
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json)
Hash identifier: mrXc66NwMjNn+BhqJFMbdzHsuV0sKTRqMztNIdKwRQA=
Subject key identifier: 47:E5:FD:13:78:EB:08:A4:70:9E:D3:20:29:5D:07:2B:E9:DD:9C:F6
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
Manifest number: 0172
Signing time: Tue 29 Sep 2026 05:15:44 +0000
Manifest this update: Tue 29 Sep 2026 05:15:43 +0000
Manifest next update: Tue 06 Oct 2026 05:15:43 +0000
Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: aZjHE5wqab1MTcED9a7vzzik6QhZ0aZQWwQiczeMpN0=)
2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: oEyX+N8POVIt0NPqCPVZb7yBeCptqcWugjG7I1xvlZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 05:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Validity
Not Before: Sep 29 05:15:43 2026 GMT
Not After : Oct 6 05:15:43 2026 GMT
Subject: CN=6abb4980-ab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:fb:fd:48:ca:2b:05:ce:19:f9:46:a5:df:
47:ac:2a:d0:cd:f8:b9:70:46:76:ee:a0:96:28:1d:
c5:83:30:9a:82:c4:73:58:ce:ab:96:45:09:f5:ea:
42:19:67:f5:e7:40:81:f7:1c:2e:38:05:5f:0f:1f:
bc:58:e7:c0:78:01:64:fb:1b:27:42:61:ba:c1:c9:
59:56:2b:f1:90:0c:ce:e9:15:87:c3:d7:6c:2f:b6:
a9:d7:56:0a:21:a5:7b:8c:40:bf:40:11:34:81:fb:
66:9a:f7:e4:17:bb:8a:b6:7a:53:9a:b4:76:c0:a1:
cf:bc:b2:bd:11:56:9b:33:69:9f:df:ee:6f:a4:a8:
6f:7a:24:59:1a:b3:20:14:e3:fb:0a:2c:8c:dd:e0:
d0:8f:01:5e:d4:40:1b:d6:00:07:61:28:d8:fe:0f:
f1:3b:de:46:4c:46:eb:f4:7a:bf:d7:8d:8c:ff:99:
db:d5:33:d5:9b:4a:b2:40:e4:21:8c:b6:47:ae:af:
ed:bb:b0:f5:b5:c9:c3:a0:6d:12:f3:9c:c0:21:a8:
95:92:ba:11:4b:20:06:e7:40:8c:77:31:59:2b:ad:
4b:0b:e9:94:5e:2c:6b:65:44:ad:c3:b7:47:e9:63:
27:2f:ae:20:23:73:d7:e4:6a:ac:e1:7c:ab:b9:86:
e5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E5:FD:13:78:EB:08:A4:70:9E:D3:20:29:5D:07:2B:E9:DD:9C:F6
X509v3 Authority Key Identifier:
keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:63:88:fb:47:d4:43:23:a7:a6:4a:b9:16:d0:13:55:4b:8b:
2e:ac:f4:17:b2:70:cc:0c:b4:e7:7d:33:86:05:88:79:6e:fa:
7f:cd:8d:61:7e:a5:e4:53:f9:7d:d1:12:0d:2a:4f:0a:fe:97:
29:c7:ce:26:4a:d4:86:5d:ac:c0:9f:46:9d:ce:50:14:08:4e:
16:e8:ea:89:25:07:9b:c3:2b:85:08:ca:1b:13:6c:19:4a:e5:
09:5f:e2:aa:cd:8e:43:7a:03:05:74:15:d7:29:8f:f5:79:7e:
9a:ee:4a:e4:7b:6f:7f:8d:a1:3d:b1:81:70:e0:85:ef:82:3a:
90:c5:af:51:05:bd:a8:a5:a4:89:e2:c1:83:45:98:c7:94:10:
7c:de:6e:ca:36:28:0b:44:29:2b:8d:96:a9:6b:c9:c9:29:a4:
ce:b9:d6:4c:60:09:11:ce:b1:bb:54:50:79:74:46:09:84:e2:
4f:e6:b3:c7:9e:39:b8:9c:ab:b5:f9:da:c8:2f:33:44:90:4f:
5c:3c:c0:18:cb:b4:c7:08:f1:00:24:70:bb:85:02:8d:46:2d:
51:c7:1c:c5:9f:33:7e:f7:c8:54:de:d5:f6:0c:b6:5a:a0:24:
c8:dc:80:df:10:0b:57:31:6b:1a:06:91:ef:06:4b:a3:7c:ca:
48:83:7b:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I2MzMxMTAvBgNVBAUTKDEzRDdBMTNCNDIzQkI2RTg3QTFBNzVCNzQ5M0YwQkMx
OUQwQ0VBQTMwHhcNMjYwOTI5MDUxNTQzWhcNMjYxMDA2MDUxNTQzWjAYMRYwFAYD
VQQDEw02YWJiNDk4MC1hYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZf7/UjKKwXOGflGpd9HrCrQzfi5cEZ27qCWKB3FgzCagsRzWM6rlkUJ9epC
GWf150CB9xwuOAVfDx+8WOfAeAFk+xsnQmG6wclZVivxkAzO6RWHw9dsL7ap11YK
IaV7jEC/QBE0gftmmvfkF7uKtnpTmrR2wKHPvLK9EVabM2mf3+5vpKhveiRZGrMg
FOP7CiyM3eDQjwFe1EAb1gAHYSjY/g/xO95GTEbr9Hq/142M/5nb1TPVm0qyQOQh
jLZHrq/tu7D1tcnDoG0S85zAIaiVkroRSyAG50CMdzFZK61LC+mUXixrZUStw7dH
6WMnL64gI3PX5Gqs4XyruYblPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfl/RN4
6wikcJ7TICldByvp3Zz2MB8GA1UdIwQYMBaAFBPXoTtCO7boehp1t0k/C8GdDOqj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EMEFCOTNFNDg2
RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1aDZHblczU1Q4THdaME02
cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjYzMy9EMEFCOTNFNDg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1
aDZHblczU1Q4THdaME02cU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI2OI+0fUQyOnpkq5FtATVUuLLqz0F7JwzAy0530zhgWIeW76f82NYX6l5FP5
fdESDSpPCv6XKcfOJkrUhl2swJ9Gnc5QFAhOFujqiSUHm8MrhQjKGxNsGUrlCV/i
qs2OQ3oDBXQV1ymP9Xl+mu5K5Htvf42hPbGBcOCF74I6kMWvUQW9qKWkieLBg0WY
x5QQfN5uyjYoC0QpK42WqWvJySmkzrnWTGAJEc6xu1RQeXRGCYTiT+azx545uJyr
tfnayC8zRJBPXDzAGMu0xwjxACRwu4UCjUYtUcccxZ8zfvfIVN7V9gy2WqAkyNyA
3xALVzFrGgaR7wZLo3zKSIN7jA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:58:26 2026 by rpki-client