
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
File: cI8eBxM4VcgHTu1fjIO0RmpgesI.mft (raw, json)
Hash identifier: 5xTVanxeUQG/mijy4+qZ2lC91hyVbEFuJiacIBTFksA=
Subject key identifier: 28:09:47:2D:D6:8E:34:C7:2B:F9:16:9A:1F:FC:A5:4F:C7:62:DC:94
Authority key identifier: 70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2
Certificate issuer: /CN=A9171D16/serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2
Certificate serial: 01C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
Manifest number: 01BF
Signing time: Wed 13 May 2026 03:58:13 +0000
Manifest this update: Wed 13 May 2026 03:58:12 +0000
Manifest next update: Wed 20 May 2026 03:58:12 +0000
Files and hashes: 1: cI8eBxM4VcgHTu1fjIO0RmpgesI.crl (hash: fcqqp9bRMmCa8kHONuDPNqyEfzPdF0Gc6WsN9C2Z4w8=)
2: BFC0298670DC11EF8B65D95AC4F9AE02.roa (hash: kzX0teoGqCYcrXmXpjad2Lv+QKDn7uXbylM76fvPiSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl
rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D16, serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2
Validity
Not Before: May 13 03:58:12 2026 GMT
Not After : May 20 03:58:12 2026 GMT
Subject: CN=6a03f6d4-e4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:5c:d1:43:94:ba:6b:0d:cc:90:7b:9e:c0:
81:6c:c4:6d:2b:55:bc:15:fb:d4:c3:77:72:d5:7a:
9d:6e:a8:7e:73:55:e5:6a:51:88:d7:10:4f:53:c0:
ea:98:79:21:3f:62:a5:a0:2d:0a:0c:ff:9a:b5:67:
e8:5a:c2:04:2f:e3:32:19:4d:9e:7a:1b:bb:99:de:
c2:c3:10:47:83:f5:dd:8c:4f:01:c2:ff:18:85:3f:
cc:fe:a2:27:76:12:0a:66:80:3b:e0:16:b9:d2:2c:
7b:aa:a7:ea:7c:e3:06:83:c6:da:83:9e:b6:68:84:
ff:cd:02:6b:be:10:40:66:b4:79:83:4a:ef:f6:d4:
c4:9f:ec:a6:78:b8:ca:f8:2b:6b:81:16:cf:0d:c8:
88:3a:b4:76:1c:98:ff:34:75:21:fa:1b:d9:4a:f6:
fa:23:de:0b:e6:0a:74:ab:18:80:a9:b6:98:ae:cc:
42:7d:94:67:a4:74:a5:f0:b2:7b:01:33:3f:40:33:
3b:7b:4f:51:ab:08:2a:a9:b3:c7:38:9a:93:a7:5a:
5f:47:1e:1f:b0:27:1b:86:f4:b7:0d:ad:6a:b9:e7:
c6:d2:f0:80:76:67:4d:39:25:88:21:31:1e:ef:b9:
8c:56:52:d7:69:65:56:24:84:a2:66:72:6b:bc:50:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:09:47:2D:D6:8E:34:C7:2B:F9:16:9A:1F:FC:A5:4F:C7:62:DC:94
X509v3 Authority Key Identifier:
keyid:70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e1:51:6d:77:ac:1e:59:dc:60:0f:7b:07:c3:cd:ef:16:28:32:
28:a8:af:97:fa:ec:63:57:79:3f:5e:0c:f2:69:2c:9a:3b:38:
e1:d7:10:ae:c6:17:0f:06:6f:e7:6a:d9:20:96:fc:e1:f9:2d:
64:95:08:17:fa:4b:e0:86:2a:3b:e3:cd:81:92:94:bb:78:9b:
ae:47:de:83:85:aa:3b:69:af:bf:05:8c:90:d6:f7:b1:33:df:
cf:e7:15:1a:18:69:ef:57:52:f6:ce:40:4c:3b:52:d3:b3:63:
ba:22:ce:ef:97:e7:f2:24:39:b0:e2:6c:4f:58:01:86:9c:44:
d0:56:c4:39:e8:de:8e:19:8d:cd:07:0f:e3:68:c0:bf:3a:72:
c2:34:47:42:b7:dc:59:56:14:b3:3d:62:95:89:aa:9a:22:62:
b2:26:12:ca:83:f8:46:7f:58:ae:1d:1f:91:06:7f:22:c3:bc:
c3:fa:f4:4e:e2:5c:e4:bf:28:04:15:7e:05:d1:08:21:e7:15:
59:c6:d3:62:a5:0f:a4:74:19:6a:c9:53:9f:26:43:36:e7:ea:
7a:6b:a8:95:df:1e:b3:98:5b:0e:96:6a:85:2e:7e:a0:4a:81:
50:6a:3a:8b:cb:74:7e:2a:8f:47:16:23:5a:92:cf:dc:e4:34:
ad:60:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:29 2026 by rpki-client