
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json)
Hash identifier: zgni5cEys2lfL2pskheLeD+9B42mRg60MwoXGw8WqBU=
Subject key identifier: 00:2E:BD:7C:35:F3:74:C2:64:B4:A4:44:4E:53:13:7A:ED:F7:9A:74
Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
Manifest number: 014D
Signing time: Fri 17 Jul 2026 06:24:27 +0000
Manifest this update: Fri 17 Jul 2026 06:24:26 +0000
Manifest next update: Fri 24 Jul 2026 06:24:26 +0000
Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: thx3QK/VmNayRFvpW4TrZNeRNJWILhFqVFkrS1E6Kms=)
2: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=)
3: C4C01E3800D111F19FE1BBA3726F56BC.roa (hash: 7TdxN5pwG9InxHjLBF8NeXCwHbUoryPl86+yQHm4dE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Validity
Not Before: Jul 17 06:24:26 2026 GMT
Not After : Jul 24 06:24:26 2026 GMT
Subject: CN=6a59ca9b-726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:75:d7:2d:a5:c7:03:ea:84:eb:e7:ab:be:
12:ba:f3:be:6f:74:da:79:55:08:0b:fe:bc:07:9f:
16:ec:68:10:c0:82:0d:63:5b:7b:51:6a:66:1a:d2:
f6:4f:f8:f5:2e:6b:4f:09:73:d9:e9:54:84:cf:d3:
f8:b6:00:b4:22:a0:c9:5f:a7:45:a0:fb:74:c1:8d:
db:8c:70:3b:96:08:07:cb:96:22:f4:ca:18:1e:e0:
15:6a:ff:28:05:99:e6:ae:90:b1:50:7d:a5:ea:f0:
de:11:b2:49:03:41:6f:be:9d:71:13:7e:42:2f:4b:
c5:bb:4f:16:03:2e:45:2b:de:e6:9f:77:6e:7a:78:
64:f6:36:43:e5:bb:07:1f:67:97:3e:35:bc:de:a8:
00:f1:5c:d1:84:3c:65:23:fa:70:35:08:69:27:0c:
ac:12:a4:43:85:aa:2b:2f:a2:f8:d9:ab:0d:66:51:
43:92:e5:93:7d:8e:e3:a6:7a:d5:77:c5:0f:7e:3a:
43:9c:2d:79:3b:e6:ff:7a:ce:08:0c:65:f2:e9:fc:
40:4c:0f:e9:93:34:3c:68:fe:29:ab:d2:bb:80:ee:
a4:f9:14:2f:cd:ab:6b:ef:27:5c:d5:53:d7:1d:da:
c6:a9:91:1b:5b:bf:c8:63:60:1b:1f:4b:ca:9f:f6:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:BD:7C:35:F3:74:C2:64:B4:A4:44:4E:53:13:7A:ED:F7:9A:74
X509v3 Authority Key Identifier:
keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a3:9f:54:d6:e6:7a:66:37:0c:de:d1:82:64:d9:0f:93:10:
6f:ba:6e:87:22:9b:58:f2:e7:f1:8d:26:49:7d:ee:49:c5:c0:
3a:80:20:ea:68:de:91:ac:52:cf:0d:5e:f8:95:a0:a5:1e:eb:
00:57:9e:1e:e6:80:7f:2e:56:78:6f:50:b1:f1:a9:c1:d3:e2:
93:ea:2d:b6:a0:59:5f:92:48:e5:ba:9b:94:36:36:24:59:4e:
31:d4:dc:32:51:57:57:3a:d4:0c:53:cc:91:10:e9:c0:ff:e3:
1c:51:da:df:48:b8:10:22:38:ae:dd:80:e1:38:97:f9:98:bb:
e4:be:42:dd:fb:01:09:01:95:cc:d2:a2:c9:8a:aa:0f:e1:13:
3f:f9:d9:49:78:40:c9:e4:3e:18:e4:33:86:96:7c:35:82:86:
70:2d:72:9e:42:be:2a:4a:27:ab:65:c0:84:a2:e4:2f:15:71:
e2:cd:6e:70:a4:68:fa:14:81:32:c8:6f:e5:cf:4e:2a:35:26:
ca:05:98:68:38:3e:46:aa:e6:46:6a:9b:3a:b1:f3:50:20:2e:
54:7c:07:16:3e:ba:17:c8:65:57:b3:75:8e:21:55:0f:30:4a:
aa:2c:2a:31:31:f7:2a:de:72:22:54:a9:15:4f:34:d5:fc:5d:
a3:8d:6b:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3
QkI2NzIzRjcwHhcNMjYwNzE3MDYyNDI2WhcNMjYwNzI0MDYyNDI2WjAYMRYwFAYD
VQQDEw02YTU5Y2E5Yi03MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0PN11y2lxwPqhOvnq74SuvO+b3TaeVUIC/68B58W7GgQwIINY1t7UWpmGtL2
T/j1LmtPCXPZ6VSEz9P4tgC0IqDJX6dFoPt0wY3bjHA7lggHy5Yi9MoYHuAVav8o
BZnmrpCxUH2l6vDeEbJJA0Fvvp1xE35CL0vFu08WAy5FK97mn3duenhk9jZD5bsH
H2eXPjW83qgA8VzRhDxlI/pwNQhpJwysEqRDhaorL6L42asNZlFDkuWTfY7jpnrV
d8UPfjpDnC15O+b/es4IDGXy6fxATA/pkzQ8aP4pq9K7gO6k+RQvzatr7ydc1VPX
HdrGqZEbW7/IY2AbH0vKn/ZMPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAuvXw1
83TCZLSkRE5TE3rt95p0MB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE
MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx
V3d4MjdUMS1zdUI3dG5JX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeaOfVNbmemY3DN7RgmTZD5MQb7puhyKbWPLn8Y0mSX3uScXAOoAg6mjekaxS
zw1e+JWgpR7rAFeeHuaAfy5WeG9QsfGpwdPik+ottqBZX5JI5bqblDY2JFlOMdTc
MlFXVzrUDFPMkRDpwP/jHFHa30i4ECI4rt2A4TiX+Zi75L5C3fsBCQGVzNKiyYqq
D+ETP/nZSXhAyeQ+GOQzhpZ8NYKGcC1ynkK+Kkonq2XAhKLkLxVx4s1ucKRo+hSB
Mshv5c9OKjUmygWYaDg+RqrmRmqbOrHzUCAuVHwHFj66F8hlV7N1jiFVDzBKqiwq
MTH3Kt5yIlSpFU801fxdo41rtw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 11:26:21 2026 by rpki-client