
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
File: CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json)
Hash identifier: 2GRHyKD27awWh8vPt20SLMlwH+RJRx3dGBybTgMbfCo=
Subject key identifier: 63:81:60:5F:CA:F5:F8:63:D7:55:6D:EE:36:CF:A3:C4:6D:7C:D8:51
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Certificate issuer: /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
Manifest number: 06B9
Signing time: Mon 20 Jul 2026 23:27:41 +0000
Manifest this update: Mon 20 Jul 2026 23:27:40 +0000
Manifest next update: Mon 27 Jul 2026 23:27:40 +0000
Files and hashes: 1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: oulj9DtrKdgeEt2jJsUPLFdTXKrb4pvWFPVzfS96gpo=)
2: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: 5OgF+X2LoxN0P+i647U0hTdD4GO+IWC1F/YvG+N71mY=)
3: AEEA30A444C911F0B1847067C4F9AE02.roa (hash: 6FCwJQ7Hqu9T8wGvhRafVaBteW1BYD7lgrGRZ0Zmux0=)
4: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: 0d8bbf6HjJPorzi+T4Hyc8LZ4syqGpJzbgTNxkLreXg=)
5: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: 39GHxxx7Fn5zKnCQd2JJT99uUGGd/APAhehkZtN8lrM=)
6: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: 0dQke78mRtg8wIYZ3ojGRxbDU4jUz/0rwyFcMRKo6hI=)
7: 32A0AE9A487111F1B156B37CA7833773.roa (hash: DKe9Z65ECDEnGziuZbJ9KLM7gjdSljl8GxgLXc635yg=)
8: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: X+spXolOWWwuHY9Z83c9dy9Vthj0rRVggTg5yRTJYB0=)
9: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: QT8qZMQxmuuDteCOnOSOp3NwZ0+//1IQE1zDb3G1+qs=)
10: 1432240216D511F194D24B17313D8C67.roa (hash: MjJ7iTMVv/oLbWDQgK4oBBouBYsGMcdTJrXAiauGZ0U=)
11: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: Xo9SbW0hHxgSfQuZO4oC/bgXuLNqUVMBniXjZSkvX0c=)
12: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: PmZWdw64LAwMI3NXzeEum/iMQ1lGbZaRPEZVFE8w0Kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Validity
Not Before: Jul 20 23:27:40 2026 GMT
Not After : Jul 27 23:27:40 2026 GMT
Subject: CN=6a5eaeed-f182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:e4:6f:ae:19:46:4d:20:bd:6f:01:e4:b6:
98:ce:8b:03:64:b5:07:22:b7:7a:db:86:38:09:4d:
ca:94:81:4b:a2:fa:5d:9a:20:a8:ef:15:e3:47:a5:
d6:08:db:03:10:21:7e:d5:8c:8c:99:12:b9:49:b6:
40:6f:9c:7d:55:7b:ea:b9:a7:f0:83:44:5e:d0:e5:
13:0d:a3:c7:23:0a:72:ee:f6:2f:7e:05:cd:af:8a:
04:13:96:f9:8d:3f:12:51:23:61:73:76:0e:73:61:
36:9a:d6:f1:a7:20:7a:90:5b:3b:d6:bf:c9:44:9e:
1f:e0:ca:b3:20:53:1a:36:97:c1:9c:cc:96:a7:6a:
25:f4:41:23:06:60:07:96:f2:27:50:4a:3e:42:ee:
68:97:06:ed:63:1c:49:7d:5d:37:77:7a:5e:fb:f0:
c0:27:0c:2e:07:ae:db:ca:c7:21:19:06:5d:d6:3c:
1d:cc:35:e6:9b:09:3b:da:d4:2c:67:d4:8a:a2:15:
6b:9b:9e:00:0b:aa:8a:e7:9c:d1:59:75:bd:fb:e1:
10:e1:ab:f0:22:bc:e6:b1:f9:d8:10:78:42:dc:cf:
ac:fd:10:5e:8a:90:76:94:83:85:f9:71:5d:b1:15:
6d:12:17:13:14:bd:d9:26:5d:b5:95:9e:29:92:81:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:60:5F:CA:F5:F8:63:D7:55:6D:EE:36:CF:A3:C4:6D:7C:D8:51
X509v3 Authority Key Identifier:
keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:be:b9:cd:7e:9a:6d:2c:8f:80:05:ec:25:94:be:b4:20:d3:
8d:35:0d:f4:e8:27:c0:55:c2:ba:02:cb:fe:e5:90:b0:13:37:
9e:f8:39:b6:cf:a4:39:2e:b0:d1:4c:69:65:dc:6b:78:b1:0d:
46:9c:20:b1:49:7f:73:fc:f9:7e:68:a7:2a:33:51:9f:49:ed:
16:e0:79:46:b8:a4:af:be:9d:69:9e:28:b6:7c:b2:4b:79:ef:
a8:84:5c:79:b1:3c:82:d9:20:46:1a:36:7d:56:d2:0b:76:bc:
af:c6:ef:44:83:26:19:53:d2:18:57:5b:5f:54:47:7e:cf:3f:
30:8e:19:82:18:1f:96:5d:11:f9:a8:43:47:78:b5:bc:0b:27:
db:81:cc:b1:ea:5c:74:5a:38:4c:c6:0b:9b:fe:c1:20:a1:ec:
05:33:69:ff:8e:dd:9c:77:f5:04:49:bb:0b:a3:31:ab:c5:86:
66:cb:d0:36:71:1b:f3:6a:43:56:19:5d:44:2d:fa:ce:60:b8:
7a:72:06:52:ec:d3:54:af:7f:b9:54:2f:c2:54:ec:5b:19:42:
0b:e8:34:8d:e6:bf:74:dd:8d:92:85:38:43:c0:2e:a9:00:96:
53:ec:e7:2d:0d:46:5a:38:38:23:1d:ea:f4:02:65:51:3f:74:
ef:9d:8d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:57:05 2026 by rpki-client