
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier: DFWWoBmPK1nbCPvvfh6gC+0tRGJHPyu+iJ4l/mN5KUs=
Subject key identifier: 85:3E:32:F5:1B:D6:5E:EE:6D:1B:52:E4:DF:60:F3:14:71:55:E8:F0
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer: /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number: 79
Signing time: Thu 11 Jun 2026 10:02:15 +0000
Manifest this update: Thu 11 Jun 2026 10:02:15 +0000
Manifest next update: Thu 18 Jun 2026 10:02:15 +0000
Files and hashes: 1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: 3SWCxWyrsINffb57GMh49yYyvBUQa/2/DDZniyFaJe8=)
2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Validity
Not Before: Jun 11 10:02:15 2026 GMT
Not After : Jun 18 10:02:15 2026 GMT
Subject: CN=6a2a87a7-3536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:b1:a4:34:31:64:6c:6c:f7:b4:85:fa:14:
35:ce:35:bb:54:a8:f9:80:fd:95:d0:c6:56:27:90:
a9:3b:6a:76:79:07:48:ee:5d:82:1c:05:a8:ce:83:
5b:de:4c:93:3e:8d:78:b2:da:10:70:a9:a5:bf:1e:
9c:6e:27:9b:df:54:2c:50:37:97:f1:67:5a:49:03:
a3:b0:dc:1f:b5:df:b7:93:d6:3c:21:3a:64:6f:dc:
df:29:e9:d2:0a:16:3d:60:05:bc:ab:73:88:e3:b9:
e6:8a:84:b2:fb:0b:f4:2d:b2:64:42:45:b2:e2:11:
fe:f4:08:f0:c2:04:fa:b1:5b:c3:34:6f:db:01:d7:
bf:02:03:4a:a1:3d:d1:7b:12:22:b4:3d:fb:d5:70:
e8:e5:b4:91:c5:4a:90:b7:ab:34:9b:97:21:c8:fd:
9c:c7:68:15:bf:13:b8:1a:c8:56:40:77:b7:b5:f6:
ea:1a:c7:a3:3f:7f:70:b0:6d:4f:cf:99:81:0f:c5:
13:4c:1c:07:7f:16:f5:d8:d5:3b:89:63:64:7f:c2:
3a:ea:db:d4:db:9e:3d:8b:82:e5:49:0f:6a:d2:32:
16:80:01:c3:12:6b:35:6a:04:d3:ea:45:80:16:a4:
f6:66:03:5c:d4:44:50:af:70:73:42:65:82:47:f7:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3E:32:F5:1B:D6:5E:EE:6D:1B:52:E4:DF:60:F3:14:71:55:E8:F0
X509v3 Authority Key Identifier:
keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c5:80:37:e2:16:ee:b2:70:3a:78:b6:55:64:7d:4a:98:49:
f1:b5:6f:7b:ce:4c:8a:be:d9:fd:ed:6e:95:af:e5:9d:86:8d:
02:23:4f:e3:d8:90:c1:30:01:cc:3a:dd:b9:05:61:92:94:af:
df:2a:74:4c:29:6a:9e:4c:ac:98:0c:8f:c6:ad:3d:79:35:92:
1c:14:9f:70:d9:50:91:e8:68:8e:cf:fa:29:ef:e4:4f:47:35:
c3:41:b0:9a:3e:0e:4b:96:ef:85:f0:27:4f:51:e1:1d:f2:6b:
b6:db:56:89:01:96:8e:e0:2a:74:08:3b:33:58:35:88:6c:06:
bc:c4:cb:d8:2e:3e:bc:a0:3f:0a:98:3b:3b:3b:67:df:07:1f:
dd:19:c2:e1:ac:a9:d3:6c:77:4d:38:f3:a6:34:53:4a:c7:4d:
44:fa:8d:5f:c5:00:91:84:ac:4b:37:ce:e6:ea:b9:6a:6e:fd:
2f:cc:62:28:ad:4b:01:ed:bb:a5:c3:83:13:76:be:17:91:8f:
30:d0:31:dd:08:6d:f5:e1:05:17:f6:5b:49:68:04:a5:be:ab:
8f:a1:f0:af:2e:e4:87:c9:f8:ae:37:ee:2d:3b:ce:ad:38:d6:
97:de:a1:5f:90:44:80:69:e1:af:28:d5:d9:3d:9a:2e:34:37:
45:1d:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:39:28 2026 by rpki-client