
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
File: f7_PGWv9LvBwYlvuxCboYGiKwvE.mft (raw, json)
Hash identifier: LI44377CFw7sU7yZtU2VUmNk+WC6JmFyvg1KnXaxLHE=
Subject key identifier: 10:E2:5F:5C:50:E8:57:EA:3F:C0:97:D8:7D:3A:F7:E9:57:AE:B9:BB
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Certificate issuer: /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
Manifest number: 0117
Signing time: Fri 05 Jun 2026 06:17:19 +0000
Manifest this update: Fri 05 Jun 2026 06:17:19 +0000
Manifest next update: Fri 12 Jun 2026 06:17:19 +0000
Files and hashes: 1: f7_PGWv9LvBwYlvuxCboYGiKwvE.crl (hash: dINaji7riC1vrbJW8HrjPp58seRZug7QZ9ZDSRWtUmc=)
2: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (hash: VNIdZquen1ZsLRARPe3kPWlMB6WGthA5XHhfvqdd6dM=)
3: 476FD748C1CB11EF9557BF09C4F9AE02.roa (hash: OuUMVaCnpzXOw+KcMIPEzDWBcXZhUkrWBBzFkgFr7Ao=)
4: 52F3DAA6C1CB11EF9974C909C4F9AE02.roa (hash: ovVd1tIxh886GOCmDZJtQSpK/dqkiWb0tQvtLgU4Am0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 06:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Validity
Not Before: Jun 5 06:17:19 2026 GMT
Not After : Jun 12 06:17:19 2026 GMT
Subject: CN=6a2269ef-2378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:68:1f:fa:3b:19:dd:7e:79:42:1a:4d:49:
0a:53:82:6a:db:50:97:1f:cc:96:23:83:ee:dc:2f:
5e:4d:5e:40:6f:6d:c0:7c:41:78:bc:76:a8:ca:f1:
d9:bb:ca:db:7d:6b:d6:5e:9a:ef:ac:33:89:d0:f5:
8e:8d:ce:24:b5:ed:5c:4d:9b:75:25:fc:9f:c8:35:
3c:39:6c:74:9f:dd:09:a5:10:73:ce:98:1e:05:41:
e1:bf:0b:59:ab:7f:72:49:b3:94:11:9d:a9:3e:05:
1a:18:72:46:de:05:4f:8a:6b:47:5f:97:08:2c:73:
4b:dd:09:a4:12:ac:80:16:ff:f2:1e:96:01:33:63:
a4:a6:44:8d:93:f8:42:47:83:9b:1e:ab:e4:71:aa:
16:53:67:2a:fb:3d:4a:bd:52:60:35:5e:c2:78:1d:
cc:09:7f:3a:d9:a2:34:29:ac:45:79:04:8e:7a:0d:
dd:87:a4:09:c9:a7:40:86:ac:fe:66:a7:54:e5:e5:
7c:79:e9:b7:d6:5b:d1:49:e2:9c:bb:9c:33:d5:49:
75:b3:96:05:99:aa:31:12:dd:50:4a:3d:ad:36:1b:
03:df:4a:f0:44:c7:66:4a:f4:0e:70:ea:02:8d:bb:
37:71:71:74:17:b1:cd:74:3f:8d:3b:3c:98:ed:7e:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E2:5F:5C:50:E8:57:EA:3F:C0:97:D8:7D:3A:F7:E9:57:AE:B9:BB
X509v3 Authority Key Identifier:
keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2e:64:2c:a1:98:95:b8:2b:fd:60:43:92:da:f1:86:58:06:
