
$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier: my/FR18/CqSBWPsQJjyuNkAFWIoXIgwEou1vUkrqnO4=
Subject key identifier: 87:0E:B9:AD:3C:E0:66:AF:88:BB:11:B7:1A:AB:C5:2F:1B:2E:DE:09
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number: 0160
Signing time: Wed 25 Mar 2026 04:03:54 +0000
Manifest this update: Wed 25 Mar 2026 04:03:54 +0000
Manifest next update: Wed 01 Apr 2026 04:03:54 +0000
Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: zKIWN9XjKEoC5V0zvz9j/o5ir+D4vyQmUAouzefPTTY=)
2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: kCxBW9KlV5vONVPJNu5+ty3GjzD9VNwCWVx1zxePNqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Validity
Not Before: Mar 25 04:03:54 2026 GMT
Not After : Apr 1 04:03:54 2026 GMT
Subject: CN=69c35eaa-7a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:f5:24:16:a8:92:14:52:27:b4:12:95:da:
31:f0:15:76:cc:c6:f8:19:ea:a2:a5:49:87:ef:3c:
a8:12:b9:6e:30:c2:54:2e:22:20:22:29:21:57:43:
88:48:e0:9d:37:0e:ed:b3:d6:a2:c8:d0:26:d1:34:
8f:3b:03:a8:be:ea:42:5c:4a:f6:e3:25:cb:02:0b:
4a:0a:18:d4:1e:f0:b7:d2:3e:88:49:8d:50:f9:59:
04:9d:2b:14:61:dd:c2:3a:ec:7e:8d:9c:2f:fb:f2:
ab:df:d8:25:06:31:d4:ee:9c:96:aa:00:90:2b:45:
99:a4:47:e7:4a:79:20:15:b5:1b:da:db:e7:5d:83:
c7:26:77:3e:4e:f5:9d:81:f0:26:7b:75:a2:36:b2:
f8:d1:00:2e:ed:49:fd:cd:12:d8:02:24:89:74:0c:
7e:48:0a:b3:31:3d:fc:fd:a8:e2:ef:df:1b:74:d6:
83:23:d4:16:d5:16:24:5a:18:3f:61:31:fb:72:76:
90:06:59:1d:cb:7d:5c:3f:c2:e1:d7:97:00:31:30:
7f:db:aa:59:9d:18:d2:72:55:67:87:20:e5:61:ad:
28:2d:e7:9a:2a:f2:05:8d:91:87:0d:0f:1b:52:78:
9c:cb:79:48:4f:07:bb:5f:eb:ea:2f:0c:45:75:62:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:B9:AD:3C:E0:66:AF:88:BB:11:B7:1A:AB:C5:2F:1B:2E:DE:09
X509v3 Authority Key Identifier:
keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7e:f8:31:13:04:cf:bf:3f:92:62:01:b6:4b:9f:fe:bf:d8:
1e:c5:84:6c:63:bd:2f:e3:72:65:5a:90:75:77:95:05:18:0c:
90:58:14:92:32:f3:7d:7a:8c:49:e1:12:7b:33:f9:fa:ee:51:
fc:31:a5:e1:3e:08:7e:71:39:d4:ba:c3:0e:50:92:6b:35:3c:
18:2c:be:d1:3f:2c:0a:75:61:50:35:bc:d5:d2:a0:d2:bf:b3:
9d:97:27:5c:1a:40:83:0b:62:eb:28:ab:24:0e:71:b5:aa:78:
bb:a3:a2:2f:49:36:5f:f8:2a:35:43:81:a9:12:3b:28:3a:94:
25:3f:9c:65:0c:fa:bb:25:49:f3:37:2f:c4:12:f4:73:f3:fd:
2d:64:ac:4b:59:53:39:1e:46:ad:02:6a:79:2f:22:f8:e9:bf:
74:c4:88:9c:82:16:ff:2b:19:df:86:a8:27:cd:5d:03:9a:ec:
d7:b9:09:6c:80:92:0b:00:b5:fe:6a:4e:57:51:4b:03:b1:97:
f8:32:2a:8c:c0:60:fa:fe:51:4c:6b:d7:98:da:67:49:0e:92:
cc:be:7d:ee:bd:37:d1:e2:67:12:84:3d:1d:15:6a:77:20:a3:
28:46:bb:a3:9d:f3:f2:2f:d4:6c:c0:7e:88:df:db:29:3c:df:
d7:62:3d:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD
RjkwQTg1NUUwHhcNMjYwMzI1MDQwMzU0WhcNMjYwNDAxMDQwMzU0WjAYMRYwFAYD
VQQDEw02OWMzNWVhYS03YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvA/1JBaokhRSJ7QSldox8BV2zMb4GeqipUmH7zyoErluMMJULiIgIikhV0OI
SOCdNw7ts9aiyNAm0TSPOwOovupCXEr24yXLAgtKChjUHvC30j6ISY1Q+VkEnSsU
Yd3COux+jZwv+/Kr39glBjHU7pyWqgCQK0WZpEfnSnkgFbUb2tvnXYPHJnc+TvWd
gfAme3WiNrL40QAu7Un9zRLYAiSJdAx+SAqzMT38/aji798bdNaDI9QW1RYkWhg/
YTH7cnaQBlkdy31cP8Lh15cAMTB/26pZnRjSclVnhyDlYa0oLeeaKvIFjZGHDQ8b
Unicy3lITwe7X+vqLwxFdWJ0RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcOua08
4GaviLsRtxqrxS8bLt4JMB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4
QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdC
dDhsLU5KQXByeF9Qa0toVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXH74MRMEz78/kmIBtkuf/r/YHsWEbGO9L+NyZVqQdXeVBRgMkFgUkjLzfXqM
SeESezP5+u5R/DGl4T4IfnE51LrDDlCSazU8GCy+0T8sCnVhUDW81dKg0r+znZcn
XBpAgwti6yirJA5xtap4u6OiL0k2X/gqNUOBqRI7KDqUJT+cZQz6uyVJ8zcvxBL0
c/P9LWSsS1lTOR5GrQJqeS8i+Om/dMSInIIW/ysZ34aoJ81dA5rs17kJbICSCwC1
/mpOV1FLA7GX+DIqjMBg+v5RTGvXmNpnSQ6SzL597r030eJnEoQ9HRVqdyCjKEa7
o53z8i/UbMB+iN/bKTzf12I95A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:18 2026 by rpki-client