
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
File: P7ClbiDxlMd0mHnU0iWz-X6evs8.mft (raw, json)
Hash identifier: iGbaqvs1X8Or5sZkN86bz/vUbG8+CVMSD2MeIcqUY3w=
Subject key identifier: 4D:6A:D9:D4:E8:CF:03:C6:67:1D:4E:1C:E9:21:E1:E9:17:D8:BB:06
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 0850
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
Manifest number: 0816
Signing time: Tue 24 Mar 2026 21:06:21 +0000
Manifest this update: Tue 24 Mar 2026 21:06:21 +0000
Manifest next update: Tue 31 Mar 2026 21:06:21 +0000
Files and hashes: 1: P7ClbiDxlMd0mHnU0iWz-X6evs8.crl (hash: Tbn9cYBEjLaXphSee89TyxQaa1MTKA75x4s0GBzUADs=)
2: 4792C69CCB5011F08BC97C80C4F9AE02.roa (hash: koyQjeZeanH/WxX+hG3btxn3WoeYvMUcBqScjdbVX8I=)
3: 5EB91EB40F9611F0A2F2830DC4F9AE02.roa (hash: SSYC29tGawUFme3RXhIZyQeg2PtzaX+D5ecktRUmY7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Mar 24 21:06:21 2026 GMT
Not After : Mar 31 21:06:21 2026 GMT
Subject: CN=69c2fccd-59de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:a0:a7:35:67:29:af:87:91:2f:b9:da:5f:
e8:ad:fc:e8:4e:e9:d1:2a:46:60:d8:61:43:86:1f:
a5:61:56:16:ee:87:43:9a:b4:12:bd:94:23:fa:4c:
b1:f0:91:be:e3:ad:76:2c:57:39:00:fa:24:73:85:
c5:dc:0b:4c:fe:c5:35:9c:d9:8b:03:20:cb:59:5d:
18:5a:00:33:54:97:bc:6d:ba:08:1a:49:da:3c:7b:
db:57:a5:83:f8:2e:36:b1:93:11:34:61:49:fe:74:
2d:42:00:99:67:3d:72:d8:29:54:ac:97:9b:7a:34:
c4:e3:bc:a5:4e:ac:21:7f:1f:9e:89:a6:99:6a:db:
29:6e:18:0f:6e:2c:33:24:33:ba:33:b0:13:43:ea:
36:87:46:a8:74:09:dc:7b:e3:9b:be:e8:8d:9b:35:
55:24:a0:10:a1:13:c1:c8:9f:d8:c1:51:0c:df:01:
57:98:2e:4a:ea:45:dc:da:34:d2:2c:c2:0a:2f:a8:
f8:20:25:d6:57:ee:18:74:9a:71:01:cb:67:b6:a7:
d9:84:bc:74:cf:d0:4e:09:91:d3:08:79:a8:92:ea:
b2:59:38:d7:5a:ca:d7:5a:c0:e2:54:c6:8c:bc:a6:
99:4e:83:2c:bf:23:89:24:a5:e1:f2:86:62:cf:c3:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6A:D9:D4:E8:CF:03:C6:67:1D:4E:1C:E9:21:E1:E9:17:D8:BB:06
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:53:19:ff:cb:8b:83:25:3b:c2:a6:d5:1a:07:db:e9:f5:24:
06:ea:5c:e5:8a:94:1c:96:a3:95:6b:14:05:80:31:dd:f3:87:
9b:3d:30:c2:1a:73:ae:99:17:f4:ee:2d:2d:6e:4c:28:bf:5d:
eb:42:5e:80:0b:83:f2:93:bd:8e:9d:f6:d8:7b:8f:2d:6b:fd:
53:b1:9f:8a:9d:27:49:d6:04:ef:80:79:36:d4:64:8d:33:18:
68:8d:fc:b3:1d:8b:4c:43:58:c9:49:d3:f6:7a:01:35:d1:f0:
99:f0:f0:e5:ed:e1:50:ff:b9:22:16:63:ef:9c:df:57:ab:3a:
f1:43:10:4b:7e:7e:b0:da:e5:fe:42:22:96:21:87:b9:2c:43:
ea:ae:86:8c:c7:f5:a7:35:ed:e6:8a:c3:66:25:61:47:d5:f2:
25:2c:36:40:a2:9e:3f:22:fa:43:9a:96:48:a5:72:c7:d2:1d:
05:8a:c8:a2:a6:a9:40:6c:1a:12:64:0f:ef:be:a7:df:b1:8c:
60:f9:81:b1:bf:0d:6e:9f:0f:11:3c:93:b4:76:c8:ae:2b:a0:
f2:c6:d5:55:ed:92:55:df:f6:50:c0:af:51:ac:6f:43:e2:69:
96:e3:7b:71:cb:4c:e6:c1:17:af:65:ea:40:9e:9c:4d:9a:a5:
1b:4e:cd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:13 2026 by rpki-client