
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier: 65thkGE+0SwYoQlQqcUPCRvUOUzf/gN+/OWJ418qAj4=
Subject key identifier: B6:69:5D:BE:4B:21:AA:F3:4B:EA:76:2E:17:66:8E:3D:73:B8:13:49
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer: /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number: B6
Signing time: Fri 09 Oct 2026 07:39:01 +0000
Manifest this update: Fri 09 Oct 2026 07:39:00 +0000
Manifest next update: Fri 16 Oct 2026 07:39:00 +0000
Files and hashes: 1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: e9d5CC5e1a2L6GOroYNo4YQ+mHUTQO8kTKOGnQ0fFHo=)
2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Validity
Not Before: Oct 9 07:39:00 2026 GMT
Not After : Oct 16 07:39:00 2026 GMT
Subject: CN=6ac89a15-18e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:67:15:69:18:c8:ca:75:12:c7:87:68:9a:
cd:f3:16:2e:c5:a1:8c:3e:bd:36:93:ba:31:22:8b:
3b:44:16:8d:53:59:e0:36:0f:02:7b:c9:1c:28:70:
63:3b:20:45:10:13:ab:2f:a4:4a:c1:a3:f4:35:4b:
a4:93:1b:83:97:47:cc:9d:a3:39:6b:ac:af:21:a9:
bc:5e:6a:b8:22:f8:de:be:6b:d4:78:69:57:61:5f:
42:6c:5a:f5:1e:f5:d9:8e:aa:5c:29:de:2e:97:26:
97:9b:bd:cd:e5:79:c5:32:0b:e2:c8:c5:42:b7:c0:
0b:88:99:5a:f1:94:57:82:55:f2:94:7f:e7:0d:61:
bf:46:6c:72:4d:04:9b:22:87:2b:57:e0:23:87:76:
4d:57:4a:59:79:d4:90:72:86:60:9d:23:29:4f:2b:
d1:f8:be:38:1c:98:f5:f8:47:80:17:85:36:df:df:
73:bb:57:88:fc:a5:fc:fa:a3:77:08:95:54:94:3d:
b2:bb:df:27:55:6f:e7:58:74:c1:85:c5:92:79:a6:
54:3c:5b:71:cc:63:53:72:ef:f0:61:6a:0f:b9:11:
17:b8:fc:19:ab:2f:d8:f6:91:b4:15:04:20:86:5f:
44:11:b9:4e:5d:5b:dd:a7:42:18:59:3f:cd:09:29:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:5D:BE:4B:21:AA:F3:4B:EA:76:2E:17:66:8E:3D:73:B8:13:49
X509v3 Authority Key Identifier:
keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:af:1a:6d:5f:72:a3:c3:8c:6e:7b:48:6a:1b:ab:6e:0e:ad:
cf:5c:1e:db:38:35:42:90:d1:2a:5d:85:d0:ea:31:ef:44:6c:
bc:2e:de:64:5c:13:e0:56:b2:84:72:53:e1:1d:68:02:b3:b4:
5f:40:d6:e8:cd:b9:ae:f3:35:bb:9f:7f:67:4f:cb:5e:c7:f9:
15:6c:08:b2:e7:69:e7:6c:b2:b4:88:62:42:5e:f3:8b:76:40:
bb:4b:83:0d:8f:f8:24:3c:e7:7e:3b:20:69:21:86:47:33:78:
73:03:17:90:29:5e:0c:00:f0:1f:36:ed:67:3f:7c:68:48:fa:
f7:53:b6:92:56:ca:a2:f9:e7:8d:a9:ae:f8:1d:ba:3f:47:aa:
51:44:05:29:f0:e4:ac:11:7f:d3:cb:3e:dc:6e:a7:2d:52:5b:
af:ae:34:04:64:61:c8:8a:7f:ce:4e:ba:98:90:77:01:a7:d2:
75:e3:56:c0:38:ce:57:b8:33:40:46:a1:d9:ad:d9:14:93:a0:
36:72:6a:6b:f1:74:ad:f6:ca:b8:12:3f:dd:31:5e:2d:74:86:
e7:35:82:60:20:b4:fd:a3:ae:31:5b:d7:53:fa:97:48:3d:83:
92:c9:5c:cd:c8:f8:b3:65:04:56:27:1a:d0:5c:30:cc:6c:fd:
e2:0a:ec:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:35:48 2026 by rpki-client