
55:9b:8b:c6:b0:31:3e:68:11:51:70:a0:77:e9:91:62:13:88:
1a:0a:50:99:a8:c4:29:cd:1b:5f:d0:8d:b9:14:00:9d:5b:71:
e1:83:06:90:9a:fd:79:02:58:22:8e:ea:06:24:ad:53:a9:f8:
46:b9:2b:29:68:b7:a2:b1:7f:1a:f1:e9:ad:88:00:c1:f0:94:
e7:23:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:46 2026 by rpki-client