
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json)
Hash identifier: bwSdXZdURgcO/5uu9hi4rA6xjoQC0O5KIm4EK6WraUI=
Subject key identifier: 9C:0C:31:8D:A5:18:9A:EC:8E:74:DB:CA:8D:9C:76:78:33:86:6C:AF
Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Certificate issuer: /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
Manifest number: 0138
Signing time: Fri 17 Apr 2026 05:10:59 +0000
Manifest this update: Fri 17 Apr 2026 05:10:59 +0000
Manifest next update: Fri 24 Apr 2026 05:10:59 +0000
Files and hashes: 1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: HUAjstoaghojd7dije8Hx1lkipcsPivx+s4I6n8ktvk=)
2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: GoBUmsaixA+94AMiq1K0M2Do/VJgCC/YQV6fr/kdH1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CCA, serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Validity
Not Before: Apr 17 05:10:59 2026 GMT
Not After : Apr 24 05:10:59 2026 GMT
Subject: CN=69e1c0e3-f71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:22:e9:ea:31:7c:48:8f:3d:e2:84:de:19:
ea:df:83:59:4a:a1:5a:7d:65:9f:1f:8d:27:52:0c:
03:e5:ea:15:b3:14:f8:86:b5:89:ba:1d:87:44:07:
94:58:f9:47:73:a0:4b:04:dd:14:19:9b:4e:09:1a:
5f:49:3e:0c:87:85:cc:2c:32:cd:f1:00:0c:b1:8d:
f3:3b:72:11:7f:ce:94:0e:30:7f:46:7f:db:4f:6c:
18:5d:99:ee:11:c7:72:48:3c:a2:16:d3:ad:69:ae:
b2:0f:0b:cb:70:59:32:39:56:c8:01:8f:81:b2:1e:
6c:31:60:a3:6b:85:31:e4:ab:5e:01:76:30:ff:26:
f7:61:cc:c3:95:d6:ec:0b:bf:44:b7:cb:98:92:eb:
8f:58:d9:4a:c1:16:f9:5a:77:14:74:ec:76:4c:26:
d1:7b:6e:1a:09:b6:49:41:e0:4f:47:f7:e3:8f:92:
f6:37:7b:e5:f0:a8:9e:dc:82:ef:3d:17:4d:37:9c:
cd:6f:64:73:18:f7:05:b0:c1:aa:4b:58:1a:ae:bb:
67:4d:32:f0:bd:7f:14:f8:d1:ba:24:4d:37:af:1e:
25:de:48:6a:99:fe:d0:3e:17:33:95:bc:42:18:5f:
44:72:a8:74:30:8c:d7:7b:fa:d0:59:10:4f:26:17:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0C:31:8D:A5:18:9A:EC:8E:74:DB:CA:8D:9C:76:78:33:86:6C:AF
X509v3 Authority Key Identifier:
keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:00:3b:ec:cc:6e:88:0d:e6:80:e4:e1:c8:d3:69:ea:75:2b:
67:19:22:06:89:1c:6d:f5:63:df:32:12:cc:ba:b9:c3:a8:7b:
46:0b:bf:e1:c3:6f:6f:fe:34:51:53:27:04:38:98:5e:24:fc:
94:88:73:ea:60:d0:b1:8d:07:be:c9:15:03:fc:9c:ce:b1:91:
46:56:31:74:d7:52:d0:bc:3e:14:af:68:21:2f:b2:9b:db:15:
85:16:f3:a1:17:04:70:2b:d2:56:53:16:d8:97:ed:99:69:9d:
4a:37:eb:87:a2:96:bb:4a:83:01:c1:94:24:4b:17:96:6c:a7:
99:52:1a:30:56:7f:3b:0c:8c:26:6c:10:67:4d:bd:f9:67:a6:
b8:8b:02:14:42:1d:99:17:38:8d:4d:b3:eb:76:19:1c:d7:fa:
1e:44:76:a1:0b:19:21:dd:8d:4b:7a:aa:96:70:b3:31:07:ea:
db:fe:88:db:2d:11:86:1a:8e:61:2f:df:0b:c3:74:c5:28:30:
38:3b:f5:bb:21:6b:72:21:de:30:28:93:44:22:b3:23:a4:71:
9e:71:0c:1c:90:f4:eb:43:bd:9f:2e:b0:95:c5:58:71:5d:76:
7d:51:c7:0f:14:3f:18:55:f0:77:a8:77:7a:29:64:52:59:77:
53:c4:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:14 2026 by rpki-client