
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier: 0WF60j7LmVHlMvZ0Wh1N2mZvXMym280YcxhXoFyZJ4U=
Subject key identifier: D0:C4:C4:6B:D9:76:E6:2E:45:7A:6B:2A:26:75:E8:88:44:B3:1D:03
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial: 0D9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number: 0D6E
Signing time: Wed 22 Jul 2026 18:14:22 +0000
Manifest this update: Wed 22 Jul 2026 18:14:21 +0000
Manifest next update: Wed 29 Jul 2026 18:14:21 +0000
Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: bPR7NiAeLxd5CKl2WGhfsKHosY5Z3X6rqBLhNPgjEt8=)
2: F058F664642911EAA019224CC4F9AE02.roa (hash: ep+PFUWQF1RX41+hItOv/fNufapGxk0WdJRfAH7AmxU=)
3: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: TfxnYvMqsGqSHtutk4H1PEC5zPxBvYNGo/9OPc5rkx8=)
4: F1862B06642911EAA019224CC4F9AE02.roa (hash: +RFwF52pSjAP6X0JbZmmA2Om4iE/d6yTz0SFz6eLkRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3483 (0xd9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Validity
Not Before: Jul 22 18:14:21 2026 GMT
Not After : Jul 29 18:14:21 2026 GMT
Subject: CN=6a61087d-b7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:74:50:27:04:23:ce:51:e9:4a:3e:59:60:6c:
c7:31:5f:25:d2:3d:e6:bc:ec:71:f2:47:12:1b:66:
c8:54:e7:4a:39:06:f2:b2:f4:72:8e:f1:7b:d6:b1:
09:7a:af:43:95:5f:a5:52:4c:2e:1d:a2:fc:66:a9:
2e:e4:0b:f7:5f:0d:24:93:14:f2:15:67:f1:0a:2f:
65:dd:05:85:34:08:87:e4:e1:ec:e9:28:3d:03:6d:
f5:50:c5:9f:6e:6e:74:40:8d:c0:98:d9:f3:e6:ff:
73:0b:77:df:82:f3:a3:4c:38:ea:b2:ce:68:05:bf:
5a:92:e9:a3:16:51:f6:b1:93:c6:98:36:aa:e6:9a:
80:5a:9f:dd:d5:4d:f9:5f:93:36:4c:b7:23:ea:64:
8e:97:b3:e0:73:dd:4d:4c:2e:c8:a0:26:38:a2:aa:
2f:18:49:79:68:90:63:88:43:d4:32:cd:19:b7:39:
a3:64:a8:d8:f0:35:37:8e:aa:60:8c:3d:ee:dd:88:
47:55:03:06:f4:50:d1:0e:d4:67:c3:cb:70:95:d4:
a1:4a:be:28:17:cf:c6:43:5e:a5:8b:ff:ec:2f:c3:
ac:50:97:de:89:2e:21:bb:19:f7:eb:2c:85:3d:2d:
ee:bd:62:35:53:d3:05:57:c9:8d:a4:7e:e6:f1:0a:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C4:C4:6B:D9:76:E6:2E:45:7A:6B:2A:26:75:E8:88:44:B3:1D:03
X509v3 Authority Key Identifier:
keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:95:da:33:68:6e:3d:ab:09:6d:0d:57:a1:9e:b1:0e:62:
1f:71:6d:55:13:b1:39:13:c0:68:c2:29:aa:49:66:ca:83:f1:
5b:cd:26:58:6d:78:8f:37:d0:91:27:2a:0b:52:ad:70:c8:48:
12:a2:d2:4c:e4:c8:e9:59:c1:1b:44:22:eb:ec:3f:0a:7d:72:
c6:6c:29:5c:8d:83:6f:ee:83:3a:cc:6d:14:ab:2a:a1:2f:b8:
fd:36:e9:b6:f0:ab:8c:c7:72:03:b4:71:39:d0:90:87:d6:9a:
ce:99:c5:a0:bd:d9:1e:b0:50:6b:03:73:ab:e1:41:43:f2:f7:
48:1f:bc:b9:49:20:5a:6d:14:49:0d:80:ea:38:0b:9f:c1:9e:
69:a2:2d:6b:93:3d:42:86:03:21:d7:e9:19:c8:40:69:06:64:
37:48:4b:c6:b7:19:fa:08:d4:08:20:97:1d:56:10:c1:d9:36:
a4:e4:fb:da:3b:65:a3:04:01:6e:8e:90:5f:72:13:aa:94:cc:
26:8b:e1:a3:f7:25:3e:70:89:85:4a:d2:23:e0:13:5c:7c:64:
a5:eb:39:1c:0e:bd:1c:51:8e:7c:fc:67:61:cb:93:9c:c9:51:
63:11:62:7a:b4:60:97:63:0e:05:4b:f3:bc:93:30:08:15:dd:
ca:65:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:42:03 2026 by rpki-client