
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
File: w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft (raw, json)
Hash identifier: aGzZClduo1xoXzRIH9RaerbJmBjGU6nU0/w6+kGRq14=
Subject key identifier: 21:37:3A:10:C2:E3:D0:88:89:4A:6E:79:E3:F8:4D:AA:7B:5F:57:A0
Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Certificate issuer: /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Certificate serial: 0809
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
Manifest number: 0800
Signing time: Mon 12 Oct 2026 21:25:00 +0000
Manifest this update: Mon 12 Oct 2026 21:25:00 +0000
Manifest next update: Mon 19 Oct 2026 21:25:00 +0000
Files and hashes: 1: w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl (hash: T4KdO5p00cZ1K4FBKjNyBfxmjWeR5F33oRmE1QnbQmM=)
2: 43854B4044D411EB85615640C4F9AE02.roa (hash: qeh6HwToZUvKiPtIcQ5m53AulGUgnpsw5bQQUf1/wEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 21:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168197, serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Validity
Not Before: Oct 12 21:25:00 2026 GMT
Not After : Oct 19 21:25:00 2026 GMT
Subject: CN=6acd502c-8f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:0b:18:8a:8a:62:06:70:49:f4:ee:2d:ae:
bd:b8:50:0b:f4:22:eb:96:29:26:fe:85:88:ed:d5:
eb:98:54:45:02:37:0e:be:3d:6e:c5:45:f5:28:99:
50:b2:16:1d:e7:9a:af:9b:c2:12:57:49:6f:2a:c8:
b0:7f:83:ee:68:ce:46:3f:33:48:ef:3a:ac:88:85:
97:b2:93:a3:be:40:f0:f9:a6:09:cd:e1:21:ee:e7:
3d:fa:b1:c9:50:79:ad:ce:a8:40:73:9c:d6:2a:9b:
f8:ea:7e:a7:0e:e1:d6:34:e3:5b:59:b8:ec:7a:f8:
c1:da:86:28:ae:06:5d:4f:df:cf:81:ae:7b:41:ae:
82:16:c8:bf:ec:54:84:74:3c:79:d6:26:c2:04:ea:
aa:15:f3:01:f5:86:d3:09:7d:99:20:f9:78:f7:d8:
e7:06:39:19:54:66:ed:14:fb:ce:67:ec:03:2e:2e:
c4:90:81:9f:11:83:fb:15:b0:98:f0:22:3a:e6:ac:
a9:96:59:b5:fe:24:23:7c:29:01:5c:1f:cd:ef:00:
6b:65:e9:d6:36:eb:d5:ad:84:8e:66:d6:3f:0f:5c:
e4:a0:77:b3:08:83:7a:37:ca:38:06:6d:75:f8:7c:
5e:48:95:0d:5b:b8:77:49:1c:a0:bc:f2:df:23:2f:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:3A:10:C2:E3:D0:88:89:4A:6E:79:E3:F8:4D:AA:7B:5F:57:A0
X509v3 Authority Key Identifier:
keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:52:53:02:f2:39:67:16:41:ae:f3:80:29:52:84:7f:80:64:
c3:98:ce:45:68:bd:94:2c:0c:e7:3f:a3:4a:d0:1b:99:8b:9f:
a3:50:dc:d5:93:df:41:b1:39:b2:68:c0:5f:41:18:0c:15:78:
c0:4a:67:94:9c:ca:a5:7a:1f:ff:e3:a7:fd:95:57:31:5a:b9:
9c:a8:c8:dd:ce:f3:34:4c:72:fb:47:f5:8d:37:76:f7:d2:be:
ad:e9:b0:a2:b1:9d:ea:bb:8a:14:0e:9d:e9:a1:09:3c:a0:c6:
b7:a9:bf:c9:b6:c1:8c:95:f7:31:ee:84:5f:08:50:56:28:4d:
63:cc:21:6b:4d:81:06:46:28:3d:47:20:3c:30:6f:23:7f:d1:
7d:31:1d:f3:ce:45:bd:c4:d7:1c:7c:0e:07:7c:63:23:2a:19:
81:3d:10:7f:19:8c:4f:80:fd:ca:c2:96:69:38:ea:36:85:9d:
38:90:56:cd:54:0e:74:b7:9c:69:e2:61:75:53:58:7e:aa:6a:
00:65:4e:51:dd:44:ec:86:2e:85:ae:c7:c0:03:3e:7a:98:31:
cc:88:c8:11:3e:17:ba:de:f1:e4:56:89:4d:ed:ec:e8:9f:14:
97:29:88:f3:b4:ce:dc:32:ef:3e:6a:c2:12:72:0f:8f:90:14:
70:af:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:31:12 2026 by rpki-client