
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier: tjUn4fkDeg+xI8tzjDzWYvb+TPz+mnlr/DBZmQBAiu4=
Subject key identifier: 63:A5:84:AB:D3:49:A6:73:F8:B6:41:7B:D0:7E:AE:52:1F:5B:58:7A
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial: 0D59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number: 0D2F
Signing time: Tue 24 Mar 2026 17:55:55 +0000
Manifest this update: Tue 24 Mar 2026 17:55:54 +0000
Manifest next update: Tue 31 Mar 2026 17:55:54 +0000
Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: 9rbAp7ycFbJcTDtf7VlnQwWW34Z6PtHyJ4VlUKuE4lA=)
2: F058F664642911EAA019224CC4F9AE02.roa (hash: +gE/2Co0Ry7DC9gWx152lomjpfKNvlV8HTlqgxJeQ9I=)
3: F1862B06642911EAA019224CC4F9AE02.roa (hash: 5wHGWPS/ql0EGPzvkqmdpvi1As4P2hhHL9FTJZaGswI=)
4: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: eQrowlB4q/EZz5BA/V3/5geuw2TBk4EspFPR1pHJVYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3417 (0xd59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Validity
Not Before: Mar 24 17:55:54 2026 GMT
Not After : Mar 31 17:55:54 2026 GMT
Subject: CN=69c2d02a-30ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:f7:07:3d:0a:1e:83:1d:b4:b4:db:37:70:
de:f8:4a:fc:fb:0f:b3:24:33:21:ad:ae:85:f2:65:
d5:96:ee:93:88:42:60:8f:bc:fe:fb:3c:c0:dd:11:
6c:a9:41:d5:24:10:da:50:1e:f5:4b:e0:b1:ef:5d:
f4:12:e6:14:3c:af:df:f7:a8:dd:1c:41:22:55:26:
75:b7:c4:77:f0:36:c8:9b:19:23:e0:c1:a1:8e:19:
1e:76:4c:5e:0c:69:70:93:05:25:d3:7a:80:ae:99:
a4:28:39:18:15:1b:aa:e3:ed:b3:ea:e5:7c:71:af:
91:6f:21:26:26:c8:08:23:e0:f7:31:b4:54:a8:86:
d7:01:e2:84:95:6e:5c:4f:ad:f0:a9:ae:2c:01:7e:
d2:ec:df:1c:a9:89:27:db:10:8f:34:55:64:62:c3:
69:73:c0:9c:7b:08:43:41:df:dd:54:89:73:ea:75:
70:8e:e1:09:58:4a:b0:97:18:65:ca:43:14:40:5c:
f7:46:06:9b:97:5c:58:c7:fb:3a:3b:48:33:da:3a:
3f:0c:03:9e:cf:00:2c:be:1a:84:a5:29:e8:ba:ce:
33:9b:49:63:ab:b7:24:a2:d0:92:10:59:5a:de:c2:
bb:bd:1f:fc:c1:62:13:df:af:76:9f:12:84:72:45:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:84:AB:D3:49:A6:73:F8:B6:41:7B:D0:7E:AE:52:1F:5B:58:7A
X509v3 Authority Key Identifier:
keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:69:51:61:4e:ba:9b:3b:79:64:e8:39:1b:0b:61:1e:64:62:
1b:21:8b:77:3b:97:a1:ad:af:02:58:d5:81:f4:5c:a4:bd:46:
91:e6:62:96:99:ad:d6:ec:18:4e:78:a3:a9:5b:27:86:b0:e6:
5f:d7:86:d0:7d:ba:44:67:88:dd:56:76:9f:f3:de:bf:cb:0f:
59:60:67:98:0f:36:e1:f1:1c:ea:7f:cb:71:1b:44:da:f9:a3:
61:6d:3b:13:c9:cf:d0:d0:92:ae:a1:bd:e0:fb:63:2b:a7:0b:
cc:71:c2:63:3f:f4:fd:ca:92:3e:4b:92:1d:e4:5d:af:6e:a6:
0e:db:04:5e:7b:02:dc:80:99:7d:f0:f4:02:f5:cb:7f:11:33:
da:0c:e2:1a:07:dd:3b:49:b8:60:e0:2e:31:bb:f0:c2:1b:1f:
61:f1:a6:4f:bc:6b:48:2b:89:63:01:a7:51:e0:5a:45:5e:ac:
a8:9b:bd:54:6a:f1:2c:e0:60:a8:5c:d2:08:4b:33:73:cf:58:
1a:26:f5:6a:9c:6b:4e:bc:e4:93:ea:99:5b:0f:03:ce:b7:07:
dd:7b:38:b2:21:72:31:35:5b:5a:94:49:97:0f:14:c7:64:f7:
32:a8:31:a1:23:2c:ec:5b:1b:bf:79:01:19:e5:47:e2:6f:ee:
9d:06:6a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:35 2026 by rpki-client