
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier: LZ8qDZGZ8MmMcbZR7xR8V08lzFMWZQeAjidYH62OJeU=
Subject key identifier: 1D:67:72:FD:B0:2A:03:3D:CE:22:8D:A7:F4:EC:DB:B5:B1:9E:98:6B
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial: 0D78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number: 0D4B
Signing time: Thu 14 May 2026 18:02:54 +0000
Manifest this update: Thu 14 May 2026 18:02:54 +0000
Manifest next update: Thu 21 May 2026 18:02:54 +0000
Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: UzzzC615b2AHkDONt1v78G4BQIB4Qjyg4Qvml5JL5YQ=)
2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: TfxnYvMqsGqSHtutk4H1PEC5zPxBvYNGo/9OPc5rkx8=)
3: F1862B06642911EAA019224CC4F9AE02.roa (hash: +RFwF52pSjAP6X0JbZmmA2Om4iE/d6yTz0SFz6eLkRo=)
4: F058F664642911EAA019224CC4F9AE02.roa (hash: ep+PFUWQF1RX41+hItOv/fNufapGxk0WdJRfAH7AmxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 18:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3448 (0xd78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Validity
Not Before: May 14 18:02:54 2026 GMT
Not After : May 21 18:02:54 2026 GMT
Subject: CN=6a060e4e-e7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:03:66:4e:51:25:aa:d7:2c:ca:59:47:c6:
1d:4d:d7:0c:a1:7a:1b:29:7f:d9:84:30:04:4d:37:
b1:ec:dc:2c:a5:3f:59:06:1c:02:71:8b:45:d2:e8:
c5:9f:75:b1:4a:be:89:07:59:75:0b:f2:5b:c2:85:
d1:77:ae:b1:27:62:84:c8:9b:b5:37:3e:1b:6d:a1:
a0:21:85:e6:97:37:69:6e:59:b5:c9:85:ee:e8:e1:
3f:4d:01:ac:18:0a:79:23:13:54:88:53:f2:be:5e:
c5:b9:d8:3e:27:2b:b8:42:c6:76:76:03:27:6a:6e:
c9:77:cb:48:7e:09:69:65:87:10:6b:62:5a:89:28:
bc:75:61:99:9d:a4:47:c8:b5:d7:7b:5e:be:96:9e:
08:0e:c4:8c:ac:fd:20:96:96:04:e7:cd:ae:ba:b2:
bc:65:29:39:6d:c5:1b:91:20:39:d5:39:ba:63:38:
ad:f8:48:4a:f1:49:48:31:57:00:dc:90:dc:ab:18:
d1:66:30:7e:22:fc:69:7c:d8:f3:17:a6:8d:19:49:
e4:cc:64:94:4d:6e:da:52:97:c6:e0:ba:6b:e9:20:
2a:4c:df:d7:cf:83:11:1d:ca:40:f8:18:76:1c:4b:
12:00:10:18:2f:f1:69:89:08:aa:79:42:14:99:40:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:67:72:FD:B0:2A:03:3D:CE:22:8D:A7:F4:EC:DB:B5:B1:9E:98:6B
X509v3 Authority Key Identifier:
keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4e:64:98:ef:41:e2:c8:11:c0:95:54:1c:6b:48:52:3c:ec:
85:e4:6c:eb:5c:d2:f4:4f:c2:9e:92:ca:0d:fe:36:1a:3e:f4:
42:22:11:7f:3a:d0:1b:7b:99:23:61:9f:fb:80:d4:d3:26:76:
fc:50:ab:7e:c3:dd:a0:53:8a:96:c6:34:18:ab:3f:62:76:ef:
63:b0:51:1b:49:f9:b4:69:86:28:78:d0:cd:8f:26:56:f2:c2:
8a:f1:c1:35:28:ae:7c:fb:6d:01:9d:1d:e5:b5:07:8a:fd:93:
1d:b0:01:7e:6c:91:b0:52:71:14:40:3f:76:60:4b:54:41:0f:
f7:24:54:93:cc:17:b8:5a:e2:c9:cd:16:77:2b:30:81:b4:e1:
ca:b8:0f:16:4d:00:f0:68:ba:db:7a:a8:95:a6:db:d9:fb:d6:
02:a2:02:8b:39:9a:d9:43:83:69:22:4c:23:8f:9d:38:5a:be:
0b:14:60:80:d1:c6:57:7c:b5:8a:63:a6:bf:c4:72:40:de:08:
a2:1e:18:f9:3b:15:4b:8b:23:b0:42:a8:88:b4:5d:66:ee:d9:
f9:ac:52:ce:05:c9:6d:63:08:4c:41:80:bd:ec:53:2c:8b:b8:
01:5d:45:a6:05:e5:e1:6f:fd:fc:8b:6c:47:0f:e8:cf:f0:a5:
ad:83:b3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:46:51 2026 by rpki-client