
$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier: PDfmx3fmiG6ja4XlMfzszczxT5Kz7mYqLaW4lkdLqpg=
Subject key identifier: B8:1A:94:CA:58:87:20:3F:44:A8:1C:A1:D7:C5:57:57:0B:8F:4E:59
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number: 0166
Signing time: Sun 05 Apr 2026 04:11:02 +0000
Manifest this update: Sun 05 Apr 2026 04:11:02 +0000
Manifest next update: Sun 12 Apr 2026 04:11:02 +0000
Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: Xcydw2qlguhRrnmpoPoa2dpyzjGpRSBJbBA8zifzfQ4=)
2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: kCxBW9KlV5vONVPJNu5+ty3GjzD9VNwCWVx1zxePNqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Validity
Not Before: Apr 5 04:11:02 2026 GMT
Not After : Apr 12 04:11:02 2026 GMT
Subject: CN=69d1e0d6-188c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:f6:04:50:c0:87:95:9b:d5:e4:0a:57:bb:
a8:76:f4:91:c9:87:09:c7:ee:88:db:0a:af:58:8c:
53:57:6a:23:dd:67:01:ed:64:e6:eb:36:ac:39:4f:
0e:26:f3:d5:23:35:91:76:b2:c4:9e:48:a6:6d:ce:
1c:41:44:2a:34:ec:89:95:73:41:52:af:bc:5b:22:
5f:dd:dc:90:9f:18:4b:2c:c5:1e:bb:89:b4:52:10:
8f:04:95:dc:fa:99:5e:b2:78:dd:a9:53:0a:17:73:
b8:12:10:34:2d:64:64:b8:ba:63:48:63:3c:8c:a0:
99:09:86:5d:3b:bd:30:de:10:7c:13:00:3e:f2:b1:
83:85:d9:b4:c8:06:8e:7d:ed:38:c4:95:b9:33:83:
9f:c2:3b:d6:20:86:4b:aa:7a:20:29:52:bc:f2:64:
82:d5:af:46:6c:f5:bf:77:8f:04:c3:04:ff:64:1f:
48:10:94:0b:39:62:d8:4f:f9:f6:f0:8a:70:f8:a4:
54:2b:12:23:c5:b6:a2:23:fb:b8:98:00:b8:14:8a:
82:15:ea:ff:e1:e2:48:69:46:62:d1:51:b5:63:45:
4b:7b:27:30:f2:11:8d:c4:6e:a5:98:12:2c:98:cc:
af:11:af:9d:2b:53:16:f7:fb:46:5c:30:5a:63:87:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:94:CA:58:87:20:3F:44:A8:1C:A1:D7:C5:57:57:0B:8F:4E:59
X509v3 Authority Key Identifier:
keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:26:11:9b:73:96:e5:29:b4:6e:a3:9f:a2:b6:b2:e8:4a:f6:
3d:b4:17:20:f6:d2:06:cf:2f:cf:5d:3d:98:74:ff:87:63:53:
b3:aa:d1:0b:38:81:f0:63:3a:fc:ef:82:b2:bd:1f:83:22:15:
03:54:73:6d:6d:c1:66:7c:26:ec:1d:ca:21:69:4e:af:8e:c8:
0b:4f:ad:71:e5:96:3e:71:7e:9c:4d:e0:04:53:2f:04:43:bf:
03:b8:4c:de:ff:e1:7d:ce:be:ef:0e:ee:c9:45:c0:d9:6d:6d:
e8:53:83:f8:c6:c1:4f:40:f7:7f:80:2b:56:ad:03:44:d6:76:
ec:68:05:7e:5d:ca:2d:0d:4b:69:02:00:6f:c8:fc:1e:a3:af:
1e:94:f3:10:cf:14:61:70:91:cb:bd:59:92:69:ac:46:e2:9a:
af:3b:d0:bd:56:dc:eb:26:90:96:62:be:64:40:24:4b:b8:85:
dc:56:f4:6f:02:06:b3:ef:c7:fc:b6:0a:3e:37:20:72:ae:8b:
83:f5:db:4c:4e:83:38:06:6b:b7:f9:08:d8:d4:16:a8:c8:b9:
94:8b:01:83:58:62:9e:86:c1:1c:6e:72:d9:f3:9e:42:69:6e:
de:52:90:ac:64:09:84:5d:4f:10:3e:2b:cf:b6:e8:ee:a1:93:
10:e0:34:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:24:15 2026 by rpki-client