
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json)
Hash identifier: Zw0ELBw+ryqnfHTjSGp0oZt7DIUMWevvZ2ovrQ9IzPY=
Subject key identifier: 21:8B:86:F5:00:EA:F3:5D:49:79:39:8C:12:DB:10:45:85:EA:A3:06
Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Certificate issuer: /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
Manifest number: 0154
Signing time: Sat 13 Jun 2026 05:08:21 +0000
Manifest this update: Sat 13 Jun 2026 05:08:21 +0000
Manifest next update: Sat 20 Jun 2026 05:08:21 +0000
Files and hashes: 1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: ZO5pbMf3sIBrTFnVV2kb20M06/DEO9zcvtpd9cBlZvc=)
2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: GoBUmsaixA+94AMiq1K0M2Do/VJgCC/YQV6fr/kdH1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Validity
Not Before: Jun 13 05:08:21 2026 GMT
Not After : Jun 20 05:08:21 2026 GMT
Subject: CN=6a2ce5c5-4a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:f8:82:81:f8:84:fc:4b:aa:ed:e5:91:07:
3c:af:35:d1:8d:70:e9:fe:18:4f:c5:55:02:79:dc:
d0:eb:5a:05:d7:7b:d1:ae:87:c1:ea:f2:1c:f7:9f:
5e:66:bb:ed:df:7a:77:c8:54:4b:28:73:09:d7:ca:
52:cd:68:62:5a:4e:fe:e0:53:3c:33:c8:ce:b6:0e:
bc:19:21:11:a6:f4:c0:6c:1c:09:09:21:ec:4a:0b:
4c:01:0b:52:d5:73:7c:ca:62:0e:b8:3c:25:40:65:
77:c5:2a:70:e6:b0:9d:4e:af:9c:a7:6f:5a:14:6e:
d2:86:6d:82:85:9d:63:2c:a6:27:99:6a:eb:2b:62:
8f:ce:7d:6d:3f:d5:42:50:47:26:18:95:85:ed:e3:
37:42:14:31:69:cc:ba:2b:a2:95:66:6b:a5:00:cd:
5a:54:9e:2e:b3:94:85:e0:f2:3c:c1:3e:bf:aa:9f:
33:ef:77:8f:3a:04:bd:80:df:58:c6:7b:c5:7d:bb:
5a:9d:a9:42:e6:da:c5:72:f8:3d:aa:e1:6e:08:10:
d7:cb:2b:9c:fa:35:4d:be:da:dc:28:08:b7:42:fb:
dd:f3:84:5d:48:0f:28:92:2d:2a:1f:35:11:05:11:
31:01:4d:7f:ac:fc:23:65:7d:94:35:f2:d5:9e:03:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:86:F5:00:EA:F3:5D:49:79:39:8C:12:DB:10:45:85:EA:A3:06
X509v3 Authority Key Identifier:
keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:fa:30:61:1d:b2:9f:99:25:cf:c4:24:fc:78:b4:51:28:de:
49:e9:8e:07:ff:0d:e2:fd:57:09:55:7f:a2:5d:6d:e6:8f:ec:
05:36:67:cd:fd:cf:32:d0:77:b0:78:2b:4f:c2:79:cf:f5:bd:
d3:2c:7d:2a:0c:73:e0:bc:fc:ce:82:dc:29:c9:16:5d:09:8a:
e2:9b:05:87:8b:23:42:6e:cd:2c:0a:a0:a0:23:4f:1c:cb:a1:
18:d9:24:d1:51:2c:d6:7f:55:83:36:4a:4e:cf:0d:90:6e:ce:
40:f8:24:c4:9d:a3:4e:d3:b0:de:c1:59:e4:7c:a4:6a:2d:77:
b5:91:60:38:eb:af:fd:d8:43:fe:01:d2:40:1e:c6:4b:3e:36:
76:5a:42:86:cd:64:e7:66:11:49:6b:b5:7d:a9:3a:a6:a4:d3:
41:38:bd:a9:20:a2:4e:2e:66:67:f2:1d:e3:4c:44:c8:df:2a:
a7:8c:2d:47:ed:b9:e1:e2:f9:64:f2:c1:de:fa:d7:41:53:66:
40:6a:f5:19:79:14:6b:f1:4e:75:82:f4:d3:df:1f:a1:91:15:
63:aa:d6:f7:a3:35:ad:c8:65:04:2b:6c:c1:82:da:61:2a:a3:
69:e9:9d:66:6b:66:f9:c2:dc:b4:e4:9b:82:fe:2e:8b:87:5d:
1f:77:fb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:08:34 2026 by rpki-client