
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
File: 1CVu3CvBHIRdtQe3wKiTVEYutj0.mft (raw, json)
Hash identifier: 1tsJJWBxqdDB1EHjNcVwECxH5PVOcq91KmXsVlv/C3s=
Subject key identifier: D0:D3:BC:D8:A3:21:71:B8:E0:E2:99:9A:3F:E9:6F:94:8A:B6:F0:C2
Authority key identifier: D4:25:6E:DC:2B:C1:1C:84:5D:B5:07:B7:C0:A8:93:54:46:2E:B6:3D
Certificate issuer: /CN=A9170DA5/serialNumber=D4256EDC2BC11C845DB507B7C0A89354462EB63D
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
Manifest number: C7
Signing time: Thu 23 Jul 2026 08:38:55 +0000
Manifest this update: Thu 23 Jul 2026 08:38:54 +0000
Manifest next update: Thu 30 Jul 2026 08:38:54 +0000
Files and hashes: 1: 1CVu3CvBHIRdtQe3wKiTVEYutj0.crl (hash: RJXBDS5zecWkV8AglR8yCJDGE0xt8G84oFAaAxQdIrc=)
2: F91ECAD6571B11F093AD0C10C4F9AE02.roa (hash: weUBuaqXjk5/5+ZvfK6KOqbWfTtXBnBwNWpgK2K7P90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.crl
rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170DA5, serialNumber=D4256EDC2BC11C845DB507B7C0A89354462EB63D
Validity
Not Before: Jul 23 08:38:54 2026 GMT
Not After : Jul 30 08:38:54 2026 GMT
Subject: CN=6a61d31f-2468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:32:08:b9:90:b1:70:4b:57:c6:6c:a3:f8:
5d:5a:c8:6c:1e:e3:37:f9:4d:65:1b:ef:e5:f6:61:
11:b0:70:32:e4:df:0d:a1:6b:53:e2:9c:d1:9e:6f:
43:42:39:73:c4:a5:1c:f4:82:45:60:0e:83:12:5b:
ad:4b:b0:93:3d:5d:89:ae:94:0f:6a:52:9b:7a:61:
db:42:fc:e2:e4:68:49:e0:8d:d5:73:75:e6:a9:09:
27:61:7d:b4:15:9a:5b:5f:12:0d:44:68:25:70:4c:
da:c2:6f:01:0e:c9:b4:ad:e0:5f:59:1f:db:bd:c1:
a6:30:49:ab:86:4c:db:78:5d:ad:f6:f4:2d:4a:d2:
33:fa:1c:2e:3a:4a:2a:93:f9:c1:6c:90:61:6d:ab:
ed:ef:5f:a2:06:a1:9c:7c:fb:48:f6:04:a2:23:00:
a0:e6:c8:24:32:5d:ef:71:c6:93:66:4c:56:67:d1:
30:a5:33:94:0a:e8:8a:0e:c1:f8:a2:e2:a8:5e:b0:
99:be:ab:b6:cc:77:75:cd:c8:5a:84:b4:a0:00:d7:
a8:2e:58:e9:b4:1b:1d:45:f1:e5:86:15:f3:55:92:
be:bd:a9:4b:3a:5f:3f:27:8b:62:ac:35:4f:17:0c:
d9:d0:5a:69:96:39:aa:1f:7e:62:0c:08:40:df:74:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:BC:D8:A3:21:71:B8:E0:E2:99:9A:3F:E9:6F:94:8A:B6:F0:C2
X509v3 Authority Key Identifier:
keyid:D4:25:6E:DC:2B:C1:1C:84:5D:B5:07:B7:C0:A8:93:54:46:2E:B6:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f2:78:64:5e:82:4d:fa:50:f0:79:cc:d5:8e:26:f9:28:94:
d8:e8:c8:77:d4:62:ed:2b:70:e8:0a:dd:4c:a4:89:1c:b9:60:
09:c0:68:44:30:10:d1:95:b3:c3:68:9f:2a:32:cc:ff:ab:b2:
85:24:3c:72:00:db:1d:53:ed:1a:fb:df:9d:b2:1a:4c:85:01:
fc:2b:ad:2a:8b:c6:42:86:50:3f:f9:29:bc:b9:ef:14:84:97:
f1:79:da:da:78:0c:a6:8f:9d:10:fe:7d:d3:1e:8a:4f:e3:86:
a0:a4:d4:26:be:e1:aa:d2:76:a0:1a:d9:41:31:cf:4b:d5:19:
79:ef:44:94:4d:bb:f2:0d:61:a3:19:9b:75:e4:30:fe:44:67:
09:9f:ad:37:c9:78:f4:d4:a4:71:16:6d:46:cf:6a:b5:5b:19:
7d:58:2e:ac:6c:cb:0a:d8:bd:6d:e9:7c:51:a3:ee:ba:d7:d2:
d2:c1:c9:a6:34:cc:be:19:16:db:6d:f4:18:b7:79:0f:2c:cd:
0e:e5:0f:80:f0:19:21:d8:13:ad:b1:1e:81:f6:7a:a0:73:5b:
0d:80:6c:b2:88:2e:4a:4e:6c:ab:61:27:68:35:c0:bd:b7:46:
ce:9f:de:57:d1:08:04:c4:2c:57:15:9d:7a:ea:ae:95:f6:93:
a7:10:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:31 2026 by rpki-client