
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier: 9+xzwP8UM7x1dNLCpYJIL58cA7xwQ71lULD7agSx6To=
Subject key identifier: F7:E6:59:5E:23:19:31:12:A4:8D:3B:F2:71:50:A1:8E:39:70:05:3C
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer: /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number: 5E
Signing time: Fri 17 Apr 2026 07:44:47 +0000
Manifest this update: Fri 17 Apr 2026 07:44:47 +0000
Manifest next update: Fri 24 Apr 2026 07:44:47 +0000
Files and hashes: 1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: HAAohXvnlNWy7thf4zp/e8RBl+2dxGcWSdrx7xaYx8A=)
2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Validity
Not Before: Apr 17 07:44:47 2026 GMT
Not After : Apr 24 07:44:47 2026 GMT
Subject: CN=69e1e4ef-768c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:1f:d6:5c:9f:b8:fa:dd:fd:97:b2:dd:d2:
14:85:72:a2:6a:19:74:00:4c:4e:96:ee:74:79:f4:
04:64:90:39:a7:0a:34:76:f5:72:c1:bc:25:e0:96:
cb:31:2b:a8:58:3f:22:54:94:16:c9:e3:9d:b0:e4:
e6:f0:26:d1:8f:92:cb:54:63:d4:67:e2:17:4c:3a:
57:b6:d9:95:6e:5d:ab:be:65:78:10:fe:12:ec:9e:
a7:47:34:42:86:3a:2a:fc:6c:60:18:7c:33:69:8f:
f3:9f:a3:eb:b1:d7:37:01:46:4e:4f:2b:bc:76:7a:
21:64:10:19:93:d5:34:6d:99:55:8f:d2:b1:42:c7:
cb:12:ac:94:5b:47:0b:06:0a:35:11:68:1e:9c:b5:
4e:45:3b:f4:d2:cf:ff:7e:ad:d4:ce:0e:4c:db:6e:
1d:63:1a:a7:e2:07:b2:66:d2:96:76:db:07:5a:63:
10:76:8b:30:ab:43:7c:e8:b3:a5:bf:57:9b:69:1a:
9f:e4:54:de:3f:ad:0a:fc:07:b8:b2:2a:4e:cb:7c:
c3:de:e5:0c:cb:4b:23:55:c3:c2:3a:f4:d8:a1:65:
41:8d:06:f6:9b:33:67:36:f8:b8:a8:cf:d9:82:ef:
5f:6d:5e:a5:72:1e:db:9a:c3:fa:16:e8:bd:9e:9d:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:59:5E:23:19:31:12:A4:8D:3B:F2:71:50:A1:8E:39:70:05:3C
X509v3 Authority Key Identifier:
keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:6f:1d:d5:7d:29:2b:40:46:2f:a8:ab:34:c2:8c:4f:cb:e3:
6a:c4:c6:31:46:c3:f2:93:6f:25:58:61:3a:e0:79:e1:5a:3b:
9c:ab:e2:28:19:cf:0b:1a:41:72:35:15:5a:55:71:fe:ca:00:
8c:9f:99:20:a8:24:89:b1:d0:d3:df:cc:96:31:35:0e:39:24:
7a:44:b7:d3:45:c4:41:21:dd:c3:58:c8:9d:e2:04:38:6a:c1:
e1:7e:ee:6e:f6:7a:ed:40:4e:fe:02:47:7e:80:30:3d:9f:34:
5e:f9:99:8c:dc:fc:29:74:c9:6c:6a:7a:31:4c:3f:e7:2b:95:
70:55:55:69:35:8f:b7:07:13:48:c3:af:47:c4:a5:95:85:4a:
57:df:4b:5a:de:25:b2:57:68:fc:b9:e6:4e:78:ed:f6:99:ca:
77:a9:6d:ba:4e:8e:e6:41:e4:1e:03:cd:6f:e7:ab:44:07:c6:
10:d7:8b:1b:21:73:3e:12:ff:5d:a4:05:9f:dd:72:fd:57:71:
b5:e2:c9:88:e3:cf:95:d5:b1:cc:c3:23:6b:44:d0:13:8c:bc:
7f:1f:a3:2e:0a:8b:ca:f3:20:8a:6d:92:04:ba:f1:3e:93:7a:
f1:d7:5e:e5:75:27:28:bb:da:6c:ed:9b:78:75:46:4b:aa:d8:
08:94:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:20 2026 by rpki-client