
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
File: xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json)
Hash identifier: SthSbas3940Y8KYGuA9tLoS0TIocRcr7uUPMXKjXatw=
Subject key identifier: 6F:60:9D:87:6E:70:F6:82:AB:EC:8C:BF:C3:4D:08:55:CD:A4:8F:70
Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C
Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C
Certificate serial: 081A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
Manifest number: 080B
Signing time: Tue 18 Aug 2026 21:36:20 +0000
Manifest this update: Tue 18 Aug 2026 21:36:19 +0000
Manifest next update: Tue 25 Aug 2026 21:36:19 +0000
Files and hashes: 1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: yXpHDmgWq5yR3I45XfWBG2EgVivTN8ZrC1KSfQ2sukk=)
2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: cbziy5kL+sj+D8P7UhXxl7JFukexlK2Ww4yA68qkd2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl
rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C
Validity
Not Before: Aug 18 21:36:19 2026 GMT
Not After : Aug 25 21:36:19 2026 GMT
Subject: CN=6a84d053-6094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:42:0c:8e:5e:d3:23:04:5d:30:97:09:02:
80:85:c8:4e:45:ee:89:10:37:3f:47:ff:17:2c:ca:
d8:90:d2:d2:bb:44:3f:63:d8:2e:55:fc:44:35:85:
f0:a3:6e:a2:95:f4:bd:e0:9e:28:cf:36:09:97:e8:
9c:14:04:ef:5c:aa:e8:73:44:b9:34:a2:4b:62:29:
20:eb:76:40:d0:1c:a0:09:77:6d:69:b5:b6:d6:12:
96:4b:35:63:71:81:fe:a5:74:87:08:57:6d:0f:7a:
45:7f:09:0e:d4:26:d7:3b:fb:d2:5f:e0:09:be:ea:
42:c8:6c:8e:4b:ad:6c:d6:72:61:08:f6:f6:89:55:
ad:61:dd:24:67:75:0c:0d:3c:b7:38:a1:ac:3f:8e:
a5:0b:26:f2:81:a7:5c:4a:bf:69:51:43:0f:d3:36:
79:4e:82:9a:98:e1:d0:5e:05:b0:62:7a:d4:a7:c0:
dc:84:76:ad:ca:22:c8:c6:7a:48:1b:5b:dc:58:ed:
3f:38:7b:78:aa:89:b5:54:d8:c6:0e:04:8c:7a:37:
1f:02:ef:fc:20:6d:d3:81:a8:54:67:4b:28:3c:0c:
8a:e4:c2:c5:ec:27:07:e0:ef:48:ea:2d:5c:1b:eb:
fa:9b:49:f7:7b:78:81:88:4a:2a:d8:b8:4b:93:63:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:60:9D:87:6E:70:F6:82:AB:EC:8C:BF:C3:4D:08:55:CD:A4:8F:70
X509v3 Authority Key Identifier:
keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:57:fb:51:d9:7a:de:57:fa:c1:46:ef:8d:df:5d:e5:83:7c:
dd:02:18:1e:4f:d7:30:ca:55:04:21:ba:0e:75:92:aa:8d:80:
cc:d5:15:5c:79:82:2f:e6:46:ca:cb:f4:d1:56:f1:d7:2d:7f:
12:92:0d:a8:be:19:23:e5:03:d0:64:f7:db:86:ac:88:e1:e3:
1f:1b:6d:ff:c6:02:77:4e:5d:c7:53:6d:89:d2:3b:33:b9:36:
cf:5d:5f:73:69:e0:3b:63:10:cf:6f:f0:d1:dc:c5:fe:b5:b7:
f1:88:6c:83:b8:2f:75:c5:8e:99:83:da:67:9a:f6:b3:ab:89:
04:7b:4c:f6:f5:65:df:3a:fd:6b:87:24:9f:62:46:bb:e9:29:
85:1a:c5:e0:19:1d:bd:f9:a8:bf:79:76:95:f9:1f:22:8f:3f:
5a:b2:46:50:94:9f:b4:10:b4:4e:75:1c:b8:7f:ea:d5:47:45:
07:ee:e2:49:9c:7b:4c:07:29:53:45:4e:cc:1c:34:38:e3:c0:
5d:5e:5c:7c:58:8c:de:31:60:2f:bf:39:12:3b:ee:6b:5c:7b:
3d:c9:24:8b:61:49:1f:ec:48:4b:91:dd:9b:c5:b5:44:4b:e4:
c8:8f:cf:9a:6e:9a:e5:1b:af:90:4e:17:88:d8:b8:99:32:9d:
72:4f:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:53 2026 by rpki-client