
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
File: f7_PGWv9LvBwYlvuxCboYGiKwvE.mft (raw, json)
Hash identifier: HQtBljkMtk8o9H4EfUnY1R7geb2vuqK+LzQNkxbeAM8=
Subject key identifier: 58:C4:46:0A:8A:79:41:60:CF:44:9F:E9:C4:CA:2A:4C:BE:55:2D:79
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Certificate issuer: /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
Manifest number: 0159
Signing time: Fri 09 Oct 2026 05:55:24 +0000
Manifest this update: Fri 09 Oct 2026 05:55:23 +0000
Manifest next update: Fri 16 Oct 2026 05:55:23 +0000
Files and hashes: 1: f7_PGWv9LvBwYlvuxCboYGiKwvE.crl (hash: CsMmrZ8y6TEUJv0E0CWciRaa0W5Y9bBPLCZVfjnCGE0=)
2: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (hash: iLGMG59aI5S5bAd3js+MklsjrDboNtyYlDECw/2ZcTo=)
3: 52F3DAA6C1CB11EF9974C909C4F9AE02.roa (hash: ohxjWHlkTJhZTK1T8wQyRikw0gvXwa42GseAa710uwA=)
4: 476FD748C1CB11EF9557BF09C4F9AE02.roa (hash: cdU+LQCMb0Gz+MHf24Q+R68HXzN4cIoW92uSQpjpO1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Validity
Not Before: Oct 9 05:55:23 2026 GMT
Not After : Oct 16 05:55:23 2026 GMT
Subject: CN=6ac881cc-a227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:ff:f7:c8:2c:54:b1:05:d2:cd:f0:ed:85:
49:b5:3e:e1:14:fe:eb:ab:a7:43:f2:19:f4:ed:14:
1d:80:2c:78:25:a0:d2:a0:62:9e:b1:1c:ab:09:2d:
7a:e9:04:50:50:d6:d0:9a:9d:17:fd:db:fe:6c:3b:
15:a4:6f:17:a8:d0:5d:c1:ad:3d:4c:9e:9a:a1:33:
4d:be:03:36:bb:10:f5:c6:75:3a:f7:6a:37:94:1b:
8b:4e:3c:b0:bd:49:15:27:46:a0:ee:dd:a9:c1:7f:
c5:bd:ef:5e:05:d6:c1:16:8b:c4:4e:76:2a:47:77:
43:20:ae:a3:bf:0e:ba:3b:a0:5f:44:62:9a:33:5c:
0d:a5:6f:7d:c3:cc:63:36:09:ea:e4:e7:f7:9c:65:
ce:a8:95:ba:fe:4a:a4:73:8c:6a:a0:96:d9:ac:b4:
5e:2c:ad:52:44:35:b9:6b:17:b6:eb:ae:e8:86:d0:
7a:ba:8e:ee:28:d2:f6:fc:61:a5:3f:c0:0d:44:7d:
88:69:8e:6f:df:80:d8:c3:43:45:47:9c:a2:e1:2a:
44:a5:95:a8:18:df:d5:9b:00:79:2c:fe:fb:b0:27:
c2:e7:62:bc:58:e9:c8:98:eb:39:17:53:e9:81:2a:
ef:c7:d0:73:6d:8f:00:aa:cb:f9:42:90:a4:b9:48:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C4:46:0A:8A:79:41:60:CF:44:9F:E9:C4:CA:2A:4C:BE:55:2D:79
X509v3 Authority Key Identifier:
keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0b:77:0a:71:93:6a:03:f1:03:d2:bf:d0:07:94:65:c1:d3:
01:d8:92:33:89:be:8e:79:e9:4d:4e:5e:23:6a:1d:ca:1f:19:
