
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
File: f7_PGWv9LvBwYlvuxCboYGiKwvE.mft (raw, json)
Hash identifier: WH5uRmL+2Irl2leIVWkdQwRnw5p7WmVhVM8kXkABXPc=
Subject key identifier: C9:C3:E0:FC:EF:E2:E8:4A:62:D2:AF:C5:F5:75:CC:A8:AA:A8:0C:58
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Certificate issuer: /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
Manifest number: F9
Signing time: Sun 05 Apr 2026 05:43:24 +0000
Manifest this update: Sun 05 Apr 2026 05:43:23 +0000
Manifest next update: Sun 12 Apr 2026 05:43:23 +0000
Files and hashes: 1: f7_PGWv9LvBwYlvuxCboYGiKwvE.crl (hash: Dh2T7khdeXiy8jvN+mcM6TiftQxytqeshVgKL4/Zcbg=)
2: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (hash: VNIdZquen1ZsLRARPe3kPWlMB6WGthA5XHhfvqdd6dM=)
3: 52F3DAA6C1CB11EF9974C909C4F9AE02.roa (hash: ovVd1tIxh886GOCmDZJtQSpK/dqkiWb0tQvtLgU4Am0=)
4: 476FD748C1CB11EF9557BF09C4F9AE02.roa (hash: OuUMVaCnpzXOw+KcMIPEzDWBcXZhUkrWBBzFkgFr7Ao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Validity
Not Before: Apr 5 05:43:23 2026 GMT
Not After : Apr 12 05:43:23 2026 GMT
Subject: CN=69d1f67c-1f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:76:6e:f4:ca:45:79:23:48:03:3e:ee:3d:
01:54:be:2b:18:a8:ef:ee:18:82:a9:27:06:67:e7:
fc:48:de:04:45:7f:23:52:97:6c:de:92:66:2e:45:
f8:54:ab:9d:8e:c6:2f:6f:91:81:8f:c3:c4:8c:5c:
bd:7f:d9:03:4d:39:dc:7d:96:92:e2:26:f9:58:ef:
6f:dc:54:6e:40:e9:cc:08:57:75:0c:22:93:19:90:
4b:24:3d:77:8c:49:d3:29:8b:89:95:83:ff:22:1a:
aa:f5:7f:6a:71:13:08:62:41:8e:6a:8f:d1:ab:8d:
b9:97:c4:68:08:e1:d2:46:ce:bc:12:6e:97:ae:e3:
43:61:a1:50:7e:73:db:19:29:4d:eb:25:d6:a2:1b:
4d:df:1a:bd:4c:2f:f9:90:d6:46:0a:63:74:1b:ad:
3a:78:d6:53:1b:5c:f9:38:cb:56:78:b2:54:fa:d5:
ba:17:2d:3f:74:20:6c:26:94:e5:35:c5:43:c4:16:
11:0b:8e:6c:43:7a:5e:d8:50:ce:f8:98:61:4b:ff:
e5:57:6c:4e:06:4b:e9:ea:98:37:3b:d9:e4:06:d2:
6e:7f:bd:d1:54:ea:79:d3:11:b5:32:33:8d:6a:bf:
b8:2c:4a:b5:2e:b0:63:0d:20:d5:c3:9a:d5:4e:72:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:E0:FC:EF:E2:E8:4A:62:D2:AF:C5:F5:75:CC:A8:AA:A8:0C:58
X509v3 Authority Key Identifier:
keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:0c:94:b4:63:28:96:f6:f9:19:b7:58:28:24:44:55:2c:d9:
b3:b5:3b:89:67:3e:b8:9a:52:38:78:96:2d:64:38:29:8d:fc:
22:c9:aa:22:f4:3b:35:1c:2c:05:f7:24:ae:f3:65:1e:8b:90:
f2:d7:16:4c:35:23:0c:02:02:8c:76:12:df:39:b3:ee:d9:eb:
2a:87:07:82:27:e4:19:ae:f8:66:a4:f4:f0:f1:a0:64:37:ef:
b6:95:e1:55:4e:c0:5c:4d:6a:61:3e:86:2c:c7:06:4b:fb:4f:
02:21:a6:43:bd:a4:35:ef:1c:51:44:ea:80:e3:f6:91:14:ee:
cf:8f:24:ec:9e:f4:29:79:a9:9d:aa:86:5b:41:3f:64:0e:ba:
af:f2:30:e9:4a:c6:4e:fe:26:fd:52:3a:b9:2f:58:b2:fd:79:
84:2e:39:eb:6e:3f:63:f1:03:35:70:03:ab:72:14:47:c6:e8:
e5:fb:4e:85:e1:eb:b4:8f:d3:b3:18:96:cd:bc:41:2a:a9:e5:
0b:18:a8:b4:f8:f4:c8:d7:30:18:a1:11:b8:f7:c4:9c:6f:6b:
eb:48:fc:d0:02:1b:6e:98:78:fe:9d:24:f6:5e:39:05:56:5d:
fa:0a:31:55:be:97:88:09:6c:ba:a3:36:51:d2:db:cb:17:d5:
d4:37:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:47 2026 by rpki-client