
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier: z97bTxhPSiDWr5lpEJOrH8EQC7HN11iw1eL60WxAxoc=
Subject key identifier: 8B:A1:6D:AE:AC:73:32:0A:C2:AD:EE:C7:30:61:ED:8F:C1:E3:C5:B5
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial: 0D91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number: 0D64
Signing time: Thu 02 Jul 2026 18:08:53 +0000
Manifest this update: Thu 02 Jul 2026 18:08:53 +0000
Manifest next update: Thu 09 Jul 2026 18:08:53 +0000
Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: ngpPMu90iVzFRYahUW2QWfjHpFXsPBa/tjg5uvAgL70=)
2: F058F664642911EAA019224CC4F9AE02.roa (hash: ep+PFUWQF1RX41+hItOv/fNufapGxk0WdJRfAH7AmxU=)
3: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: TfxnYvMqsGqSHtutk4H1PEC5zPxBvYNGo/9OPc5rkx8=)
4: F1862B06642911EAA019224CC4F9AE02.roa (hash: +RFwF52pSjAP6X0JbZmmA2Om4iE/d6yTz0SFz6eLkRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 18:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Validity
Not Before: Jul 2 18:08:53 2026 GMT
Not After : Jul 9 18:08:53 2026 GMT
Subject: CN=6a46a935-1719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:7b:40:31:c2:20:5d:11:d5:24:43:d9:f9:
9a:98:64:52:a6:24:0a:bd:d2:3a:66:09:51:03:25:
8a:ef:11:16:c9:45:e7:22:4b:27:7b:38:65:0a:b8:
fc:3a:52:db:2b:99:45:19:3f:bb:34:d3:48:64:59:
1e:69:8b:11:63:94:a5:8c:2b:17:8a:74:f1:b1:b9:
de:c9:10:05:43:87:30:32:c7:3c:f5:b0:aa:42:f8:
e7:7a:cd:b3:f1:85:11:16:12:13:90:eb:b7:46:68:
62:bb:16:02:7a:3c:22:58:0c:05:a9:d1:fb:ae:44:
03:a9:28:cb:d2:3f:6f:7b:ba:7b:0e:40:70:1b:29:
01:75:bc:75:81:54:24:a0:fe:0a:ea:60:91:69:ec:
b3:eb:3d:07:81:e5:bb:93:1c:aa:29:c4:78:15:66:
fa:7c:e4:7c:c4:c9:f2:00:99:6c:a8:b4:84:cb:33:
be:bf:39:6c:1b:01:ca:aa:23:3c:60:09:74:1a:69:
0d:93:78:9f:73:62:29:ca:ef:b9:a7:d5:12:c2:bb:
8a:75:3e:f5:d6:62:89:e2:cf:c9:e3:28:d6:3a:67:
2a:6c:5a:52:da:c5:75:67:02:74:d0:40:33:80:47:
0c:3d:1b:28:1b:04:5d:f9:bf:e1:3e:f9:6d:2e:4d:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A1:6D:AE:AC:73:32:0A:C2:AD:EE:C7:30:61:ED:8F:C1:E3:C5:B5
X509v3 Authority Key Identifier:
keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b4:80:d6:72:f6:e1:66:c9:92:7a:cd:46:99:fa:ca:c9:37:
a5:da:fc:bd:6e:72:4f:07:a4:6e:a6:fb:d9:e2:67:c2:1d:19:
1d:8c:8b:1c:d8:93:d5:86:ec:2c:94:c7:99:11:f5:b2:54:95:
1f:79:20:c4:6c:b7:07:b0:60:f3:f2:66:29:65:c9:9f:60:f2:
cd:e5:00:21:4b:22:cf:c1:32:96:fd:5a:62:88:ca:c2:5c:d3:
0b:37:0d:ff:66:73:2c:3f:6c:6f:55:71:0e:f3:7c:75:d2:5b:
2c:e9:97:5d:79:17:45:f7:3a:f5:3a:db:2c:23:ce:67:be:81:
1c:4f:33:44:b1:90:28:17:40:e6:6d:ed:f0:d9:d2:66:12:c5:
a8:20:f4:90:f4:41:0d:e6:ef:8a:d8:a6:51:f0:d6:2c:d8:62:
06:ac:eb:8c:46:e4:23:5e:83:38:e0:f2:0e:f0:7f:1d:cc:1d:
ae:9c:5a:14:76:e2:28:f7:4c:3c:07:b6:09:11:eb:0f:ed:8e:
c6:0f:71:78:f7:80:b1:a4:dc:aa:fa:d8:e4:ad:46:aa:20:9c:
ae:fc:80:a5:d3:a7:0b:7a:56:4a:4c:20:03:53:b2:49:77:f1:
46:9f:23:e2:34:6e:20:19:83:cf:97:20:74:21:9a:b5:ad:45:
b9:ca:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:43:54 2026 by rpki-client