
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier: R3Vrcl3aH1uQ8URr4f5eF24YG5Xz35fwlJoJ33EGop8=
Subject key identifier: 11:9B:C4:E3:D4:A7:31:4C:46:8E:58:05:63:E6:E4:5C:A1:2D:A8:FE
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number: 01B7
Signing time: Wed 09 Sep 2026 04:08:33 +0000
Manifest this update: Wed 09 Sep 2026 04:08:32 +0000
Manifest next update: Wed 16 Sep 2026 04:08:32 +0000
Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: tvmUKM4cB7dX42NcJv8NYh1hstyNpObhc/ohpHrWLGQ=)
2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: rTmYP4vftuu9LnK2M6aljj2neyfU2VajOjI+M4V6OzA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 04:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Validity
Not Before: Sep 9 04:08:32 2026 GMT
Not After : Sep 16 04:08:32 2026 GMT
Subject: CN=6aa0dbc0-44d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:20:82:c7:01:b7:a6:93:25:86:1e:81:7b:
30:19:57:eb:77:fc:9f:4c:c5:8f:9e:3c:59:24:96:
2b:8c:6c:f9:5e:8f:42:22:06:d7:eb:10:b9:ab:4b:
64:28:59:6e:dc:11:a1:29:f8:54:fa:5e:be:e5:61:
6f:c1:3f:c1:52:2c:bf:ae:de:7c:d9:04:33:52:c2:
d7:21:db:b1:fc:df:a3:8c:94:27:08:17:a1:55:32:
cc:bc:fc:c0:47:68:7d:64:a7:4d:e3:12:29:35:41:
70:97:c2:9c:25:5a:bb:fc:48:df:72:65:c4:b2:6c:
02:c9:c3:0f:ee:00:a8:c0:2d:94:02:1b:7f:08:6b:
35:a0:52:67:38:65:fa:4e:2d:92:6a:66:e0:49:12:
30:4d:5e:05:ef:99:33:d9:7a:32:68:cc:5a:44:a8:
bf:61:78:23:d7:02:7a:40:64:f8:08:75:56:9d:62:
92:3e:fa:b5:2a:fd:e8:ad:c2:26:61:57:77:e0:2b:
a7:2b:12:76:35:17:07:05:d8:2e:c8:5b:bb:86:fb:
e4:ea:dd:3d:ee:90:a1:09:6a:73:47:b1:84:80:a9:
03:43:f7:44:d7:06:00:9a:1c:38:95:18:cd:c8:e4:
60:c3:5d:04:35:0f:02:44:39:93:74:1b:fd:68:98:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9B:C4:E3:D4:A7:31:4C:46:8E:58:05:63:E6:E4:5C:A1:2D:A8:FE
X509v3 Authority Key Identifier:
keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:38:de:79:ad:5f:d9:eb:e8:84:00:76:71:c1:87:9d:d8:20:
89:1d:bc:e1:6b:e7:32:fd:46:eb:d8:bb:23:c2:25:f5:f7:3b:
b7:30:73:5a:7b:ef:56:23:8e:f5:a0:63:6f:35:cf:3b:6c:42:
54:93:66:8e:17:ce:f1:64:b8:2e:55:36:42:a1:0c:e2:0b:06:
41:8a:e0:d3:f6:9b:8c:cf:89:9f:47:c8:d0:b9:2c:b7:5b:19:
86:4a:cc:be:02:a4:dc:5f:64:fc:58:79:7c:a9:90:10:3b:f0:
63:54:ac:c5:e7:60:12:71:d9:96:28:a5:9f:2d:6c:dd:98:c0:
f4:7d:0d:d3:f7:b9:46:f8:7d:37:19:47:97:26:c1:0a:22:92:
dd:70:7a:bd:45:39:0c:0f:26:dc:3d:1f:46:ef:bf:04:ec:73:
2a:c1:07:31:7e:d1:9d:d9:b1:f9:86:70:1f:6b:66:a3:ec:23:
7a:18:d9:a2:e5:63:6d:24:5d:72:cb:ec:12:17:32:78:cc:84:
5f:8d:92:68:80:1a:78:5c:ce:16:b4:c3:b8:63:fd:3d:62:ac:
76:5d:d1:da:e7:73:8a:79:d8:9a:19:b2:86:02:0d:65:7f:58:
35:50:2f:1a:87:ad:e5:67:75:e7:23:93:24:b1:84:e5:32:98:
4d:56:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:31:32 2026 by rpki-client