
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
File: PefvwEame5klu7vcYTKxKXXbSm0.mft (raw, json)
Hash identifier: ecr6zxT4EvZ8O8+2+nCA+GtSAuLlSfYXjNM/5wVOcws=
Subject key identifier: 47:6D:BE:62:E9:EC:7F:53:63:04:01:D1:48:A9:95:2D:DC:42:8B:D3
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial: 09DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
Manifest number: 09AE
Signing time: Sat 04 Apr 2026 19:50:25 +0000
Manifest this update: Sat 04 Apr 2026 19:50:24 +0000
Manifest next update: Sat 11 Apr 2026 19:50:24 +0000
Files and hashes: 1: PefvwEame5klu7vcYTKxKXXbSm0.crl (hash: hKEl8Jwkxpl0vgai7RL5sVv/voF5j6OKEL7cuVbNjzg=)
2: 2DFEDC68A39711ED936DC309C4F9AE02.roa (hash: yPQ68Wi4BYWR2BigdVLY6aIZpd03CRX9NxKeTmERqZc=)
3: 9BB410F021B011EFA6C95F83C4F9AE02.roa (hash: PxIP/jXK2VGNJ4cEOD340rrzNHlKanWqUrz7QZmA3+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2525 (0x9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Validity
Not Before: Apr 4 19:50:24 2026 GMT
Not After : Apr 11 19:50:24 2026 GMT
Subject: CN=69d16b81-077f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:11:0e:da:12:19:25:6c:89:e9:21:e5:1f:
74:cc:7b:0e:a6:7a:37:5c:d2:bf:45:87:67:19:fb:
49:3a:32:74:df:a0:48:ed:48:35:b7:df:ac:13:76:
50:d5:8a:31:5b:29:27:50:9d:ca:2f:51:1b:cf:e3:
40:33:63:c9:20:f0:c0:2d:eb:f7:fb:89:c4:2e:23:
f4:95:7a:ab:14:f0:db:62:b3:b1:d3:ab:a0:b7:a6:
e0:d3:c9:68:96:bf:85:2f:4d:35:84:73:ae:8f:46:
ec:3a:36:da:6b:fb:62:6e:7e:7d:c7:15:47:c4:df:
91:fa:d3:ac:78:e4:1c:02:81:02:c2:42:57:3d:b1:
f1:5d:a0:22:36:6b:ba:82:02:e5:6a:14:42:19:d1:
53:13:11:d8:a7:4c:90:24:30:09:8f:18:f6:4c:42:
e9:9c:6f:af:ff:45:d7:ec:60:1d:b8:70:54:55:df:
78:7c:b5:90:f6:6a:c5:e9:7c:99:98:1a:07:18:7d:
3a:1f:03:45:66:86:08:94:ca:bc:8c:f3:b5:c8:b6:
22:fd:38:6a:9f:a8:e0:6d:06:da:74:6d:11:df:2f:
84:d0:4c:fe:b7:07:6b:49:ae:88:10:48:18:0d:2c:
42:3f:89:7f:1b:64:0c:a9:79:5c:a3:67:9e:d9:79:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6D:BE:62:E9:EC:7F:53:63:04:01:D1:48:A9:95:2D:DC:42:8B:D3
X509v3 Authority Key Identifier:
keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:75:b0:02:01:3f:7a:a2:b0:bb:e5:04:ae:f9:43:60:f7:0a:
8d:a6:ff:87:f8:b5:53:a9:63:7d:2a:fd:9c:c4:b7:26:da:fa:
78:14:6f:a4:f9:99:b4:43:cb:a5:13:db:bc:02:25:0d:aa:b2:
a6:50:9b:b3:89:19:08:37:61:39:3c:4e:87:f4:7a:23:f6:da:
47:01:47:2e:3a:1a:2d:14:b1:12:93:a2:6b:51:d8:05:0e:2c:
ff:c0:7a:21:3b:4a:79:c1:9c:68:1b:e6:cf:75:43:bd:e8:ef:
1c:1f:3f:30:c3:c9:b4:c8:cd:dd:c2:59:fb:cd:41:0c:46:c5:
06:ed:09:56:40:50:9e:be:2c:56:20:2e:ff:d7:ea:03:3f:67:
cd:0a:11:19:a6:de:fa:aa:74:7a:c0:91:92:d3:c4:c3:14:ad:
cb:fb:48:94:a5:d2:83:d9:e1:90:b4:df:9f:5e:a8:c6:f2:f8:
2e:71:09:ec:3b:8d:c4:04:76:3c:6d:66:a0:13:56:34:5b:2a:
1c:08:b9:44:e2:d2:c7:f8:33:77:a8:f2:3a:d2:b3:a9:00:ff:
a8:ef:c6:54:2b:56:36:c8:c0:a7:df:49:f8:18:4f:c5:32:ce:
d2:a0:4c:27:f0:25:12:4f:a8:08:aa:b1:94:8d:f1:0e:c2:0a:
11:76:a9:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYxOTAxMTAvBgNVBAUTKDNERTdFRkMwNDZBNjdCOTkyNUJCQkJEQzYxMzJCMTI5
NzVEQjRBNkQwHhcNMjYwNDA0MTk1MDI0WhcNMjYwNDExMTk1MDI0WjAYMRYwFAYD
VQQDEw02OWQxNmI4MS0wNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkVQRDtoSGSVsiekh5R90zHsOpno3XNK/RYdnGftJOjJ036BI7Ug1t9+sE3ZQ
1YoxWyknUJ3KL1Ebz+NAM2PJIPDALev3+4nELiP0lXqrFPDbYrOx06ugt6bg08lo
lr+FL001hHOuj0bsOjbaa/tibn59xxVHxN+R+tOseOQcAoECwkJXPbHxXaAiNmu6
ggLlahRCGdFTExHYp0yQJDAJjxj2TELpnG+v/0XX7GAduHBUVd94fLWQ9mrF6XyZ
mBoHGH06HwNFZoYIlMq8jPO1yLYi/Thqn6jgbQbadG0R3y+E0Ez+twdrSa6IEEgY
DSxCP4l/G2QMqXlco2ee2XmqzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdtvmLp
7H9TYwQB0UiplS3cQovTMB8GA1UdIwQYMBaAFD3n78BGpnuZJbu73GEysSl120pt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE5MC9DMzczMDBFOEFF
MTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1a2x1N3ZjWVRLeEtYWGJT
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BlZnZ3RWFtZTVrbHU3dmNZVEt4S1hYYlNtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjE5MC9DMzczMDBFOEFFMTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1
a2x1N3ZjWVRLeEtYWGJTbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYnWwAgE/eqKwu+UErvlDYPcKjab/h/i1U6ljfSr9nMS3Jtr6eBRvpPmZtEPL
pRPbvAIlDaqyplCbs4kZCDdhOTxOh/R6I/baRwFHLjoaLRSxEpOia1HYBQ4s/8B6
ITtKecGcaBvmz3VDvejvHB8/MMPJtMjN3cJZ+81BDEbFBu0JVkBQnr4sViAu/9fq
Az9nzQoRGabe+qp0esCRktPEwxSty/tIlKXSg9nhkLTfn16oxvL4LnEJ7DuNxAR2
PG1moBNWNFsqHAi5ROLSx/gzd6jyOtKzqQD/qO/GVCtWNsjAp99J+BhPxTLO0qBM
J/AlEk+oCKqxlI3xDsIKEXap0w==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:01 2026 by rpki-client