
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier: OSGFKi4/0vXmaBn/QZYn1YwDTW+UEpslM3Erd/Pr2p0=
Subject key identifier: 68:9E:63:E3:92:CD:A2:52:44:5A:98:01:99:EF:B7:E1:35:E2:B5:13
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer: /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number: 63
Signing time: Mon 27 Apr 2026 07:50:52 +0000
Manifest this update: Mon 27 Apr 2026 07:50:51 +0000
Manifest next update: Mon 04 May 2026 07:50:51 +0000
Files and hashes: 1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: TigzpP4tDJcPb0wsJQ1jMkN56sH9eWC4QOFWKLZRmy4=)
2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 07:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Validity
Not Before: Apr 27 07:50:51 2026 GMT
Not After : May 4 07:50:51 2026 GMT
Subject: CN=69ef155b-3efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:a2:9d:4d:df:be:b4:8d:1c:8e:4e:17:9b:
b1:7c:50:13:8f:7a:e3:84:7f:cc:ed:6b:4a:8f:ed:
9e:5b:54:01:ba:38:72:8e:9b:a7:c7:96:eb:2a:3b:
a0:0c:69:07:3e:d6:d0:87:b0:a8:e9:82:16:30:5a:
f4:53:d4:2c:46:9f:9e:8e:23:58:3b:1b:d6:28:de:
fa:02:e8:92:20:76:0c:4d:5f:d2:e6:be:5b:45:19:
ea:1a:00:5d:06:9f:35:57:79:0f:a4:ac:00:5d:7a:
75:d4:a1:c2:8b:51:cf:ef:5a:99:4f:75:59:96:f7:
95:9d:74:ea:5c:48:3d:db:e8:a0:ce:7c:11:34:a8:
51:70:bb:0e:49:94:be:be:54:ec:47:c4:a5:ed:09:
67:7b:ac:a7:80:78:12:bc:f0:08:b4:d1:1f:eb:3f:
49:ab:40:c4:2e:fd:71:53:08:b5:fb:00:2b:f8:ae:
f2:0f:ba:30:1f:ca:23:9f:be:fd:aa:e3:26:20:52:
0b:12:df:c1:02:8a:de:17:39:d8:5e:ce:94:6d:33:
5a:6d:56:6b:c6:39:2b:5a:86:03:49:d2:81:15:91:
e8:0a:8b:e5:c0:c3:ee:41:cc:c1:d8:76:d6:57:92:
5e:d4:d6:c2:e9:e6:71:8a:1e:13:f3:18:85:1c:96:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:63:E3:92:CD:A2:52:44:5A:98:01:99:EF:B7:E1:35:E2:B5:13
X509v3 Authority Key Identifier:
keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a1:88:df:ca:0f:91:44:6b:75:d3:ae:6e:74:42:23:3c:16:
ae:4b:66:e6:ed:7c:3d:f5:96:55:32:dd:e6:78:94:ce:0b:29:
94:1c:1c:6f:7d:55:b6:92:9f:81:9a:e5:5d:c4:86:62:d3:d5:
55:4d:87:c0:da:04:34:93:75:44:3a:70:cd:d6:7d:b8:73:bb:
7c:5f:86:b4:3a:00:69:fe:5b:cb:5c:da:82:20:6a:f8:c4:72:
c0:c8:1a:f8:e1:9a:44:85:1f:d5:5e:00:05:f9:37:38:05:12:
73:3c:8f:4e:12:a0:cc:ce:26:40:79:f4:2f:ce:5d:a9:c8:a2:
a6:b5:ac:79:c8:14:c1:6a:5a:96:eb:b5:24:38:01:1a:51:89:
44:1a:e2:53:14:62:83:93:50:a7:41:67:a7:67:be:80:41:85:
92:cc:6c:92:7d:d7:b3:88:e0:3c:92:be:0b:a8:c7:4a:19:71:
33:57:ce:12:de:46:d2:23:7f:e4:9b:06:34:1e:5b:89:48:f7:
6f:7e:17:c8:42:bf:15:09:20:a4:53:6d:f8:57:96:c6:5e:e6:
a2:34:fb:52:fc:f7:f5:10:f6:3e:a4:2b:74:06:ff:83:a5:b5:
e1:97:5e:f4:4b:02:0e:fa:b7:a0:1e:b2:dc:ad:fe:c6:79:69:
71:69:b1:95
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MTk5NjExMC8GA1UEBRMoNzA0QzM5RTlCMjMwMkVDOTdBOUNBRTk5RUNFNzk0NUI4
MUYyQ0JFRDAeFw0yNjA0MjcwNzUwNTFaFw0yNjA1MDQwNzUwNTFaMBgxFjAUBgNV
BAMTDTY5ZWYxNTViLTNlZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDET6KdTd++tI0cjk4Xm7F8UBOPeuOEf8zta0qP7Z5bVAG6OHKOm6fHlusqO6AM
aQc+1tCHsKjpghYwWvRT1CxGn56OI1g7G9Yo3voC6JIgdgxNX9LmvltFGeoaAF0G
nzVXeQ+krABdenXUocKLUc/vWplPdVmW95WddOpcSD3b6KDOfBE0qFFwuw5JlL6+
VOxHxKXtCWd7rKeAeBK88Ai00R/rP0mrQMQu/XFTCLX7ACv4rvIPujAfyiOfvv2q
4yYgUgsS38ECit4XOdhezpRtM1ptVmvGOStahgNJ0oEVkegKi+XAw+5BzMHYdtZX
kl7U1sLp5nGKHhPzGIUclqHVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaJ5j45LN
olJEWpgBme+34TXitRMwHwYDVR0jBBgwFoAUcEw56bIwLsl6nK6Z7OeUW4Hyy+0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxOTk2L0FGN0Y0RDZDQUU2
NzExRjBCNTM0RjYyNkM0RjlBRTAyL2NFdzU2Ykl3THNsNm5LNlo3T2VVVzRIeXkt
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvY0V3NTZiSXdMc2w2bks2WjdPZVVXNEh5eS0wLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx
OTk2L0FGN0Y0RDZDQUU2NzExRjBCNTM0RjYyNkM0RjlBRTAyL2NFdzU2Ykl3THNs
Nm5LNlo3T2VVVzRIeXktMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCfoYjfyg+RRGt1065udEIjPBauS2bm7Xw99ZZVMt3meJTOCymUHBxvfVW2kp+B
muVdxIZi09VVTYfA2gQ0k3VEOnDN1n24c7t8X4a0OgBp/lvLXNqCIGr4xHLAyBr4
4ZpEhR/VXgAF+Tc4BRJzPI9OEqDMziZAefQvzl2pyKKmtax5yBTBalqW67UkOAEa
UYlEGuJTFGKDk1CnQWenZ76AQYWSzGySfdeziOA8kr4LqMdKGXEzV84S3kbSI3/k
mwY0HluJSPdvfhfIQr8VCSCkU234V5bGXuaiNPtS/Pf1EPY+pCt0Bv+DpbXhl170
SwIO+regHrLcrf7GeWlxabGV
-----END CERTIFICATE-----
Generated at Tue Apr 28 13:11:58 2026 by rpki-client