
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File: P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier: w6aDlOYjPbcyEm5OwFDfze0OTcwfXe8m3LlCbd07xjc=
Subject key identifier: A8:EF:A8:8A:9C:29:63:5F:76:21:97:3B:28:79:28:8B:42:A4:D6:F2
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: 0302
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number: 02CB
Signing time: Sun 05 Apr 2026 01:22:16 +0000
Manifest this update: Sun 05 Apr 2026 01:22:15 +0000
Manifest next update: Sun 12 Apr 2026 01:22:15 +0000
Files and hashes: 1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: 0RkEzSS8Fz4dFKAzf6JwNPoWm6IndIpmXIV/Pz3BgO0=)
2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: E6jRmVhR8Wb8IiIIspZxX6LgF3mhurpDSKUcMeN6BpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Validity
Not Before: Apr 5 01:22:15 2026 GMT
Not After : Apr 12 01:22:15 2026 GMT
Subject: CN=69d1b948-8963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:f6:90:26:e3:ed:ab:df:0e:31:96:c3:c9:
c7:a6:83:af:80:75:8b:46:aa:78:9f:49:9e:42:8c:
d6:1c:2b:f3:5a:65:c5:d0:c1:c6:00:1c:39:ff:00:
22:1f:08:1e:09:a1:9f:63:9b:27:11:01:b0:36:04:
26:0c:8e:97:02:47:8d:58:c0:e4:33:86:ff:47:0d:
06:91:39:0d:f3:0f:e5:82:53:c2:18:f1:fb:5c:1f:
31:88:ae:12:b0:00:3a:b1:09:80:d1:14:14:3b:b3:
cb:f1:ff:c1:f0:1e:08:59:80:f1:3d:26:be:0b:2a:
e5:65:97:77:1c:52:2c:4c:53:46:29:e7:59:65:31:
b8:90:1d:a6:e1:87:9d:0f:a3:05:dd:9f:d4:06:28:
e4:6c:96:e0:1f:b2:1f:1f:cd:bf:ab:af:e3:46:d4:
02:ea:10:c0:b4:f8:64:d0:32:d4:07:3f:3d:8e:1f:
e9:82:a6:4a:ee:a3:56:be:6f:26:bb:55:c4:32:ce:
ff:40:90:06:93:ea:83:e5:96:2b:68:47:e2:54:7c:
58:ec:fd:db:52:82:ef:a7:0d:d6:75:d7:22:50:f5:
4b:51:e7:c4:e3:12:62:b8:4f:ab:1d:dc:0b:36:08:
f9:d7:b9:b6:46:00:8e:8f:05:4c:13:e1:c8:f9:8d:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:A8:8A:9C:29:63:5F:76:21:97:3B:28:79:28:8B:42:A4:D6:F2
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:a9:3b:ed:10:ae:42:3e:68:65:28:a3:62:04:93:8f:6a:c6:
77:11:44:26:da:a2:58:df:97:5b:a2:7c:7c:e7:52:fb:06:8b:
25:ff:ee:0e:2b:51:ed:03:14:f3:5f:44:cf:11:f7:d9:af:d9:
a9:d2:d4:fa:49:5c:3d:d3:8f:39:6e:02:f6:04:c1:bb:83:72:
f0:35:4b:86:24:6e:01:e9:d0:39:c4:7f:0e:fc:d4:2a:92:03:
58:a9:4e:8b:ac:09:18:96:00:6d:f8:6f:cc:25:99:c5:82:0a:
54:83:44:12:9e:9c:dd:c5:de:8d:ad:b2:b5:87:df:df:7a:03:
b9:99:31:a4:f2:d5:83:5d:60:7d:79:1b:1a:6d:05:42:3f:80:
74:f9:d3:7c:6d:bd:3f:5b:84:4b:05:85:c3:68:32:09:d6:13:
11:69:ac:cd:67:ff:e6:c9:9b:04:41:8c:b8:ad:38:93:87:6b:
12:90:7f:54:67:de:20:87:8a:13:47:8a:4d:1e:7f:c7:9c:fa:
75:b7:2a:ea:88:01:1b:33:22:8a:6e:39:c5:3c:86:2a:25:de:
df:09:29:bf:7a:c8:f1:17:fd:7a:dc:62:dd:96:cb:bb:d8:40:
6f:34:31:29:7e:fc:80:39:1f:90:d3:6f:d4:da:b5:d8:0e:81:
8a:15:ea:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:53 2026 by rpki-client