
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json)
Hash identifier: u7GlDZEfMfRZn7pXZH1ZwZC/Smg4+E+ZxlCZ2yfq33g=
Subject key identifier: CE:77:62:F1:05:6B:4A:FD:F4:B9:B8:9C:E7:43:AE:E7:1A:BA:C0:51
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
Manifest number: 0169
Signing time: Sun 05 Apr 2026 04:19:01 +0000
Manifest this update: Sun 05 Apr 2026 04:19:00 +0000
Manifest next update: Sun 12 Apr 2026 04:19:00 +0000
Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: A7TZkLd0QGmeVGUU9NhXsPBGru8gu/Vqffj/J8nV4FM=)
2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: orF+fCZHbfbY4ughfyxj36yRT872IPKzGFkv9K8j5SA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Validity
Not Before: Apr 5 04:19:00 2026 GMT
Not After : Apr 12 04:19:00 2026 GMT
Subject: CN=69d1e2b5-04c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:99:ec:34:3e:52:cc:88:90:93:27:26:89:
27:97:0e:6f:78:9d:82:9e:98:b7:f7:0e:83:90:a0:
68:78:f8:0c:76:12:b6:2f:e3:74:2c:21:b4:a9:a5:
9e:36:9f:0d:9d:39:c6:e6:ee:99:54:87:f4:62:17:
7b:bc:34:54:7b:51:06:3d:18:27:87:27:53:2b:77:
2a:eb:d2:c6:36:4d:be:74:0d:42:34:92:36:2b:af:
f3:0f:f9:c0:03:88:76:73:f4:c2:10:26:84:3b:1c:
54:88:95:f1:21:c5:3b:3b:54:41:e2:42:d2:da:5d:
66:f3:13:65:85:f3:ea:1f:33:4e:c4:39:12:dd:47:
4e:e0:78:a8:86:96:47:a5:f8:6c:e4:d4:bb:bc:d1:
36:f1:ba:1b:45:9b:95:b9:53:72:1b:d2:f1:d3:d4:
94:8e:16:b7:8f:54:ba:ad:77:18:27:bd:b3:66:58:
fe:d0:e4:72:40:91:a3:55:e9:0a:dd:a8:9b:2f:29:
6e:0d:1a:cb:5c:66:65:98:30:c2:3f:39:42:db:f0:
3c:8f:83:41:a9:69:d0:de:bc:70:30:3a:8a:6e:30:
1d:4b:74:4f:38:46:fa:60:9c:bd:b5:93:8f:66:9c:
1d:20:1c:29:f9:0d:40:46:c8:0f:1a:c4:3b:71:60:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:77:62:F1:05:6B:4A:FD:F4:B9:B8:9C:E7:43:AE:E7:1A:BA:C0:51
X509v3 Authority Key Identifier:
keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:e2:8f:c7:e0:41:e7:7c:80:c7:17:32:eb:b9:ed:e1:25:c4:
15:c5:18:c6:09:f5:c9:d6:52:6a:a6:65:1e:91:bf:8a:8e:b6:
e4:3b:e9:3b:4d:69:8c:ef:09:47:bb:5e:70:7e:b7:c7:b8:1c:
8a:a3:51:e7:fe:8d:d5:33:a7:0c:7d:29:cb:a0:8c:39:eb:4b:
86:2a:6e:8b:fb:e8:0f:a2:e3:72:05:2d:6d:a7:0f:ee:c0:cb:
b8:c0:0e:6a:eb:51:3f:ac:06:fa:49:2a:44:b8:e7:88:27:d0:
6a:aa:2c:c6:8b:c5:cc:ab:ca:66:9c:a3:20:7f:59:8f:56:8a:
20:6a:91:1f:67:a2:f1:9f:d2:4b:3b:38:b0:55:c1:fe:79:0b:
3d:99:18:16:e6:d3:ff:31:ad:bd:00:e7:0b:d7:b8:b8:ed:b2:
78:81:8b:30:87:53:e2:82:f7:4b:f5:8f:a3:8d:fe:0b:11:7d:
41:ee:15:ca:3e:5b:87:28:ea:55:1a:d4:01:a8:41:da:77:25:
bb:96:88:7f:ed:0d:50:cd:e5:39:99:82:37:00:61:1a:ff:6a:
10:c9:9b:04:c9:96:d9:bc:de:5b:5e:4a:ab:81:28:47:ba:3c:
76:8d:13:9c:2c:c6:51:44:4a:c1:a9:8a:ae:1b:80:f5:01:e8:
81:eb:c4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:46 2026 by rpki-client