
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json)
Hash identifier: rBP/4Igfj3kqq9y0vU1oiIcAGzloqBbCSQ5RWPT4g2I=
Subject key identifier: 0F:DC:F1:01:9F:CB:6D:57:EC:62:B7:C0:0E:6E:CF:4E:A9:F0:96:E6
Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
Manifest number: 0134
Signing time: Mon 11 May 2026 05:40:04 +0000
Manifest this update: Mon 11 May 2026 05:40:04 +0000
Manifest next update: Mon 18 May 2026 05:40:04 +0000
Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: Hj3Ivy2AlFwTp70Dyp3jI2XRBfDCYxXX18gEXIrscOM=)
2: A647525E853B11EFB513D149C4F9AE02.roa (hash: 8/z43AfGGthVBc9cfR73JH6jugiVT0aL27yCo3q+XYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Validity
Not Before: May 11 05:40:04 2026 GMT
Not After : May 18 05:40:04 2026 GMT
Subject: CN=6a016bb4-2477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:b7:f5:ec:e3:c6:18:cd:98:5e:31:60:63:
dd:e6:e0:40:ed:ca:84:dc:3f:3d:aa:c3:1d:fd:c8:
2a:3b:9e:7b:40:eb:e3:e5:7c:b4:aa:9c:b2:a1:d6:
2a:3c:75:c1:d0:50:37:fe:ca:43:b4:bd:6a:f8:56:
db:63:7b:04:c8:7b:76:e1:4e:50:12:70:27:96:91:
6f:4f:ae:97:19:1e:bb:00:16:4a:31:fc:18:75:5c:
d5:c9:61:8a:a1:63:0d:88:67:f9:20:ce:32:31:79:
06:db:ba:64:21:37:cd:58:61:5d:9e:8d:a3:3c:6b:
53:7a:bd:d9:d7:ac:a4:4c:48:27:af:a4:7f:71:6d:
ba:7f:32:82:10:cc:30:6d:99:01:10:cb:ba:eb:c0:
d0:3b:3d:8b:f4:63:19:92:07:c7:3c:a5:50:6b:28:
16:8b:d4:8e:41:52:33:5b:18:27:6f:45:fd:3b:25:
38:2e:87:19:39:7f:38:56:7c:a3:22:d1:80:b5:fe:
78:f5:0c:0f:59:c8:a2:f7:78:b2:18:72:7c:18:6b:
25:96:43:6d:7d:d6:fd:5b:1e:bd:87:b9:df:6e:10:
d9:65:9a:0b:dc:40:02:34:d3:7c:01:15:18:52:b7:
5a:ad:45:73:63:52:f8:d6:14:95:df:68:68:84:59:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DC:F1:01:9F:CB:6D:57:EC:62:B7:C0:0E:6E:CF:4E:A9:F0:96:E6
X509v3 Authority Key Identifier:
keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:07:e2:c6:81:5a:1d:ed:af:42:10:64:87:82:93:0d:fa:8b:
a8:eb:93:8a:9f:ca:34:79:a7:00:7d:c6:3e:90:b3:c5:04:f5:
e5:42:44:d2:37:43:ee:0e:5c:35:00:74:fa:c7:e6:74:87:6e:
28:38:99:a6:5c:fb:a4:ca:8b:a5:a0:e5:de:cb:b0:35:56:67:
5b:3f:b7:44:86:bb:a6:c9:61:e6:19:a7:13:c2:75:c0:16:ce:
d2:9c:a2:40:ac:9d:a3:7b:79:cb:d4:0a:38:5d:3b:26:b3:8f:
a4:19:93:89:08:d2:aa:d3:04:ce:d4:b1:45:97:00:c5:5f:3a:
56:39:fe:f2:a1:a6:bc:4e:6e:a7:05:83:5a:47:e8:8b:71:99:
62:89:c9:3e:8f:5e:00:1d:0c:b5:bb:e1:c5:3b:55:7d:ad:54:
60:71:21:1f:c4:86:a2:63:b1:1e:c1:f1:86:49:c0:09:03:30:
9a:45:ed:c1:a6:05:8d:45:d5:34:36:7a:69:37:fb:30:e7:b2:
b1:8c:44:48:21:b5:6a:f8:94:13:2e:1c:e6:17:ab:46:b7:9b:
60:9e:00:30:89:8f:38:35:e6:6a:7b:d4:4a:c5:3b:10:57:77:
65:de:34:bb:52:ff:53:e4:33:ee:74:b1:f2:95:bf:11:db:a3:
41:75:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:38:52 2026 by rpki-client