
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json)
Hash identifier: vttwchhqutOKWO9/7QNYXypqbjarBbFyLf8Q6APZe3s=
Subject key identifier: 92:38:D3:EF:33:D4:44:99:CD:F0:34:9F:CC:00:DE:03:3F:4D:13:2D
Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
Manifest number: 0137
Signing time: Mon 01 Jun 2026 06:19:01 +0000
Manifest this update: Mon 01 Jun 2026 06:19:00 +0000
Manifest next update: Mon 08 Jun 2026 06:19:00 +0000
Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: 5nSlYN3G0GoGVKWGNa7/dMJnPZZctj3w9kL7qYtTwOk=)
2: C4C01E3800D111F19FE1BBA3726F56BC.roa (hash: 7TdxN5pwG9InxHjLBF8NeXCwHbUoryPl86+yQHm4dE0=)
3: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Validity
Not Before: Jun 1 06:19:00 2026 GMT
Not After : Jun 8 06:19:00 2026 GMT
Subject: CN=6a1d2454-74bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:da:e1:4a:94:54:f6:7e:1d:d5:42:9b:7e:
28:37:2c:14:07:8a:f5:31:8b:23:a6:d3:31:52:66:
80:e5:aa:cc:cf:cc:c2:ce:4c:47:15:74:43:46:a2:
24:78:b7:6a:e8:1e:0d:82:e7:a2:7a:a1:22:13:a5:
74:1d:17:73:08:c9:33:9b:83:be:e2:80:c7:8d:7a:
34:15:5c:52:1b:49:b7:0b:12:9d:bd:50:b0:e5:92:
6d:98:04:01:33:f0:67:d3:a8:80:65:d2:19:0f:34:
c3:56:e9:ad:e1:0c:e6:9a:97:51:a5:94:7e:d8:e5:
79:9e:6c:54:8e:87:29:cb:3a:62:00:96:7b:50:be:
8d:9e:0c:e5:62:4d:7d:23:fc:d5:7a:ea:b7:bc:24:
80:25:4f:73:48:55:2a:d7:61:cb:c2:d3:aa:a9:a6:
ef:8a:16:db:0e:47:58:44:9b:95:fd:0c:5a:0f:38:
1b:49:9e:85:48:b2:3f:b6:40:c8:a8:b9:ff:e5:4d:
43:f9:43:58:a6:53:b8:83:e8:ea:31:b8:94:65:5d:
d8:d8:52:f6:f2:fa:d3:7c:8f:f8:1b:2b:a1:f2:42:
8b:8e:02:e0:ec:64:5a:74:7f:d1:7e:6b:dd:94:72:
77:d2:a9:93:46:9a:c2:ac:e5:31:d0:3e:fd:4a:de:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:38:D3:EF:33:D4:44:99:CD:F0:34:9F:CC:00:DE:03:3F:4D:13:2D
X509v3 Authority Key Identifier:
keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b5:1e:b5:ed:c5:1f:e0:fb:84:b9:d5:cd:3c:27:28:20:7a:
5b:55:99:aa:b0:fa:0b:c2:8b:fb:e1:42:d7:36:33:9c:9a:d4:
50:79:d8:93:21:a7:1b:a8:0f:a2:29:2c:36:ca:69:76:1a:a9:
fd:14:09:22:a6:a3:71:43:ff:a5:dc:49:0e:ea:55:e6:56:00:
6d:e4:5b:a9:6b:03:d6:36:d7:b7:4a:08:36:8f:95:fd:68:4d:
8a:1a:9d:cb:01:c4:cd:ab:6f:db:8e:c1:89:aa:d7:d3:f6:a4:
28:ca:85:44:65:36:32:5d:1e:c3:f0:6c:70:af:9f:03:66:46:
27:42:2a:dd:ba:8e:7a:df:67:76:91:5f:0a:f4:ea:01:3e:31:
ce:89:29:22:a5:f0:1a:6a:51:bb:8a:75:21:07:74:91:ae:ac:
9a:b6:9e:83:56:14:99:49:a3:7e:10:fc:a9:2a:40:9f:d8:14:
02:da:a2:a4:a0:25:82:c3:25:2f:7e:bb:03:86:6f:3a:1b:c0:
7b:36:bb:c6:32:02:c4:fc:9d:dd:f4:45:be:f6:f5:f6:cb:0d:
cc:5e:6e:87:f3:66:1a:da:38:af:c0:9a:3a:aa:62:e5:e8:13:
19:0d:da:19:3d:36:bf:79:d7:5c:21:fa:b8:08:8b:2d:38:64:
af:04:c8:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3
QkI2NzIzRjcwHhcNMjYwNjAxMDYxOTAwWhcNMjYwNjA4MDYxOTAwWjAYMRYwFAYD
VQQDEw02YTFkMjQ1NC03NGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1aHa4UqUVPZ+HdVCm34oNywUB4r1MYsjptMxUmaA5arMz8zCzkxHFXRDRqIk
eLdq6B4NgueieqEiE6V0HRdzCMkzm4O+4oDHjXo0FVxSG0m3CxKdvVCw5ZJtmAQB
M/Bn06iAZdIZDzTDVumt4QzmmpdRpZR+2OV5nmxUjocpyzpiAJZ7UL6NngzlYk19
I/zVeuq3vCSAJU9zSFUq12HLwtOqqabvihbbDkdYRJuV/QxaDzgbSZ6FSLI/tkDI
qLn/5U1D+UNYplO4g+jqMbiUZV3Y2FL28vrTfI/4Gyuh8kKLjgLg7GRadH/Rfmvd
lHJ30qmTRprCrOUx0D79St7T0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJI40+8z
1ESZzfA0n8wA3gM/TRMtMB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE
MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx
V3d4MjdUMS1zdUI3dG5JX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw7Uete3FH+D7hLnVzTwnKCB6W1WZqrD6C8KL++FC1zYznJrUUHnYkyGnG6gP
oiksNsppdhqp/RQJIqajcUP/pdxJDupV5lYAbeRbqWsD1jbXt0oINo+V/WhNihqd
ywHEzatv247BiarX0/akKMqFRGU2Ml0ew/BscK+fA2ZGJ0Iq3bqOet9ndpFfCvTq
AT4xzokpIqXwGmpRu4p1IQd0ka6smraeg1YUmUmjfhD8qSpAn9gUAtqipKAlgsMl
L367A4ZvOhvAeza7xjICxPyd3fRFvvb19ssNzF5uh/NmGto4r8CaOqpi5egTGQ3a
GT02v3nXXCH6uAiLLThkrwTI/A==
-----END CERTIFICATE-----
Generated at Tue Jun 2 23:17:39 2026 by rpki-client