
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json)
Hash identifier: x7DQ9HoZRo9ckWT0fcX4stA5FLhBrvaIhbeHDtn4sYY=
Subject key identifier: A1:AD:5C:BE:F2:8C:B4:28:4B:E3:ED:F1:8F:06:75:1B:AC:4F:3E:84
Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
Manifest number: 015A
Signing time: Mon 27 Jul 2026 07:02:09 +0000
Manifest this update: Mon 27 Jul 2026 07:02:09 +0000
Manifest next update: Mon 03 Aug 2026 07:02:09 +0000
Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: GG0aDd1reMzho6cG63HtbO+kijD0OEN/qAu6/rfMTHc=)
2: A647525E853B11EFB513D149C4F9AE02.roa (hash: 8/z43AfGGthVBc9cfR73JH6jugiVT0aL27yCo3q+XYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Validity
Not Before: Jul 27 07:02:09 2026 GMT
Not After : Aug 3 07:02:09 2026 GMT
Subject: CN=6a670271-5fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:4b:f4:3a:1b:10:8d:ec:31:a6:f6:21:8e:
e1:d6:5a:1c:78:6f:5f:3a:e7:bb:d1:93:7b:84:79:
70:23:89:87:5f:e1:38:a8:f7:65:14:2e:b4:46:0e:
65:8a:69:09:a3:6c:8c:c9:58:9c:70:f5:a8:e6:ca:
56:31:e9:79:eb:2a:d1:fc:cd:15:1c:c8:7a:5b:23:
1f:ff:61:09:7e:60:a4:d9:56:5e:83:d6:b2:99:26:
3e:f3:44:e1:64:47:3b:eb:94:d9:bb:9f:f3:60:a1:
4f:a0:53:d6:59:2e:55:98:7b:e9:ab:78:48:ce:4b:
3e:a4:e7:4f:64:86:3c:8a:5c:a1:fa:db:8c:19:3d:
ba:b9:db:46:fb:97:82:0d:20:30:3e:cf:52:64:91:
e9:96:11:00:87:0d:43:31:f4:28:4d:f7:10:d3:c9:
08:4d:a5:16:26:f9:ab:b4:0e:c4:9b:30:47:83:02:
0a:46:c8:fa:d0:95:18:a6:fc:71:41:c4:80:34:0b:
1d:8d:f6:51:16:9c:21:68:72:72:cb:ba:29:04:02:
9e:63:a6:a2:4e:f2:fd:3c:33:44:0e:a8:d7:30:fa:
9a:f5:44:0a:14:d7:f3:ad:fc:b2:fa:36:5d:84:47:
16:19:d7:3d:41:56:61:e8:06:e5:86:ff:aa:20:4b:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AD:5C:BE:F2:8C:B4:28:4B:E3:ED:F1:8F:06:75:1B:AC:4F:3E:84
X509v3 Authority Key Identifier:
keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:e9:cb:c1:c4:4f:62:7d:94:29:cf:0b:54:13:fe:1b:d0:e1:
1c:f1:31:13:46:7b:05:e9:dd:f1:d2:09:94:05:53:e8:26:74:
45:af:30:e2:60:3e:05:ef:ff:ec:c4:ed:6c:e8:37:3c:39:2f:
f6:4e:69:97:7a:df:b7:6f:ca:de:00:66:89:98:7e:78:3d:a6:
2b:74:2d:88:c2:c9:28:80:5c:cb:32:1f:29:22:cb:51:0a:a3:
c7:e2:6a:59:c9:fa:c1:b6:6f:1b:a5:72:87:ba:7d:db:2c:33:
95:10:3f:44:93:99:ac:4d:34:06:5d:12:50:7a:7a:39:0f:a3:
43:66:cf:7b:61:a3:9d:36:a9:3f:20:ac:23:59:1c:03:5c:55:
04:b1:82:ac:ff:fe:ce:e8:9d:d1:03:7f:02:06:4f:45:40:ca:
ac:ed:0b:b3:4e:89:96:32:76:dc:dc:ad:99:32:78:e8:eb:be:
ac:aa:8b:fa:d8:c9:29:2b:31:6c:c6:b7:ae:a9:f5:94:a8:45:
a8:b3:bd:27:21:79:5c:69:f3:bb:87:07:cf:2a:51:5c:8f:c8:
42:08:f7:ce:1d:49:db:32:f5:9a:da:cd:ff:e2:0b:a4:da:c4:
05:f6:f0:75:6d:a7:8b:7c:70:83:03:ab:ad:63:ec:b8:17:5d:
eb:79:af:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF
N0MxRTEyOEIwHhcNMjYwNzI3MDcwMjA5WhcNMjYwODAzMDcwMjA5WjAYMRYwFAYD
VQQDEw02YTY3MDI3MS01ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxiVL9DobEI3sMab2IY7h1loceG9fOue70ZN7hHlwI4mHX+E4qPdlFC60Rg5l
imkJo2yMyViccPWo5spWMel56yrR/M0VHMh6WyMf/2EJfmCk2VZeg9aymSY+80Th
ZEc765TZu5/zYKFPoFPWWS5VmHvpq3hIzks+pOdPZIY8ilyh+tuMGT26udtG+5eC
DSAwPs9SZJHplhEAhw1DMfQoTfcQ08kITaUWJvmrtA7EmzBHgwIKRsj60JUYpvxx
QcSANAsdjfZRFpwhaHJyy7opBAKeY6aiTvL9PDNEDqjXMPqa9UQKFNfzrfyy+jZd
hEcWGdc9QVZh6Ablhv+qIEszuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGtXL7y
jLQoS+Pt8Y8GdRusTz6EMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1
M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz
OGR1LVJnMjlCT19ud2VFb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKenLwcRPYn2UKc8LVBP+G9DhHPExE0Z7Bend8dIJlAVT6CZ0Ra8w4mA+Be//
7MTtbOg3PDkv9k5pl3rft2/K3gBmiZh+eD2mK3QtiMLJKIBcyzIfKSLLUQqjx+Jq
Wcn6wbZvG6Vyh7p92ywzlRA/RJOZrE00Bl0SUHp6OQ+jQ2bPe2GjnTapPyCsI1kc
A1xVBLGCrP/+zuid0QN/AgZPRUDKrO0Ls06JljJ23NytmTJ46Ou+rKqL+tjJKSsx
bMa3rqn1lKhFqLO9JyF5XGnzu4cHzypRXI/IQgj3zh1J2zL1mtrN/+ILpNrEBfbw
dW2ni3xwgwOrrWPsuBdd63mv2A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:24 2026 by rpki-client