
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
File: f7_PGWv9LvBwYlvuxCboYGiKwvE.mft (raw, json)
Hash identifier: uQMK1YgSS5+DlyUMB8L2adWd9aqd/Ncpp+et1rWsEhI=
Subject key identifier: F5:76:77:80:50:7A:9A:38:0D:D3:A7:B8:06:D4:12:22:9D:36:02:B5
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Certificate issuer: /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
Manifest number: 0160
Signing time: Fri 23 Oct 2026 05:42:05 +0000
Manifest this update: Fri 23 Oct 2026 05:42:04 +0000
Manifest next update: Fri 30 Oct 2026 05:42:04 +0000
Files and hashes: 1: f7_PGWv9LvBwYlvuxCboYGiKwvE.crl (hash: 3UvJycKTvJJOKQAKvOoV0X0MHDkWDKo5KxhMfFyuMtk=)
2: 52F3DAA6C1CB11EF9974C909C4F9AE02.roa (hash: ohxjWHlkTJhZTK1T8wQyRikw0gvXwa42GseAa710uwA=)
3: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (hash: iLGMG59aI5S5bAd3js+MklsjrDboNtyYlDECw/2ZcTo=)
4: 476FD748C1CB11EF9557BF09C4F9AE02.roa (hash: cdU+LQCMb0Gz+MHf24Q+R68HXzN4cIoW92uSQpjpO1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Validity
Not Before: Oct 23 05:42:04 2026 GMT
Not After : Oct 30 05:42:04 2026 GMT
Subject: CN=6adaf3ad-3cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:5b:c1:9a:8c:e1:b0:bd:b5:4d:9b:0f:db:
81:07:30:a4:69:72:bc:a0:37:ec:58:d1:e0:b4:5d:
a4:fe:73:b4:9b:bd:3a:39:55:91:50:46:05:ed:b1:
19:6e:cc:9f:8a:c7:bb:c0:d6:8e:4c:61:8a:6e:a8:
63:e4:91:13:ad:e5:e0:9c:be:c0:e5:b5:e0:bc:fb:
78:84:a3:78:3d:f7:5f:21:de:da:82:31:b5:5f:b9:
6e:8c:a7:71:14:0e:38:50:5c:76:ab:3a:4d:d5:42:
f3:ee:65:8a:29:99:f0:64:b1:d0:8b:a9:5f:5e:9f:
36:02:ab:73:7f:b2:a8:92:4f:25:86:1b:46:c2:32:
77:7f:01:34:41:28:18:13:40:0b:fb:df:54:b6:aa:
68:97:1e:83:57:df:c2:29:f2:94:c3:75:ab:ae:99:
0d:58:62:cc:b7:2c:7d:d1:ad:6b:ba:67:9c:17:36:
75:4c:2a:0a:0f:95:f3:e2:d9:c6:ef:cd:65:c0:7a:
e6:37:cd:21:ae:12:78:e5:7f:d8:f0:aa:4e:8b:58:
a0:77:56:cc:3a:93:06:2d:2f:2c:1d:5c:f7:e6:f0:
c5:47:59:f4:2b:96:f1:53:da:51:c8:80:ad:a8:db:
47:12:34:ae:04:44:33:f9:d3:46:f1:b3:84:1e:ca:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:76:77:80:50:7A:9A:38:0D:D3:A7:B8:06:D4:12:22:9D:36:02:B5
X509v3 Authority Key Identifier:
keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:ea:d2:98:a9:1a:58:b3:b7:d1:c9:61:01:84:34:73:7d:54:
65:53:ab:e2:f5:21:01:43:ab:ba:d0:f9:ca:0c:2c:d8:18:c8:
fa:d6:18:13:10:0c:72:2e:94:90:f7:d1:eb:50:82:e5:93:97:
89:3a:5e:9e:c9:4f:a4:c7:28:e8:9c:dc:45:60:62:bd:fc:c9:
0b:75:ba:ab:40:62:69:95:b6:3f:12:a0:a4:d6:45:4e:6b:4c:
73:40:6e:de:9b:a9:4c:dc:ba:97:6d:0b:58:4e:7f:43:57:e8:
7f:a0:ac:db:23:0b:ce:7d:9d:cc:c3:de:9d:90:65:3b:3e:e1:
86:01:f2:94:69:f8:6c:09:9a:44:a5:07:71:97:c2:42:08:b9:
35:bb:30:e2:05:d2:74:4b:e8:62:93:2e:f4:84:76:7c:cc:10:
b4:91:ca:a2:bc:c2:63:2b:3b:37:e3:b5:9f:02:54:5f:a2:6a:
bf:7f:1b:14:27:c6:7d:21:43:a5:fe:49:52:9f:1c:d5:dd:71:
5f:25:99:c5:ba:d2:91:5a:a2:ea:43:52:72:b3:3f:af:e3:ad:
0f:aa:81:70:49:ca:78:ca:ff:37:7a:b5:bf:c1:7a:ea:bb:e7:
f2:4b:c7:b8:9d:5b:b4:f8:42:61:0e:ed:75:c2:fc:89:6c:1e:
4d:89:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 00:56:11 2026 by rpki-client