97:fb:60:f8:5f:19:3c:6d:15:dd:c0:4c:eb:0b:cf:bc:cc:83:
34:19:ca:4a:21:52:fa:0c:32:2c:5f:ae:81:4c:22:0c:16:bb:
7c:13:23:e4:74:07:17:e3:f8:ee:4f:2e:6c:c0:94:44:af:c0:
3b:9c:8b:65:ae:b3:73:9a:76:4b:46:60:4b:12:ad:4f:73:5f:
b4:bd:87:c5:27:8d:1c:e9:b4:83:06:99:0c:22:a1:72:74:0b:
ed:41:c8:53:41:de:8c:ac:a6:82:6e:01:ab:18:c8:c6:f4:1d:
ca:12:12:42:a3:e8:72:6d:a7:f8:84:a9:06:c6:4d:dd:bd:ad:
fc:cc:73:2a:be:77:e1:28:38:e0:44:cf:6e:1d:4a:77:41:ac:
09:22:f0:cb:e2:1b:08:2b:73:38:7e:72:3e:4f:8b:dd:56:50:
6e:06:f6:bf:89:31:86:44:ce:f0:aa:5e:e0:2c:a1:bd:e9:7a:
6d:d8:12:2f:e3:80:74:39:78:65:23:36:00:10:c1:0d:2f:23:
72:40:9b:01:a0:a5:02:ff:68:7c:1c:6d:9e:24:b4:e4:f0:a2:
f7:49:bb:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMzNTgxMTAvBgNVBAUTKDdGQkZDRjE5NkJGRDJFRjA3MDYyNUJFRUM0MjZFODYw
Njg4QUMyRjEwHhcNMjYxMDA5MDU1NTIzWhcNMjYxMDE2MDU1NTIzWjAYMRYwFAYD
VQQDEw02YWM4ODFjYy1hMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn9P/98gsVLEF0s3w7YVJtT7hFP7rq6dD8hn07RQdgCx4JaDSoGKesRyrCS16
6QRQUNbQmp0X/dv+bDsVpG8XqNBdwa09TJ6aoTNNvgM2uxD1xnU692o3lBuLTjyw
vUkVJ0ag7t2pwX/Fve9eBdbBFovETnYqR3dDIK6jvw66O6BfRGKaM1wNpW99w8xj
Ngnq5Of3nGXOqJW6/kqkc4xqoJbZrLReLK1SRDW5axe2667ohtB6uo7uKNL2/GGl
P8ANRH2IaY5v34DYw0NFR5yi4SpEpZWoGN/VmwB5LP77sCfC52K8WOnImOs5F1Pp
gSrvx9BzbY8Aqsv5QpCkuUjRRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjERgqK
eUFgz0Sf6cTKKky+VS15MB8GA1UdIwQYMBaAFH+/zxlr/S7wcGJb7sQm6GBoisLx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzM1OC83RDQwNjQ3RUMx
Q0ExMUVGQTNGMjRBODdDNEY5QUUwMi9mN19QR1d2OUx2QndZbHZ1eENib1lHaUt3
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Y3X1BHV3Y5THZCd1lsdnV4Q2JvWUdpS3d2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzM1OC83RDQwNjQ3RUMxQ0ExMUVGQTNGMjRBODdDNEY5QUUwMi9mN19QR1d2OUx2
QndZbHZ1eENib1lHaUt3dkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApwt3CnGTagPxA9K/0AeUZcHTAdiSM4m+jnnpTU5eI2odyh8Zl/tg+F8ZPG0V
3cBM6wvPvMyDNBnKSiFS+gwyLF+ugUwiDBa7fBMj5HQHF+P47k8ubMCURK/AO5yL
Za6zc5p2S0ZgSxKtT3NftL2HxSeNHOm0gwaZDCKhcnQL7UHIU0HejKymgm4BqxjI
xvQdyhISQqPocm2n+ISpBsZN3b2t/MxzKr534Sg44ETPbh1Kd0GsCSLwy+IbCCtz
OH5yPk+L3VZQbgb2v4kxhkTO8Kpe4Cyhvel6bdgSL+OAdDl4ZSM2ABDBDS8jckCb
AaClAv9ofBxtniS05PCi90m7BA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:21:26 2026 by rpki-client