
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File: P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier: d4I0d8K0aeeF0I9m66weEU8IbSDZMPEuzdR3JQxq6p0=
Subject key identifier: 66:F3:67:74:AB:01:EC:CB:05:D0:D5:F7:1E:D1:55:B0:C2:0E:D3:10
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: 0319
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number: 02E2
Signing time: Thu 21 May 2026 01:38:35 +0000
Manifest this update: Thu 21 May 2026 01:38:34 +0000
Manifest next update: Thu 28 May 2026 01:38:34 +0000
Files and hashes: 1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: 1W74PuzRiOgV5xyo793HnS823+YfHoirU7b+RqBll44=)
2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: E6jRmVhR8Wb8IiIIspZxX6LgF3mhurpDSKUcMeN6BpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Validity
Not Before: May 21 01:38:34 2026 GMT
Not After : May 28 01:38:34 2026 GMT
Subject: CN=6a0e621b-ead6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:0f:a4:8b:79:94:6a:9d:29:a4:73:76:96:
68:f8:3a:d1:b7:ea:3e:6d:57:19:67:70:a0:9d:2c:
f5:0a:9c:2d:a1:83:0f:6a:fd:34:d6:04:58:61:cd:
05:82:60:a0:d3:20:67:49:8f:65:8c:ad:c4:d8:6c:
f6:fb:26:c2:0c:ab:6a:98:b5:d7:87:8c:5a:d7:b3:
84:d9:e4:03:a4:c4:5a:84:36:c7:f3:d3:fd:6a:8e:
7e:25:91:42:2b:98:94:4b:28:24:85:7e:bb:88:83:
d3:b6:45:ae:b1:57:d8:43:cc:79:1e:0f:74:38:af:
c1:8c:0b:96:61:ff:aa:d1:de:fa:56:55:3c:7e:26:
41:24:1d:fa:6d:84:d7:91:10:16:06:6d:99:1d:b2:
8e:a2:48:c7:27:6b:02:a6:a3:0d:cf:52:e9:43:62:
81:8c:b7:06:9f:a3:f7:f9:d2:0b:df:74:7b:d2:86:
dc:50:36:81:92:8c:c2:d2:02:3e:50:8f:c7:d4:86:
32:54:f3:a1:ae:8a:bc:f0:c5:8f:7d:cb:9e:a2:5f:
fc:1e:e2:16:0d:bd:ee:d5:c8:59:ad:13:90:b4:d3:
a8:1d:76:ba:29:82:ef:b5:c5:ba:33:a0:50:0e:22:
b0:a6:08:c6:81:34:ea:d3:b9:7f:02:29:2c:0a:be:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F3:67:74:AB:01:EC:CB:05:D0:D5:F7:1E:D1:55:B0:C2:0E:D3:10
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:cd:69:f6:3c:a9:70:1a:5d:7f:d7:f2:46:dc:ef:20:d4:e7:
99:e2:dd:55:7d:8c:f8:46:4d:ba:ae:c6:c7:fa:21:58:ae:13:
b1:7d:8f:5b:7f:16:a4:ca:bb:4d:8e:cf:02:58:85:fe:90:9f:
39:54:45:b6:11:25:15:a9:21:2e:64:b2:fc:db:dd:36:f4:08:
1e:40:f4:05:2f:2e:cf:b5:07:70:59:70:9f:63:62:14:c0:f8:
4f:f0:f4:99:ed:b5:2c:0e:4c:90:e2:d1:05:82:62:ba:df:67:
8c:2b:cf:65:da:1c:10:34:5b:7b:09:17:da:a5:91:7e:43:70:
67:f7:18:aa:01:8c:6f:68:0d:57:91:94:b1:e9:28:63:59:ce:
1b:36:06:9f:54:ae:77:07:0f:ac:55:36:67:5d:49:77:04:4f:
ea:93:ca:a6:81:99:e5:9a:83:78:d5:b2:dc:87:b9:38:f9:fb:
5f:a3:b0:70:39:e8:b3:1f:94:96:1a:2f:d5:59:8d:e4:f3:98:
a8:bb:e8:e9:d6:ac:dc:60:38:66:9a:16:5b:aa:b6:42:e2:17:
60:36:ea:9d:83:c2:8d:1b:dc:92:f5:ad:bb:37:0b:f9:c9:72:
a1:ef:b3:77:1f:45:ce:0d:41:32:fb:18:3a:64:14:72:a7:49:
6a:ab:bc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:37 2026 by rpki-client