
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
File: P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json)
Hash identifier: /LeQ6KOtP4tX1jjrnjJZND891DoNHcEnZtFapWYs4+A=
Subject key identifier: 17:47:FE:D2:34:85:70:CB:68:BB:70:FF:7A:A2:9E:55:DE:D1:CE:FC
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial: 0377
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
Manifest number: 0360
Signing time: Wed 25 Mar 2026 00:35:32 +0000
Manifest this update: Wed 25 Mar 2026 00:35:31 +0000
Manifest next update: Wed 01 Apr 2026 00:35:31 +0000
Files and hashes: 1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: DkBHeJp3rU47jdK8RNBXr1+x9w0u6pOUZGWYGvbv52o=)
2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: W7y1CN+6cLq6cyReO/lg0SLMVpEUjYPAtp8rF5mRPak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Validity
Not Before: Mar 25 00:35:31 2026 GMT
Not After : Apr 1 00:35:31 2026 GMT
Subject: CN=69c32dd4-338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:17:67:a3:0c:8f:71:46:33:13:7e:bb:67:
e2:4c:fc:b9:42:fd:83:d1:4c:dd:49:1c:73:23:22:
2f:73:45:0a:b4:46:13:3b:87:6e:53:ab:4b:ac:ea:
ae:83:3e:30:31:f6:7e:0c:77:4c:bc:e8:6f:3e:7d:
cc:2c:3a:94:86:82:62:1c:48:7a:3f:af:86:10:83:
ff:4e:99:8e:f7:c4:7c:c1:1f:b4:c9:14:e3:9c:77:
63:f3:34:90:e6:dd:2d:12:eb:60:60:9f:59:69:20:
3d:ec:48:03:8d:df:56:11:84:a3:39:29:52:79:96:
5c:10:e8:d6:f5:cb:a7:bd:88:f5:b2:6e:bd:40:4a:
e1:f2:9e:a4:85:75:f2:b7:43:ce:0f:0f:8a:36:cd:
4c:d7:e2:0f:17:d8:4b:70:1c:7c:4a:7b:c7:a6:0a:
62:49:3d:38:9d:36:ae:be:23:e0:a5:2e:80:cd:bd:
37:f5:31:9c:f4:b5:d8:1f:09:cf:cf:91:0c:91:34:
db:33:75:4f:b3:71:01:69:5b:45:9e:68:3f:c4:c1:
4b:16:3f:10:e8:4a:da:82:21:46:11:db:d7:3b:d3:
ed:04:50:b0:a9:cd:f6:d9:3d:79:69:01:8c:b5:ac:
a9:a5:8a:ac:5f:e1:d1:34:06:e9:5d:b9:e8:f1:8f:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:47:FE:D2:34:85:70:CB:68:BB:70:FF:7A:A2:9E:55:DE:D1:CE:FC
X509v3 Authority Key Identifier:
keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:eb:eb:40:8f:9f:e6:5b:51:25:2b:ba:0d:7c:6d:77:9f:4a:
f7:87:8d:32:b4:4b:43:cd:a9:09:ef:a9:47:12:2c:58:bf:94:
f7:5e:89:20:42:36:d9:e3:60:0d:a3:19:4a:1c:a1:92:cd:8d:
2d:f2:85:ea:f2:cb:85:f6:00:8c:99:f5:f1:08:e9:cb:20:41:
9a:a2:87:31:bf:6a:82:53:f7:4a:9e:8b:a4:c0:f0:91:fa:bc:
b9:0f:30:a8:8f:bd:6f:12:e4:11:11:23:a8:f9:ed:bd:80:18:
3f:8e:04:a8:ff:d0:61:a1:ae:e7:56:1a:4f:59:18:86:fe:6c:
80:2d:c7:35:c0:f8:3c:6e:35:fd:d2:a4:b0:06:df:97:ec:3b:
db:f4:bd:8c:74:3c:33:09:88:3e:3f:a8:01:4f:35:ef:12:b7:
88:f1:4d:4e:1c:75:df:9c:14:0d:b7:9d:96:9f:19:0a:0b:12:
1e:0b:e7:29:39:59:e4:d4:1b:7f:ce:66:ff:f4:a7:6f:4b:fb:
ff:ae:6c:20:19:6f:46:b5:ef:83:e1:ee:18:6e:13:de:f2:7d:
95:47:f9:84:76:9c:86:98:99:de:4f:bc:9a:41:42:f5:ca:b2:
6c:1b:e9:80:4b:e2:7f:ca:fa:85:7b:be:ef:25:be:56:6b:d0:
e5:81:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:55 2026 by rpki-client