
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier: j88VVaPhhv4RmHqvIqMQ3ONIBMJDfVuY8AnkAH9dFME=
Subject key identifier: C6:12:72:1C:D3:4D:8A:85:7F:FE:F4:6D:8C:BF:B8:60:00:B4:22:12
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer: /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number: 8E
Signing time: Thu 23 Jul 2026 09:21:33 +0000
Manifest this update: Thu 23 Jul 2026 09:21:33 +0000
Manifest next update: Thu 30 Jul 2026 09:21:33 +0000
Files and hashes: 1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: 4BJuqOSaRl/9kPyxFZyMzwJxOElxuKmAxXsmsNncjCU=)
2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Validity
Not Before: Jul 23 09:21:33 2026 GMT
Not After : Jul 30 09:21:33 2026 GMT
Subject: CN=6a61dd1d-6d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:02:1a:d3:43:f6:94:9a:64:98:88:e2:b4:
7b:2b:bb:b6:e8:78:49:5f:42:03:2a:f5:28:8a:41:
ca:0d:58:53:bd:06:31:f5:20:0f:96:f7:3d:66:06:
d7:e5:48:09:59:43:d7:2f:e2:f9:43:74:a7:32:45:
bd:66:07:55:ab:90:e6:23:0f:b4:20:0b:33:16:4b:
29:b2:7e:ee:a3:8b:d4:7b:b2:19:eb:3c:0b:8d:f7:
18:40:fb:ea:11:43:39:8b:2c:7c:ec:29:51:ce:d3:
8a:c1:b7:36:af:e1:fa:89:4a:11:ef:a3:7c:0f:ae:
41:58:69:f9:30:8e:d6:4d:33:1a:81:f5:36:21:b7:
38:27:b7:de:b2:99:99:b2:d7:73:da:35:92:67:d2:
ee:60:3c:d4:94:f5:11:25:df:41:36:b0:4b:ea:23:
a9:a7:2e:8c:bb:d0:14:ae:26:1d:51:5a:8c:43:b5:
40:2d:ea:df:3e:d3:54:16:f4:c8:7e:0f:b5:0b:06:
39:46:bf:2f:29:e5:5a:ee:ba:89:7a:80:11:76:93:
85:18:66:4b:3a:ae:34:59:ca:b5:54:37:f1:99:28:
6c:f9:35:b4:f3:4b:43:90:a5:54:81:91:c1:b7:90:
7f:7d:f1:fd:04:33:6d:78:42:c8:18:be:24:a5:7b:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:72:1C:D3:4D:8A:85:7F:FE:F4:6D:8C:BF:B8:60:00:B4:22:12
X509v3 Authority Key Identifier:
keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:d5:aa:30:5d:6c:31:54:bd:6f:42:99:83:7d:29:d5:c5:e3:
fb:43:69:ac:fd:d1:c5:8e:4a:83:7d:b4:a2:5a:95:ea:21:f7:
3e:0f:a3:1a:71:60:d9:87:1f:be:c2:fd:f5:70:3d:10:8f:00:
f7:a8:c2:ce:8f:b1:03:ca:d1:1e:b5:2a:43:b0:7b:33:8f:56:
4c:27:87:9a:74:20:4b:2a:13:a8:25:7b:18:76:4d:d9:9b:5e:
33:e6:96:71:f7:37:3d:b4:4e:c1:bc:cf:46:4f:b1:bc:65:e7:
9b:81:0a:09:ca:85:b0:b9:e8:e7:a1:33:ad:7c:aa:21:c8:38:
e5:45:bc:f3:5f:b2:bc:7c:19:0e:74:80:eb:d5:3c:a7:d7:99:
a5:25:46:f9:50:c6:65:ad:b8:1c:3e:d5:2b:ba:d9:12:55:1d:
73:ef:68:82:29:69:5b:fc:03:9d:9a:19:23:f3:dc:d3:5b:50:
c8:96:d1:b0:d0:21:f7:cd:50:0c:e2:7b:8e:0e:6d:ee:14:85:
a2:b2:38:c6:05:49:11:70:c2:b0:0d:80:f8:4d:9d:5f:f2:33:
7c:bf:85:d9:3f:f5:e3:e2:12:7c:82:26:92:c4:22:9d:bd:0a:
29:16:f7:d0:5f:55:2e:03:5a:4f:ce:1c:12:03:a0:72:cd:72:
44:7f:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:57 2026 by rpki-client