
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json)
Hash identifier: AVVr8RWFd2LjL9u/u8D7QsQejn+nak7SqerFdMfl6yA=
Subject key identifier: D1:D1:B0:47:BE:05:FB:D6:DE:F5:90:5F:40:C4:EB:A0:24:C0:85:42
Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Certificate issuer: /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
Manifest number: 0145
Signing time: Wed 13 May 2026 05:24:45 +0000
Manifest this update: Wed 13 May 2026 05:24:45 +0000
Manifest next update: Wed 20 May 2026 05:24:45 +0000
Files and hashes: 1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: +Y09PXAM/1CH+TrquttbQx+/9ELBU0+TWYYWUKThKP0=)
2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: GoBUmsaixA+94AMiq1K0M2Do/VJgCC/YQV6fr/kdH1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Validity
Not Before: May 13 05:24:45 2026 GMT
Not After : May 20 05:24:45 2026 GMT
Subject: CN=6a040b1d-58a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e5:f8:df:7b:a8:d8:76:ad:e3:12:90:41:d7:
69:b9:b1:09:43:ec:fb:f6:ad:49:42:d7:05:fa:57:
70:91:48:e1:9e:ba:07:46:03:92:65:32:f2:f3:21:
7d:94:0b:78:66:d7:e8:c7:5e:93:b7:db:7d:18:c5:
f5:ca:4c:ec:19:43:95:0b:49:7e:7e:48:64:66:0e:
da:c9:cb:09:c4:98:d8:4d:97:1d:ad:93:00:59:e4:
2a:df:33:80:a4:0f:96:51:a8:24:91:29:a5:bb:02:
ae:bc:23:14:b0:a5:34:34:f1:40:c5:b8:a4:41:7c:
55:1d:39:53:8f:ed:94:c1:ca:bf:c4:fa:b0:78:c4:
ad:de:b3:c4:b9:09:bd:f6:e9:06:7b:61:25:a7:ee:
bd:ad:08:98:e1:70:dd:9d:31:9e:f0:9d:39:8c:a4:
00:a8:3b:db:5f:97:45:57:ae:08:56:03:ae:63:41:
4b:10:e9:cc:e0:65:8b:c9:33:aa:21:10:e3:bf:61:
04:c7:1b:28:14:ab:31:c6:39:dc:5b:1a:72:d3:a1:
90:52:11:10:00:d2:b0:72:f1:92:c1:c6:2e:98:f9:
ba:79:67:12:55:b9:53:c1:c9:c6:03:35:83:46:d0:
15:6d:60:a5:74:60:ec:53:ff:95:fe:e7:05:35:bb:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D1:B0:47:BE:05:FB:D6:DE:F5:90:5F:40:C4:EB:A0:24:C0:85:42
X509v3 Authority Key Identifier:
keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:c4:dc:82:c4:96:68:d4:8f:43:51:e1:3e:8e:a9:41:bb:3d:
67:5f:6b:09:8b:61:3e:a3:6b:15:da:80:21:e5:4d:e8:b1:08:
9f:14:a0:ff:d1:69:ae:1d:a1:36:55:02:40:43:86:59:c3:7c:
a7:c0:4e:93:0e:e1:87:4e:0e:5d:5e:8b:34:c5:8a:f3:f9:b7:
5a:3f:8f:39:0e:18:87:3b:d0:f2:94:d7:dc:d4:f6:bf:42:2a:
df:b8:9c:65:59:7e:05:a7:35:a6:2e:d3:f9:fe:b8:19:c6:06:
86:fc:ee:f4:94:b2:9d:80:26:4d:3a:2c:0f:83:4a:97:21:73:
d7:83:d5:53:fb:1e:f6:79:a0:4b:ea:88:38:03:76:69:57:3b:
3a:73:1a:c4:3d:30:18:44:b0:a3:67:3f:5f:79:ff:0d:bc:f2:
9c:0a:84:7a:15:de:fd:13:91:08:5b:6a:e2:f7:21:81:04:64:
d0:c3:b8:58:7c:bd:48:da:6b:3c:03:f5:2e:85:71:38:6e:dd:
0f:76:c5:02:53:d5:c2:bd:8f:fa:76:60:7b:fa:da:08:1a:8b:
30:29:51:54:23:1f:50:fa:b3:fc:cd:d6:2d:db:5d:03:d9:5a:
0c:b2:5b:1f:6e:65:49:fc:ff:83:56:18:1c:9a:6e:2b:3a:e1:
5b:95:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:04 2026 by rpki-client