
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File: p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier: VmJpr4yQLvLKyQ899zxlDqEVxbRmxCiQBnsSyB75PRA=
Subject key identifier: 1C:D3:32:0B:A1:BA:DC:96:2D:FA:CE:43:CF:71:5E:CB:20:57:2E:52
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number: 016B
Signing time: Wed 29 Apr 2026 05:24:50 +0000
Manifest this update: Wed 29 Apr 2026 05:24:49 +0000
Manifest next update: Wed 06 May 2026 05:24:49 +0000
Files and hashes: 1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: ZQHbEbmIX+27q+CyGd7ood0bc+qlIR+4vYXP3v7+OMA=)
2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: B4ENBOCrcVu9vsQndhxBPW5NCETQQHs3UmACZhgsEgU=)
3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QRkcZsDgIJjnFNUASfY5VIlKLs39JH6eip+JITXFwy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 05:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Validity
Not Before: Apr 29 05:24:49 2026 GMT
Not After : May 6 05:24:49 2026 GMT
Subject: CN=69f19622-26d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:45:e1:b3:b9:2c:0b:57:db:07:dc:37:6a:
3b:a4:bb:f9:6e:50:68:bc:38:eb:f9:bf:69:d3:69:
98:5f:c4:0d:95:1d:47:07:e4:f2:74:c9:ae:f7:22:
cf:ef:cf:ce:e5:97:ab:4a:5e:0a:13:ba:a7:f0:fb:
76:8f:67:15:ee:00:03:8c:83:21:f4:c1:ed:a4:6c:
5d:ed:1b:6c:db:d7:1e:0f:b0:1d:63:56:45:9c:bd:
b0:f9:4c:e8:f5:3c:ec:e5:0f:5a:c4:69:72:0c:4c:
0c:d4:5e:5d:2f:07:62:70:70:75:82:50:66:9d:51:
67:59:43:1e:ea:6e:c2:92:6f:eb:e9:81:1e:d6:86:
f4:3c:dc:4e:46:cb:89:b1:f1:55:7f:eb:a0:51:3c:
20:3c:96:ef:d0:23:2e:d3:07:45:9c:92:a2:17:75:
f4:2d:97:c8:5b:67:18:af:27:31:20:c1:14:3c:1e:
cc:40:de:ff:4b:e8:3b:97:f8:32:85:7a:6f:d8:f0:
59:29:6a:a5:22:5a:6e:9a:7e:a4:91:43:c0:af:3d:
e1:30:a5:dd:29:b2:b8:a6:50:e3:fa:f5:18:6c:ab:
b7:03:d8:04:97:d2:39:21:9b:76:63:df:a8:b3:71:
91:3b:d6:8b:63:62:91:31:fc:fe:f3:be:d8:54:e3:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D3:32:0B:A1:BA:DC:96:2D:FA:CE:43:CF:71:5E:CB:20:57:2E:52
X509v3 Authority Key Identifier:
keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:81:1d:e6:b7:bc:a9:3f:23:71:f6:9d:1d:d4:ef:99:62:44:
79:57:80:ef:86:58:5b:8e:4d:fc:f5:fb:7a:18:9e:91:1f:7d:
5c:c6:b9:74:60:59:19:64:a9:ca:af:c9:2f:c8:9d:98:05:08:
14:d1:74:41:76:78:14:8c:8d:4d:37:a3:90:25:78:35:54:2a:
7a:81:01:9d:4a:19:7a:ea:8b:26:db:67:70:c0:e0:b9:01:d6:
04:ca:31:64:f6:9a:14:db:e7:88:df:b5:c5:c0:fc:9a:04:fc:
27:25:a8:8b:20:f6:e7:6a:b6:53:6b:38:5b:d5:b5:49:c0:90:
b0:d4:39:06:d1:60:c0:45:30:db:b9:8e:48:fd:8d:6c:7f:86:
f3:a1:77:cf:2f:23:a3:a4:d4:41:37:39:7b:df:be:57:ad:d3:
ad:d5:b7:27:dc:97:99:ad:7c:5b:30:9f:ea:35:af:8b:9f:5f:
d2:79:f7:2d:be:95:c3:4c:e6:d4:ec:e0:93:b7:f8:d8:7c:4f:
16:f1:09:f7:6b:b4:14:0e:8a:b9:c0:26:73:7f:98:22:3d:32:
46:8b:ad:06:d1:4e:0c:72:2c:e7:93:fe:03:fd:d3:fd:00:91:
55:bd:2a:63:ba:2e:df:66:ab:ab:d1:8f:f2:5d:ae:88:ba:86:
68:b4:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 13:41:38 2026 by rpki-client