
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json)
Hash identifier: B3rClFLDGm1QP18Ps2/nC1hCbRlLHFzSADQ6TBubqys=
Subject key identifier: CF:E4:7F:2B:A4:E1:2B:1D:C4:66:3E:59:C3:56:32:CA:CD:DE:46:66
Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
Manifest number: 0127
Signing time: Wed 15 Apr 2026 05:19:46 +0000
Manifest this update: Wed 15 Apr 2026 05:19:45 +0000
Manifest next update: Wed 22 Apr 2026 05:19:45 +0000
Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: j3ziqF5ulvu3EpuBhRuiRa1OtvGdGjSie/23z2FpvpI=)
2: A647525E853B11EFB513D149C4F9AE02.roa (hash: 8/z43AfGGthVBc9cfR73JH6jugiVT0aL27yCo3q+XYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B
Validity
Not Before: Apr 15 05:19:45 2026 GMT
Not After : Apr 22 05:19:45 2026 GMT
Subject: CN=69df1ff1-e144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:d8:dd:8b:d4:bd:79:d1:f8:ba:33:10:8a:
4f:9b:77:07:89:9b:eb:04:dd:33:bd:7c:93:7b:ef:
f0:9c:ce:2a:98:85:4f:4b:8b:2a:00:af:97:90:46:
23:b4:8b:73:ce:43:1f:5a:a7:4f:3d:c9:6b:69:da:
ee:60:ea:d5:2a:45:92:23:96:92:7f:44:84:97:77:
5f:da:ea:7a:fe:62:68:e5:1f:9f:14:d8:ad:b7:bd:
f4:77:bd:d5:df:5d:2b:dd:e0:6f:7f:47:30:8f:09:
6b:ed:e8:83:e9:06:52:5c:a6:fc:52:68:7c:e7:33:
76:6a:7c:de:7b:23:b5:ca:df:18:67:51:19:7a:f2:
7f:49:bc:89:73:40:1e:d9:29:59:2e:7d:c2:2b:50:
d9:4e:c0:9f:73:1a:90:be:b0:5b:98:0d:50:ee:c6:
80:cc:b4:98:0a:60:16:c4:96:66:94:c1:52:50:98:
7e:89:02:9b:8d:b5:7d:cd:63:56:80:a9:ca:8c:d2:
21:7b:d1:40:4c:29:e6:a4:78:c0:ae:90:5f:04:92:
ca:f6:9d:e7:01:31:0c:5d:34:e9:61:40:28:c9:71:
9c:18:07:af:a9:81:60:cc:18:0b:f4:38:71:0c:3f:
47:25:8d:9e:30:af:f9:1e:09:04:3b:65:e4:7c:23:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:7F:2B:A4:E1:2B:1D:C4:66:3E:59:C3:56:32:CA:CD:DE:46:66
X509v3 Authority Key Identifier:
keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:78:24:1e:30:7f:41:d1:52:58:e3:b4:aa:89:e9:79:e3:bf:
c2:e2:92:f9:c5:87:4e:70:af:c3:bf:c3:c9:2d:57:24:b9:e3:
23:66:49:9c:2e:ec:17:39:93:2d:41:00:ba:13:31:6d:34:0b:
ef:5c:0b:57:98:68:f0:5a:29:a8:f4:2d:f7:58:77:fc:de:b0:
e7:dc:9a:df:a3:70:45:dd:0c:85:36:09:ae:e9:4c:cf:87:70:
b1:93:13:e0:5e:68:0b:59:37:71:82:8d:1e:66:ad:7c:61:c2:
1c:fc:b0:a2:d1:29:41:68:83:71:d8:3d:75:f7:18:39:3f:2e:
6d:c7:e7:a1:02:cb:55:33:38:45:d5:b9:5f:5e:a9:03:a2:e7:
f5:ae:56:d0:13:ef:5d:63:79:89:84:2f:6e:6a:dd:0a:02:e3:
4d:e4:2c:91:85:36:64:20:3b:32:5e:75:5e:02:cb:35:be:b4:
9b:a1:6a:fe:82:2c:f8:b5:68:9a:25:d1:24:d9:60:83:b8:51:
aa:a2:8b:43:9c:77:2c:32:1f:95:5e:3b:42:38:7b:6c:14:14:
d2:95:25:fb:b2:11:0d:c2:f8:77:1e:5e:11:5c:82:e5:34:77:
3d:a9:12:d1:2f:c4:7b:da:06:3d:e9:d9:68:ca:9b:2b:1a:76:
ab:70:78:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF
N0MxRTEyOEIwHhcNMjYwNDE1MDUxOTQ1WhcNMjYwNDIyMDUxOTQ1WjAYMRYwFAYD
VQQDEw02OWRmMWZmMS1lMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl2/Y3YvUvXnR+LozEIpPm3cHiZvrBN0zvXyTe+/wnM4qmIVPS4sqAK+XkEYj
tItzzkMfWqdPPclradruYOrVKkWSI5aSf0SEl3df2up6/mJo5R+fFNitt730d73V
310r3eBvf0cwjwlr7eiD6QZSXKb8Umh85zN2anzeeyO1yt8YZ1EZevJ/SbyJc0Ae
2SlZLn3CK1DZTsCfcxqQvrBbmA1Q7saAzLSYCmAWxJZmlMFSUJh+iQKbjbV9zWNW
gKnKjNIhe9FATCnmpHjArpBfBJLK9p3nATEMXTTpYUAoyXGcGAevqYFgzBgL9Dhx
DD9HJY2eMK/5HgkEO2XkfCM6fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/kfyuk
4SsdxGY+WcNWMsrN3kZmMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1
M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz
OGR1LVJnMjlCT19ud2VFb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEHgkHjB/QdFSWOO0qonpeeO/wuKS+cWHTnCvw7/DyS1XJLnjI2ZJnC7sFzmT
LUEAuhMxbTQL71wLV5ho8FopqPQt91h3/N6w59ya36NwRd0MhTYJrulMz4dwsZMT
4F5oC1k3cYKNHmatfGHCHPywotEpQWiDcdg9dfcYOT8ubcfnoQLLVTM4RdW5X16p
A6Ln9a5W0BPvXWN5iYQvbmrdCgLjTeQskYU2ZCA7Ml51XgLLNb60m6Fq/oIs+LVo
miXRJNlgg7hRqqKLQ5x3LDIflV47Qjh7bBQU0pUl+7IRDcL4dx5eEVyC5TR3PakS
0S/Ee9oGPenZaMqbKxp2q3B4Vg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:52:29 2026 by rpki-client