
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier: kE8jgKfVPous3SQ/hwXkB3XVNw5EApRdetMwgto0BPM=
Subject key identifier: DE:11:A0:72:70:CD:D2:0E:0F:F5:45:AC:68:53:2C:7D:98:20:D7:F5
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial: 0AE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number: 0AD7
Signing time: Sat 04 Apr 2026 19:15:30 +0000
Manifest this update: Sat 04 Apr 2026 19:15:30 +0000
Manifest next update: Sat 11 Apr 2026 19:15:30 +0000
Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: XEV9kvsjvbQfFNh4Sv8JGooxQZFDxU4AF6QBFOJ9HWk=)
2: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: th+/tvMvg+ad5+YQ/zoIufkXoQMlFYiSs+rYqVFCmXs=)
3: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: dcrlUq/LfqIpPMteaZR03KFsAdJIOdisOuX79mITHI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2791 (0xae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Validity
Not Before: Apr 4 19:15:30 2026 GMT
Not After : Apr 11 19:15:30 2026 GMT
Subject: CN=69d16352-3025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:c0:0e:4a:6d:8d:5b:71:c0:bd:fb:65:57:
40:d3:cb:49:a7:84:c2:f1:99:62:b4:0d:41:3a:6d:
da:2e:83:6a:f3:92:79:91:57:ce:0a:40:56:8c:22:
6f:c7:3d:0f:a1:37:91:74:d3:d3:8c:66:b2:4c:bf:
e0:16:35:e4:29:ae:dc:39:7d:7e:f7:61:e1:a1:75:
ab:69:71:36:88:96:50:d2:3f:f8:20:52:ac:b8:67:
c3:29:b6:2c:af:63:8f:ba:68:a3:e2:78:0e:d0:bb:
db:fd:6e:2c:7c:f5:0a:7f:ec:e7:77:fb:3f:08:ed:
84:00:89:b9:59:e3:ec:7c:c8:5c:a6:17:8e:1d:65:
27:71:eb:25:07:06:7e:51:f5:c2:8a:ea:be:74:c1:
1f:0a:13:23:c9:c1:3f:db:b2:0c:ad:d5:a1:3c:aa:
6f:9d:2a:51:b7:b9:1c:10:bc:28:39:b3:69:32:dd:
b7:80:08:33:f4:e9:60:5e:5b:70:15:df:51:92:8e:
4d:72:e4:17:d8:7e:7a:eb:d3:42:82:30:65:a8:e2:
36:75:86:53:7e:54:a0:03:e0:11:25:5d:6a:74:db:
66:af:42:fe:72:68:86:6f:1e:6d:c8:14:63:ff:5a:
df:da:e3:a6:bc:9e:e3:33:14:bf:a3:b6:bc:e3:75:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:11:A0:72:70:CD:D2:0E:0F:F5:45:AC:68:53:2C:7D:98:20:D7:F5
X509v3 Authority Key Identifier:
keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d7:ab:1f:29:32:fb:9a:ca:04:80:cb:26:71:57:b0:a4:98:
32:74:c9:7d:fc:61:1a:0f:63:36:1f:56:98:88:29:18:1d:43:
d7:48:09:16:89:1c:e9:dd:00:50:b0:be:36:86:96:13:d9:be:
7a:14:79:57:ce:46:ea:0e:12:68:72:d6:60:13:59:a8:49:10:
28:43:a6:4b:48:b3:79:e4:40:ed:b3:22:7e:bf:59:23:da:fd:
43:b1:da:ff:af:d8:39:62:72:03:a7:bd:4d:bf:9e:8b:e6:04:
53:ff:32:4f:04:ca:94:2d:51:5a:08:14:fa:9b:02:80:8b:ba:
a8:02:d4:da:08:41:fd:24:66:01:98:8f:66:d4:2d:0d:e5:f4:
48:73:d8:ec:e4:c7:ee:30:7d:c8:a0:e6:d2:0a:bb:57:89:80:
3a:ae:e7:f5:11:d7:59:80:7c:98:47:10:8c:78:82:e6:ec:82:
1b:63:e4:a6:77:27:d7:c4:a0:fb:f5:22:46:62:59:2c:8d:4d:
28:cf:09:79:60:bd:3f:8a:19:1e:46:6a:1b:b7:13:ba:90:9e:
d9:9b:0b:fe:51:0b:22:df:43:c6:85:57:c8:fc:72:7c:4b:ab:
61:1f:0e:34:88:cd:56:e8:e3:38:3b:11:96:d2:47:31:d4:18:
6d:c2:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:15 2026 by rpki-client