
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
File: aRiqcfNrBGNTplzAiXixjv-59cY.mft (raw, json)
Hash identifier: nLXZB7Sj69I1zPG+ACRRISqPRKej28blEmIqZ2JLVKo=
Subject key identifier: 50:14:9C:71:3C:01:F2:53:D6:7F:4B:23:1B:1E:AD:EA:8F:39:28:8E
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Certificate issuer: /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
Manifest number: 0135
Signing time: Wed 13 May 2026 05:39:26 +0000
Manifest this update: Wed 13 May 2026 05:39:26 +0000
Manifest next update: Wed 20 May 2026 05:39:26 +0000
Files and hashes: 1: aRiqcfNrBGNTplzAiXixjv-59cY.crl (hash: xj3/989AfHIznc+AJbSLXC8keBHQIwZGyS4jA8IoN0Q=)
2: A54CA35E853B11EFB513D149C4F9AE02.roa (hash: /vNUIQMQmo/+bpr7T8qr5NTsbD+Gg65QmwR+l9u79do=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170EED, serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Validity
Not Before: May 13 05:39:26 2026 GMT
Not After : May 20 05:39:26 2026 GMT
Subject: CN=6a040e8e-776c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:5c:69:58:c5:af:96:e8:5b:d4:c7:6d:c4:
84:d4:7b:15:63:5e:aa:c9:c1:92:49:2a:23:49:18:
1b:93:44:78:33:11:3c:ad:d9:ec:b7:75:a4:17:e4:
75:4b:5a:16:74:5a:2e:37:8a:39:00:38:79:c8:f1:
01:1d:32:c7:26:c6:91:33:21:fa:50:84:aa:76:e2:
ec:48:0f:6d:fb:d3:3c:2f:a7:ad:f1:9a:7d:04:36:
22:58:27:48:fd:fd:75:cf:d5:f1:7c:e0:69:4d:a7:
1e:fd:1e:7d:08:d7:c2:85:fe:ab:58:79:a4:aa:60:
f2:8f:9e:c5:cf:46:a1:20:a8:b3:c3:6f:5f:12:8e:
be:43:90:3d:d6:e3:03:53:12:7c:c4:b1:ee:7d:63:
b5:6a:11:48:ca:38:73:fe:2f:a2:ab:c0:c6:13:7d:
1b:f3:98:b0:35:39:fb:8a:88:2b:9a:26:b6:2c:56:
bb:79:35:93:32:5d:43:39:2e:62:44:f2:94:1f:a9:
17:9c:19:f6:cf:cb:56:92:4f:9b:56:8a:f1:21:c0:
c3:97:f2:1a:69:99:6d:94:df:3a:95:04:c5:8d:d8:
d7:b2:49:00:36:38:4c:5c:fd:d0:9f:f5:c9:d9:e8:
ac:9c:a4:89:5f:06:6a:84:bc:e7:38:c6:d2:8f:35:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:14:9C:71:3C:01:F2:53:D6:7F:4B:23:1B:1E:AD:EA:8F:39:28:8E
X509v3 Authority Key Identifier:
keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:14:53:c8:eb:ed:be:2f:7e:ba:f3:ce:f3:9c:85:c5:01:c3:
27:84:f3:80:00:79:26:34:6d:2e:78:3d:c4:30:20:14:2b:20:
bc:2e:ee:60:10:f1:8f:36:81:b8:66:de:41:2e:17:6b:38:41:
ac:c0:af:ed:87:3d:d0:1f:f2:62:05:56:10:68:22:62:15:b8:
ef:c0:a1:b6:f4:8a:4d:74:09:e7:81:65:51:2a:d5:c1:06:5b:
46:d1:0c:d7:1b:e8:80:ba:87:1f:24:9a:fe:7e:92:dc:01:95:
2b:11:84:91:e1:d6:29:57:d9:43:50:a4:11:7a:91:5f:16:e5:
4e:e5:bd:88:c7:99:29:c1:97:0b:fa:37:6a:08:5a:0a:3e:ba:
dc:1b:15:31:fd:1e:d8:4e:60:19:94:ee:b0:d4:05:7b:66:ff:
ef:95:fb:84:f7:dc:06:3d:b4:24:0a:d3:0e:45:e1:e2:09:ee:
b6:57:f2:31:10:09:86:d2:3b:fa:d1:24:66:98:48:bf:e5:0e:
9c:7c:c1:ef:20:d4:27:16:06:5f:a2:4f:24:33:f9:c9:97:ed:
be:50:e5:d1:8c:fc:4f:28:b7:06:ba:d0:62:c5:10:4f:dc:e4:
30:d6:61:f2:e9:2c:d0:34:ea:a5:d8:d9:b0:14:1e:39:27:07:
8d:43:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:12 2026 by rpki-client