
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json)
Hash identifier: H11JO+RfTYr0owGx/lY5SBAHNA22qBzsl7G4fNQp+cc=
Subject key identifier: 31:BF:2F:6D:62:5D:12:77:D2:AD:19:C5:BC:1A:08:FF:A7:53:C7:9E
Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Certificate issuer: /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
Manifest number: 0168
Signing time: Thu 23 Jul 2026 06:28:17 +0000
Manifest this update: Thu 23 Jul 2026 06:28:17 +0000
Manifest next update: Thu 30 Jul 2026 06:28:17 +0000
Files and hashes: 1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: 0U8xa4SqHh4a+O+cHin0XFPu9UH7k93dfeer/fGrP6Q=)
2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: GoBUmsaixA+94AMiq1K0M2Do/VJgCC/YQV6fr/kdH1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Validity
Not Before: Jul 23 06:28:17 2026 GMT
Not After : Jul 30 06:28:17 2026 GMT
Subject: CN=6a61b481-0854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:9e:c8:fc:e8:ac:ce:c7:c1:87:f1:05:3c:
a9:b5:37:9e:88:ff:7a:2e:44:09:53:fa:23:e4:24:
00:4b:29:8f:8d:a7:2c:d0:3e:5a:71:a5:2c:94:c2:
6b:37:db:05:79:cb:5a:c2:f5:b3:2a:e0:6b:b3:90:
7b:1c:90:32:df:17:79:e6:77:0a:43:24:43:27:84:
17:47:ad:34:8e:04:8e:c5:e6:77:7d:06:9d:ab:99:
c1:62:4e:a6:17:1a:9c:42:1e:5d:9d:d4:ff:88:14:
12:01:a8:b5:fd:6a:92:44:e6:30:76:c7:bc:89:f7:
2c:13:e4:75:c4:84:5f:cb:3a:dc:a7:a8:e5:a6:68:
34:c4:7f:34:66:35:96:11:ad:29:5c:37:b2:1d:1c:
0e:6d:6e:ca:3b:33:19:38:e4:c5:1f:e5:7d:07:aa:
30:7d:b0:40:73:1d:bb:f9:f0:1b:6a:0a:9f:5d:bc:
0d:32:ea:a3:85:2a:05:29:dc:ed:de:6a:0f:6e:cb:
d7:86:a4:f6:b1:76:27:4d:72:3d:f3:6f:f7:1f:f4:
88:df:5f:f5:b3:8b:41:86:0c:9a:73:1b:ca:5d:a7:
7c:d1:b6:a2:23:00:6e:e3:57:35:2b:f2:0e:20:19:
da:c3:05:7c:a7:b9:18:13:5f:cd:59:95:99:bd:57:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BF:2F:6D:62:5D:12:77:D2:AD:19:C5:BC:1A:08:FF:A7:53:C7:9E
X509v3 Authority Key Identifier:
keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:54:5c:b1:20:82:e2:27:d8:59:a6:62:43:5f:9c:1a:cd:f1:
7e:c6:4a:82:ca:72:9b:9b:60:1c:2a:cd:df:ad:b6:26:f1:bb:
44:03:9e:b5:68:2c:c9:6f:6c:36:50:21:d1:19:9b:92:26:e3:
eb:d9:52:45:8f:81:f2:0b:ca:2e:37:d8:0c:28:54:41:b5:75:
f1:8a:38:cb:eb:af:07:52:dd:3e:97:18:48:dd:65:09:a0:f0:
f1:f2:14:39:ac:f8:06:82:7b:dc:85:00:73:20:72:57:f5:39:
3f:64:75:5f:4b:bf:15:f4:4a:75:ee:28:68:f6:dc:db:f8:2c:
e7:f8:67:fa:d0:1f:bf:67:7c:7c:53:72:a2:14:9d:ea:2c:08:
8e:c4:1b:d1:b5:f3:d3:38:2c:69:6c:32:de:5f:f3:19:db:18:
99:52:a9:dc:4d:8b:16:69:83:59:f7:0c:eb:c9:ca:88:58:b3:
aa:91:ee:a1:4d:61:80:f3:89:ad:49:79:be:14:c4:ea:5e:3d:
f8:d1:80:6f:5f:b4:b7:8c:fc:90:56:aa:4e:0d:bd:c8:f6:4d:
14:7d:ad:f9:9c:2a:28:f5:06:5d:82:77:69:e5:91:e9:fe:14:
f7:93:63:5f:e8:d6:11:29:97:d4:45:73:5a:a4:6b:82:c9:8c:
9b:49:1a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:12 2026 by rpki-client