1f:b1:bd:ff:c1:09:39:f9:a9:17:d9:8b:30:b8:2d:91:c5:54:
ba:58:d6:a0:af:ec:99:dc:3e:0a:93:f4:85:ba:57:e4:18:14:
7c:09:7f:63:3a:f5:00:44:50:8a:65:14:a6:a0:2d:d8:01:3f:
96:a2:f9:7b:de:79:a1:41:ca:a4:49:7a:66:bc:9f:e9:47:e3:
4c:24:11:3c:4a:d3:2a:2c:70:9d:93:03:03:cd:ad:29:61:f4:
20:03:9b:42:07:88:dd:f8:9f:1c:04:5a:27:59:26:ed:aa:ce:
f2:c7:e9:19:8c:47:29:c2:c1:80:19:4e:14:a6:88:f0:90:35:
fb:f2:7f:ca:1b:3c:03:5a:a3:e4:23:45:ce:8b:b3:6f:af:cb:
bc:1d:9f:4d:6d:71:6f:99:53:2d:44:cd:5f:6a:7a:ae:74:20:
64:67:dd:8a:b7:25:4a:d7:b6:4f:20:32:74:26:05:b6:9b:36:
02:ad:f4:3f:f5:56:4f:e4:57:6e:98:70:46:78:4e:44:14:57:
90:8b:9d:bc:6e:84:c8:15:78:7e:21:c9:3b:dc:e5:30:df:37:
b5:df:85:78:86:11:c6:63:bc:b2:9e:5f:21:1b:94:db:65:42:
eb:ac:49:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMzNTgxMTAvBgNVBAUTKDdGQkZDRjE5NkJGRDJFRjA3MDYyNUJFRUM0MjZFODYw
Njg4QUMyRjEwHhcNMjYwNjA1MDYxNzE5WhcNMjYwNjEyMDYxNzE5WjAYMRYwFAYD
VQQDEw02YTIyNjllZi0yMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1FBoH/o7Gd1+eUIaTUkKU4Jq21CXH8yWI4Pu3C9eTV5Ab23AfEF4vHaoyvHZ
u8rbfWvWXprvrDOJ0PWOjc4kte1cTZt1JfyfyDU8OWx0n90JpRBzzpgeBUHhvwtZ
q39ySbOUEZ2pPgUaGHJG3gVPimtHX5cILHNL3QmkEqyAFv/yHpYBM2OkpkSNk/hC
R4ObHqvkcaoWU2cq+z1KvVJgNV7CeB3MCX862aI0KaxFeQSOeg3dh6QJyadAhqz+
ZqdU5eV8eem31lvRSeKcu5wz1Ul1s5YFmaoxEt1QSj2tNhsD30rwRMdmSvQOcOoC
jbs3cXF0F7HNdD+NOzyY7X6iZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDiX1xQ
6FfqP8CX2H069+lXrrm7MB8GA1UdIwQYMBaAFH+/zxlr/S7wcGJb7sQm6GBoisLx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzM1OC83RDQwNjQ3RUMx
Q0ExMUVGQTNGMjRBODdDNEY5QUUwMi9mN19QR1d2OUx2QndZbHZ1eENib1lHaUt3
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Y3X1BHV3Y5THZCd1lsdnV4Q2JvWUdpS3d2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzM1OC83RDQwNjQ3RUMxQ0ExMUVGQTNGMjRBODdDNEY5QUUwMi9mN19QR1d2OUx2
QndZbHZ1eENib1lHaUt3dkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtC5kLKGYlbgr/WBDktrxhlgGH7G9/8EJOfmpF9mLMLgtkcVUuljWoK/smdw+
CpP0hbpX5BgUfAl/Yzr1AERQimUUpqAt2AE/lqL5e955oUHKpEl6Zryf6UfjTCQR
PErTKixwnZMDA82tKWH0IAObQgeI3fifHARaJ1km7arO8sfpGYxHKcLBgBlOFKaI
8JA1+/J/yhs8A1qj5CNFzouzb6/LvB2fTW1xb5lTLUTNX2p6rnQgZGfdirclSte2
TyAydCYFtps2Aq30P/VWT+RXbphwRnhORBRXkIudvG6EyBV4fiHJO9zlMN83td+F
eIYRxmO8sp5fIRuU22VC66xJeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:32:54 2026 by rpki-client