
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
File: w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft (raw, json)
Hash identifier: 6cymUb2JHhd2xkooOTKNhU3tog+CX3m5ZANUzfh9N8g=
Subject key identifier: C0:38:08:15:3C:66:0C:CC:01:C9:9A:41:66:62:16:D8:A4:E7:06:4D
Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Certificate issuer: /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Certificate serial: 07A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
Manifest number: 0798
Signing time: Thu 26 Mar 2026 21:22:53 +0000
Manifest this update: Thu 26 Mar 2026 21:22:53 +0000
Manifest next update: Thu 02 Apr 2026 21:22:53 +0000
Files and hashes: 1: w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl (hash: 6gGUs8TY2ftXdFiv8MkJB96Ps2eOLaoIGL4URBW+Rbc=)
2: 43854B4044D411EB85615640C4F9AE02.roa (hash: 2Xjt4SdBZGaW7oZCb7vo9tweuahkp/3fJMEVxJAgK7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952 (0x7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168197, serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Validity
Not Before: Mar 26 21:22:53 2026 GMT
Not After : Apr 2 21:22:53 2026 GMT
Subject: CN=69c5a3ad-23cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:2f:f2:fe:61:9e:e7:ff:1b:30:0c:29:f7:
4f:b1:43:1e:eb:ee:6d:98:25:5d:ab:24:a8:40:f2:
01:bd:e2:ec:19:4d:0c:9a:f8:6b:25:f9:fc:de:de:
e8:1d:05:ff:6e:6c:72:0e:f0:30:96:57:b0:9b:35:
a5:c6:83:78:31:ce:10:75:30:66:b4:dc:4e:b4:17:
62:db:7f:0b:7c:11:e1:6a:1e:84:77:eb:a9:f1:a5:
be:e1:f7:68:4b:63:33:67:36:a2:f2:a5:1a:cd:df:
5c:1d:5f:94:60:de:ca:56:7e:4b:29:70:48:a9:99:
36:67:40:cd:46:1b:8e:16:8d:04:a3:33:a6:38:e9:
d0:21:18:f2:6a:c9:47:e3:0e:84:68:eb:23:88:36:
cd:80:0c:ad:5d:b7:9b:00:2e:45:f3:04:05:2f:ac:
92:18:54:48:65:ba:42:5c:41:e1:25:fe:04:56:e3:
52:88:8c:3e:01:ba:03:fd:e1:56:ed:c2:ee:45:5f:
24:9d:6c:bb:dc:bb:57:2a:7d:05:95:9c:15:83:e4:
71:b2:d0:0f:7f:83:e5:2a:ab:16:9f:64:3b:bc:e6:
aa:c3:5e:41:3b:fd:b4:a5:45:45:5d:7f:69:03:cd:
03:70:07:54:a1:b6:96:27:a2:61:ab:d7:07:4b:84:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:38:08:15:3C:66:0C:CC:01:C9:9A:41:66:62:16:D8:A4:E7:06:4D
X509v3 Authority Key Identifier:
keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:f9:19:e4:b5:22:38:a4:6c:d4:e4:41:5b:17:97:5b:f8:15:
ec:5a:95:58:09:9b:64:4b:f5:8f:a1:8d:c6:af:db:8d:e4:cc:
01:93:eb:60:d1:05:57:28:97:44:24:cf:5a:81:af:41:31:68:
dc:13:c4:da:b4:35:a3:85:32:44:7d:c3:f5:05:44:dd:01:ec:
f2:5e:7e:79:0e:93:cc:2f:04:ec:8e:e3:e7:4e:7e:05:f6:fb:
b8:16:0f:42:c0:ff:af:01:77:fa:7e:37:31:33:93:cc:4e:1e:
2d:3c:e5:e5:65:ba:79:47:41:f2:22:b3:73:13:8b:54:d9:f5:
3c:97:b7:21:da:cc:98:e3:be:df:7a:20:49:6d:a9:46:2f:66:
4e:38:38:1e:aa:4c:38:bd:3f:cf:4d:20:c2:4f:41:9b:4a:7d:
c9:ae:63:8d:20:11:50:c7:62:67:8a:1c:dc:be:c1:2f:ee:9a:
0e:bf:60:72:7e:36:b7:c1:af:f1:02:17:81:47:15:f6:55:e4:
18:aa:eb:8e:e8:73:a0:2c:c8:ae:ae:59:53:94:ff:8f:e8:ba:
17:44:71:39:0e:13:b9:ee:9a:78:ce:32:37:61:11:c4:c2:7b:
b2:65:80:47:2a:a4:49:fe:f4:06:16:7a:d2:ae:fc:be:ef:a1:
f5:77:f1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:45:28 2026 by rpki-client