
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
File: cI8eBxM4VcgHTu1fjIO0RmpgesI.mft (raw, json)
Hash identifier: zsrmX0UazQCv/CwbQHLEbN9Gw+vEMUt2s0JGXa1MSyE=
Subject key identifier: 38:17:27:9D:D0:2B:3D:1C:8D:18:30:39:AB:41:CC:36:8D:B9:41:AF
Authority key identifier: 70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2
Certificate issuer: /CN=A9171D16/serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
Manifest number: 01E2
Signing time: Thu 23 Jul 2026 04:51:37 +0000
Manifest this update: Thu 23 Jul 2026 04:51:37 +0000
Manifest next update: Thu 30 Jul 2026 04:51:37 +0000
Files and hashes: 1: cI8eBxM4VcgHTu1fjIO0RmpgesI.crl (hash: aNie3oq4b2Z+KuzKXpg+SQPQKFOnn7MJn9QAenm+K04=)
2: BFC0298670DC11EF8B65D95AC4F9AE02.roa (hash: kzX0teoGqCYcrXmXpjad2Lv+QKDn7uXbylM76fvPiSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl
rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D16, serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2
Validity
Not Before: Jul 23 04:51:37 2026 GMT
Not After : Jul 30 04:51:37 2026 GMT
Subject: CN=6a619dd9-94dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:0e:19:99:bd:1d:a3:c8:30:61:c7:f1:38:
c1:49:91:91:58:e1:56:52:a2:0c:b4:c3:3e:d6:48:
60:1e:ae:23:8b:5d:f4:4f:8a:d4:7d:84:97:8c:15:
fc:dd:76:65:90:c9:ec:1e:fa:01:07:89:5c:66:5b:
f8:04:6d:1e:e1:8d:10:dc:aa:49:e5:ae:b1:ff:ab:
40:09:30:1c:e3:7d:49:a4:5d:fb:d9:82:43:19:d8:
53:18:8f:91:20:d8:f1:e2:2d:af:75:5a:0b:10:4a:
07:3f:6c:a4:70:5c:96:3f:9d:be:6f:7e:b4:41:02:
c1:34:4e:2e:e2:ad:87:58:b4:2e:8f:3f:6a:b1:94:
f7:34:ab:aa:f7:a9:7a:b4:a0:1c:b7:49:b2:27:d3:
0c:59:b7:fe:9d:70:43:d1:77:34:40:aa:6e:6e:ca:
89:13:18:37:e6:81:0d:c7:8b:c9:56:39:05:90:ed:
c1:87:97:17:e4:ba:1d:0a:27:02:64:37:78:57:a6:
1a:c1:7f:fe:be:e0:7c:19:d0:f8:bf:39:23:a3:02:
95:6a:7b:49:1c:18:4b:01:f7:21:3b:d9:2e:0c:53:
c9:02:13:15:c3:62:94:7d:b7:b6:6c:df:94:a5:44:
52:8b:8b:c1:e3:10:de:7b:06:dc:ab:63:82:81:9e:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:17:27:9D:D0:2B:3D:1C:8D:18:30:39:AB:41:CC:36:8D:B9:41:AF
X509v3 Authority Key Identifier:
keyid:70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:0c:ec:68:8f:76:f5:03:dd:64:57:e7:1f:50:58:fa:b8:06:
ba:c9:42:cf:97:84:fc:a7:41:38:d6:de:47:27:50:af:77:45:
dc:76:73:e8:cf:44:a7:57:4e:e2:06:4a:46:98:36:d1:1c:94:
c1:8b:07:48:e3:7b:78:0d:fa:96:3d:c5:6a:68:e0:70:ce:c2:
88:50:c0:d8:8e:ff:69:99:f1:ea:3d:6b:6f:ab:59:32:d6:ab:
a9:b8:f3:32:fb:f5:8e:d1:2a:c4:f5:d6:4f:b7:f8:eb:ff:98:
6d:5b:20:f9:de:56:6e:ad:5d:6a:25:2f:78:ba:92:38:89:ef:
c7:ee:d0:df:48:8d:61:27:60:3e:99:e5:9e:cb:b1:a9:85:93:
b2:25:67:3b:11:ef:64:2d:28:e3:cc:05:75:c5:6f:59:a2:cc:
ab:49:0a:fc:d8:e1:fe:6e:8b:c8:df:57:88:07:a2:bb:3a:82:
16:6a:5d:d4:1d:02:cb:df:21:ae:86:92:fd:c7:2c:0c:d4:3a:
25:4f:2b:b4:74:6c:2e:77:8f:dd:2d:2f:91:ed:b9:3c:fc:07:
7d:22:92:2a:4a:8a:0d:dc:85:99:70:00:c7:ea:16:af:a1:50:
47:3f:42:50:bf:f0:a4:ef:c2:5b:fb:96:f5:b7:9e:8e:c2:ec:
68:36:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:23 2026 by rpki-client