
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json)
Hash identifier: 63tGiMOED2AnA1zY5Mlbd02ebrQL6s8r8qtE2D//LiY=
Subject key identifier: 78:96:08:77:B0:DE:AB:DF:E8:9D:41:49:C2:97:09:05:D0:3B:ED:FB
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2C7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
Manifest number: 2C17
Signing time: Wed 02 Sep 2026 15:33:26 +0000
Manifest this update: Wed 02 Sep 2026 15:33:25 +0000
Manifest next update: Wed 09 Sep 2026 15:33:25 +0000
Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: XcAjXrjrgLXFPak31pEs5Cbk1pG4tuAhIuQ1kpD+4Zo=)
2: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: b4dUJUsflstBmfkTo+6WB27BRTM43w5uV9OUP+GZroI=)
3: 67651980457511F1A878DB0BB4833773.roa (hash: CbnlijH2x4Ft1TEKptp1p5G8ICI1ZcbvpB+WwaI4aoo=)
4: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: yhb7QiTNwaWZ43QEtEdSQmUgbkqueVHBiH7mFyaEGz0=)
5: 994EDA7E477011F19156235992833773.roa (hash: 1hC10MLLED1ieGexLaVRyCq07RG6S3oek0GO+3joQEk=)
6: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: O1KjNFYquoWK1QcR2byS/JmrbBhF5FfSwYJTB0+MwzI=)
7: A2842DA6E07D11F0A337A81D3B6F56BC.roa (hash: W75lhz8qeJnkZlqY0a8HErBGtduWKn0r2gMd7akKn1I=)
8: E8573BE8F1C111F098487417396F56BC.roa (hash: DXYFlPFZJbTgCXiYCSA164GI8iIK5udt+JzmMbupbPs=)
9: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: ZRgcko4mZDU94zW1mE2zsmeg1CEm3cVuoBFvJp8bDbw=)
10: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: lm86AbCRcdzPDBKNa+uwq/jScnKUTOerK/ZRzjBHp4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 15:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11390 (0x2c7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Validity
Not Before: Sep 2 15:33:25 2026 GMT
Not After : Sep 9 15:33:25 2026 GMT
Subject: CN=6a9841c5-d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:74:08:9b:36:8d:c6:b6:b2:03:d8:70:a1:35:
41:74:72:70:99:1e:10:1b:1c:c8:12:6b:d9:a9:1d:
1a:ca:18:35:2f:9c:d0:29:80:4d:ba:d9:84:03:73:
ab:d8:76:1b:9b:40:9d:c8:d7:1b:48:c9:9e:51:30:
f9:10:df:3c:60:e4:31:46:eb:63:2c:ed:45:50:6d:
c3:fc:f3:f3:c8:a6:96:a7:3e:eb:67:b0:75:27:2d:
f5:53:50:d6:59:b7:73:bf:45:fc:77:b4:1f:a3:4f:
90:bb:d7:49:2d:fb:f2:88:fa:b8:23:ca:e3:7b:64:
42:ff:91:85:fd:0f:11:aa:9e:ef:04:7f:21:71:26:
db:66:18:f2:c1:cd:59:ee:c2:a1:60:b5:30:9c:d2:
e9:e9:22:51:5d:14:40:d6:d8:d9:25:51:28:0c:7d:
44:5b:f4:1a:74:11:87:b6:28:cd:12:41:9c:cb:6e:
59:86:86:96:08:0e:ce:14:c0:01:d1:28:11:fd:1a:
