
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json)
Hash identifier: NaJxuDiGhfbrUD9NzMqp2d0a5BxU6bvY0JwctQDuXVg=
Subject key identifier: C0:50:20:F5:20:20:FD:57:10:D2:28:90:4C:29:40:7C:6F:FB:C0:5A
Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
Manifest number: 018E
Signing time: Thu 05 Nov 2026 05:23:53 +0000
Manifest this update: Thu 05 Nov 2026 05:23:52 +0000
Manifest next update: Thu 12 Nov 2026 05:23:52 +0000
Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: O/uRWpI/gkwNjE6ql7LAiT1Xv36/zUdXjSa83OlzWp8=)
2: A647525E853B11EFB513D149C4F9AE02.roa (hash: 8/z43AfGGthVBc9cfR73JH6jugiVT0aL27yCo3q+XYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 05:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Validity
Not Before: Nov 5 05:23:52 2026 GMT
Not After : Nov 12 05:23:52 2026 GMT
Subject: CN=6aec12e9-1107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:5a:30:1b:b8:08:df:87:9a:d6:7a:bc:7b:
1c:64:4f:53:dc:df:83:5e:0d:52:88:c5:c4:7e:e0:
f0:72:51:9b:38:aa:7b:30:f4:5a:34:7e:b6:36:27:
93:a8:02:ae:30:8f:82:5f:ab:bc:a4:74:2f:41:e8:
d4:f3:82:4d:46:c3:bf:6f:eb:4e:99:53:97:ed:0d:
ad:fa:71:a9:af:25:26:b3:5f:7e:f7:f9:0c:76:e5:
2e:f8:aa:d3:4a:0c:3f:13:cd:b2:3d:67:c1:41:12:
c7:ec:e2:79:ff:35:ef:9c:f4:fc:2d:09:10:87:84:
2a:b9:aa:b2:2c:e2:df:c0:23:08:3d:f1:75:55:e7:
0a:90:e7:79:1b:dd:81:71:4e:63:58:53:9e:84:71:
2f:ef:da:f3:e8:0e:0d:48:a7:6e:fb:b0:1c:71:1c:
37:c2:79:aa:c3:b7:93:59:a5:12:c7:47:29:a6:bb:
07:7d:77:09:72:30:37:60:3d:c0:7a:cb:c6:5e:5e:
03:79:32:27:b2:e7:04:ef:f2:fa:53:04:02:24:6a:
ee:62:69:85:2d:a7:21:8a:b7:9c:cf:3b:98:ef:fd:
26:c4:5c:55:06:ae:0c:7d:46:88:cd:c9:29:3d:03:
2d:2d:d4:9f:aa:3e:04:a9:e1:64:4d:ad:6a:b5:cf:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:50:20:F5:20:20:FD:57:10:D2:28:90:4C:29:40:7C:6F:FB:C0:5A
X509v3 Authority Key Identifier:
keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8d:42:68:06:14:6c:8f:3a:ec:05:fd:c0:9f:0d:96:5c:b6:
48:d4:7c:9c:26:3d:ef:b2:12:0c:2e:6d:8f:1d:a2:7c:fe:a9:
45:cc:86:24:a1:bd:f7:d7:a4:43:9d:b2:a3:9e:fb:5b:13:ca:
21:1e:ca:d3:02:dd:57:31:04:85:47:d5:12:dd:82:e0:8f:ba:
66:b2:63:c0:93:36:4a:bc:b2:93:6b:03:d0:7b:68:1b:9a:49:
d7:c3:24:a3:e7:21:be:b0:a7:cc:4b:b1:8d:2c:29:c1:a7:13:
15:99:60:62:ab:cd:e0:fc:b8:b9:8c:ba:a2:b4:4b:8f:30:2b:
c0:d5:8f:94:15:a7:1e:fa:21:6f:a0:09:b7:d7:ad:f8:42:52:
97:b5:7b:13:c7:38:57:b1:4d:f7:e8:36:02:18:dd:20:2c:36:
1b:62:37:9d:51:34:f8:dd:c9:ac:25:83:4a:15:f6:3d:60:3f:
c2:41:a2:75:b5:44:d9:8a:d6:6b:85:00:43:5a:7c:38:67:88:
e6:97:e6:11:8d:52:21:df:f8:f8:63:3d:87:42:c4:55:92:71:
d1:5a:df:0e:69:3c:87:79:a1:22:31:d5:e7:c8:c0:81:e6:52:
fc:f5:17:0d:20:98:5e:68:f5:30:d1:81:54:29:00:54:87:e2:
54:d6:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 09:12:31 2026 by rpki-client