
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
File: aRiqcfNrBGNTplzAiXixjv-59cY.mft (raw, json)
Hash identifier: pxAz1B6PQtYMFV+iYcUQ05/5VyOqi75tU2giGSIxE2Y=
Subject key identifier: E5:C9:0E:9E:10:44:87:B3:5D:48:4E:BF:C2:96:67:A6:F0:5A:10:8D
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Certificate issuer: /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
Manifest number: 0158
Signing time: Thu 23 Jul 2026 06:44:34 +0000
Manifest this update: Thu 23 Jul 2026 06:44:34 +0000
Manifest next update: Thu 30 Jul 2026 06:44:34 +0000
Files and hashes: 1: aRiqcfNrBGNTplzAiXixjv-59cY.crl (hash: 3RM2IvSheAkt/rDDbdUNO6oYc4VKrq4vwtK4Lg46P8o=)
2: A54CA35E853B11EFB513D149C4F9AE02.roa (hash: /vNUIQMQmo/+bpr7T8qr5NTsbD+Gg65QmwR+l9u79do=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170EED, serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Validity
Not Before: Jul 23 06:44:34 2026 GMT
Not After : Jul 30 06:44:34 2026 GMT
Subject: CN=6a61b852-2265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f4:5b:da:ce:43:76:41:ef:44:20:69:e7:b1:
42:5c:cb:3d:e5:49:33:3f:24:1f:17:20:d1:39:4f:
26:04:ec:74:d3:17:ee:a3:94:81:9b:5c:b1:60:79:
07:2b:12:85:14:4d:0a:a3:31:0d:92:1d:0b:ab:8e:
a9:ab:a0:5f:11:9c:5a:e3:45:a1:f7:a1:68:ad:50:
dc:03:6a:bc:37:18:e8:51:10:bc:02:2c:02:ed:23:
dc:a8:af:3d:80:6c:a5:02:87:11:be:3c:2c:24:92:
f4:51:39:e7:c9:95:07:90:d2:97:b7:f9:b0:07:b6:
c6:2b:83:20:c9:91:ea:63:e4:04:ec:c6:63:a7:e8:
cb:52:61:95:9a:86:c6:d3:ab:22:02:04:01:fa:46:
6a:d7:98:ae:8d:29:ec:1f:df:d0:2e:e4:26:a5:8d:
05:6b:92:c4:4f:2b:09:c4:aa:08:09:d3:85:94:66:
21:37:da:ac:7c:2f:51:a3:fa:bf:00:a0:33:26:4e:
8a:2b:d1:d3:2d:66:cf:28:2a:55:91:56:99:c8:21:
00:fd:68:8b:68:b9:77:3b:35:da:67:0d:c8:c6:91:
c4:02:b6:e8:37:72:c9:e3:2b:ca:1c:b1:2c:42:d5:
56:c3:e4:69:a3:02:8c:cb:44:6e:fa:9f:70:ce:48:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C9:0E:9E:10:44:87:B3:5D:48:4E:BF:C2:96:67:A6:F0:5A:10:8D
X509v3 Authority Key Identifier:
keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a2:4a:62:ae:26:33:eb:66:70:c5:68:26:29:e0:21:d6:65:
2f:04:c3:66:e8:ed:80:73:22:25:81:2b:97:07:ba:3f:5e:7f:
0e:b9:02:ab:6b:e0:cd:93:82:2d:9c:c6:46:81:4b:7b:42:1f:
da:3f:a3:47:3d:ae:8c:4f:df:c5:77:16:d5:d9:f2:fb:fa:b3:
5f:c8:e6:d2:7b:9b:74:9f:29:58:a7:fb:e2:35:a8:6a:da:be:
3a:46:f3:e2:7e:b5:b2:cb:59:e4:04:5f:9e:90:e5:5e:c4:be:
90:56:1f:ed:2a:e5:26:a7:b7:96:21:76:cd:34:bf:9f:6e:b6:
9e:a4:e3:3f:da:89:11:18:82:ef:11:79:17:d0:6b:37:f5:f8:
ae:04:83:f8:ed:a9:b1:d5:8e:15:8c:41:44:7d:75:60:44:59:
0f:d0:f1:21:61:b4:e7:e5:b7:99:ac:a5:40:b5:85:4e:a9:d6:
97:97:c5:87:a7:cb:00:37:d2:ee:a9:63:32:e5:11:9f:bb:b7:
0b:3e:ac:00:87:00:9b:3d:ba:30:30:91:bd:61:0b:a3:78:da:
f1:bd:92:78:02:42:61:4f:d5:36:92:72:39:a9:d1:15:a8:04:
6c:e6:2d:a0:53:62:65:27:3b:92:c6:54:79:a1:e4:19:c5:57:
5c:7b:0e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:11:48 2026 by rpki-client