85:99:9c:0b:db:6c:17:60:77:de:46:8c:26:0e:8f:
a7:19:38:2c:8f:4b:b2:0d:1e:e8:65:f9:0a:04:b0:
68:80:8a:1a:81:73:79:3b:d6:1d:e3:8f:b6:d6:56:
21:ee:17:b2:d9:cd:d5:12:25:5f:7b:e2:61:b0:d6:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:96:08:77:B0:DE:AB:DF:E8:9D:41:49:C2:97:09:05:D0:3B:ED:FB
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:83:0c:14:4b:1f:25:57:6a:95:b3:97:5b:04:62:cd:57:6e:
84:26:d9:20:13:11:38:e0:a0:1c:06:e6:c4:28:1f:ef:c9:d2:
14:41:58:de:1e:bf:90:b0:b3:b2:84:36:45:7a:54:c7:b1:b5:
32:bd:2a:bb:72:63:4c:7e:f8:c8:a2:bb:da:c5:4a:40:54:a0:
61:41:27:07:cb:89:6b:88:3e:3d:11:a0:48:d2:a3:79:b8:d1:
f1:57:06:a6:49:b1:c6:e6:26:d2:ca:1b:54:30:27:74:53:e7:
d5:ed:46:0e:a8:f5:96:38:97:a4:ea:27:5d:8d:75:cf:c8:fc:
a9:51:c4:4b:ec:97:f8:8c:c6:be:d2:16:d9:ac:88:be:75:78:
28:db:a3:01:fb:4f:84:53:e1:be:a8:0a:57:0e:12:2b:2d:2d:
ee:da:42:69:88:7d:a0:25:13:77:f2:be:c1:cc:e3:14:cb:6d:
e8:a7:c7:82:37:a8:fb:13:09:94:3a:f3:33:a2:cc:92:b1:73:
2c:f9:83:a9:a6:88:e6:1f:28:37:da:14:58:f3:28:3c:5b:3d:
75:41:62:35:8b:8c:4b:b7:09:a4:4a:46:02:27:82:56:21:3f:
d7:b1:f9:a1:ed:01:fb:d1:ce:15:5e:6b:56:49:4d:15:8a:e6:
b5:a1:95:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2
MUY4MkE5NTcwHhcNMjYwOTAyMTUzMzI1WhcNMjYwOTA5MTUzMzI1WjAYMRYwFAYD
VQQDEw02YTk4NDFjNS1kNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh3QImzaNxrayA9hwoTVBdHJwmR4QGxzIEmvZqR0ayhg1L5zQKYBNutmEA3Or
2HYbm0CdyNcbSMmeUTD5EN88YOQxRutjLO1FUG3D/PPzyKaWpz7rZ7B1Jy31U1DW
Wbdzv0X8d7Qfo0+Qu9dJLfvyiPq4I8rje2RC/5GF/Q8Rqp7vBH8hcSbbZhjywc1Z
7sKhYLUwnNLp6SJRXRRA1tjZJVEoDH1EW/QadBGHtijNEkGcy25ZhoaWCA7OFMAB
0SgR/RqFmZwL22wXYHfeRowmDo+nGTgsj0uyDR7oZfkKBLBogIoagXN5O9Yd44+2
1lYh7hey2c3VEiVfe+JhsNZvKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiWCHew
3qvf6J1BScKXCQXQO+37MB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjIxNC9CN0Y4MTk1ODMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJ
M09XUTk4U0pCM2xoLUNxVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg4MMFEsfJVdqlbOXWwRizVduhCbZIBMROOCgHAbmxCgf78nSFEFY3h6/kLCz
soQ2RXpUx7G1Mr0qu3JjTH74yKK72sVKQFSgYUEnB8uJa4g+PRGgSNKjebjR8VcG
pkmxxuYm0sobVDAndFPn1e1GDqj1ljiXpOonXY11z8j8qVHES+yX+IzGvtIW2ayI
vnV4KNujAftPhFPhvqgKVw4SKy0t7tpCaYh9oCUTd/K+wczjFMtt6KfHgjeo+xMJ
lDrzM6LMkrFzLPmDqaaI5h8oN9oUWPMoPFs9dUFiNYuMS7cJpEpGAieCViE/17H5
oe0B+9HOFV5rVklNFYrmtaGVRw==
-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:59 2026 by rpki-client