
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json)
Hash identifier: T9XPN5FSZ15+LO+ILh4YY6FXZ+KLjmk5rSq17qjbV7E=
Subject key identifier: F1:1C:09:0A:EF:55:B9:AD:D1:F4:35:BB:3D:B4:7A:36:89:7A:1B:C4
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2C45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
Manifest number: 2BF0
Signing time: Wed 22 Jul 2026 15:38:14 +0000
Manifest this update: Wed 22 Jul 2026 15:38:13 +0000
Manifest next update: Wed 29 Jul 2026 15:38:13 +0000
Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: ucYcwUfFqmLsqxi8dkn+SrMyJn88gIAVWTQ/vvsqaVA=)
2: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: 80yPdyzDWGKZGoqPlrkXe6z7oxzuh7a6qYo6nHURbRI=)
3: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: lwhgxQ+LgrJn47zyUAnLsM4ouCqlk1HX6qTOZMFb/HM=)
4: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: e0sKc/3PzukaFrJycUXB6K4Zrj8DGKsFURALFcSQcVU=)
5: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: Eo31vAFnAsF5u9q6EjT+7W+u7j0+BA8u4cDp5rL/syM=)
6: 994EDA7E477011F19156235992833773.roa (hash: cW3AAUhFV3UrR438cEqC9lCUETRlljc4Il2HXpHaPiI=)
7: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: KdnM+2nBmwCpA+MGMHO0Bl1xzd46blXEMYh3gkA7MWA=)
8: 67651980457511F1A878DB0BB4833773.roa (hash: GjVTK2ytg9BrTHoilrkMS80z8PqnneVdCKJsJLnsMTU=)
9: A2842DA6E07D11F0A337A81D3B6F56BC.roa (hash: BXRFGNYuity9lTYV79AbAsykkMdd6+n6EZ7PrTkQhsk=)
10: E8573BE8F1C111F098487417396F56BC.roa (hash: F0Fv187N1RGFhEEbx/oMjZ1udUPLSoWgSQeuKM9bGms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11333 (0x2c45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Validity
Not Before: Jul 22 15:38:13 2026 GMT
Not After : Jul 29 15:38:13 2026 GMT
Subject: CN=6a60e3e6-9890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:a3:fa:46:7d:70:a7:72:cf:6c:18:15:a3:
b3:ac:95:f1:27:16:10:fa:b7:cd:18:fd:34:c2:86:
ef:31:82:8e:ba:16:3e:c3:08:87:d2:c6:00:f0:2a:
01:62:5d:10:58:81:fe:a8:47:35:75:6e:fe:2b:95:
06:9b:80:59:44:52:6a:a8:1f:2d:08:2c:af:81:be:
57:28:57:36:1f:20:6e:28:f8:24:65:3b:e3:bc:82:
94:c5:aa:e7:1b:05:be:7c:a0:3e:51:fa:fc:4f:95:
ca:9c:57:7f:ac:f7:4b:18:f5:dc:9e:43:75:d6:d2:
66:aa:62:e9:df:0c:fc:3b:7c:0c:d4:f5:35:a3:3e:
d3:51:96:d9:82:35:83:e6:b9:42:98:36:37:fe:9a:
56:5b:77:48:99:20:d6:85:18:13:4c:aa:c5:f0:6e:
3f:50:d8:c4:e2:80:70:cc:3f:77:31:a6:88:30:11:
b9:76:88:be:1d:40:b0:86:99:02:40:26:17:e1:19:
7b:98:7f:d5:50:76:63:42:83:b3:b7:8a:b5:c2:62:
aa:c7:bf:0a:95:0c:e9:b4:90:c1:92:ba:40:ba:22:
86:49:c1:55:3c:b6:e1:9a:34:69:a5:80:a6:f7:3e:
38:a6:9e:2b:d4:6e:55:58:11:cd:59:37:d4:bd:28:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:09:0A:EF:55:B9:AD:D1:F4:35:BB:3D:B4:7A:36:89:7A:1B:C4
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fe:31:6b:84:0d:63:b6:8e:03:37:16:a0:e4:50:1e:b1:99:
02:0f:fa:4f:a2:09:1e:7f:93:ba:58:ae:14:0c:6e:e9:95:b0:
88:e8:47:6e:ca:05:16:a3:1c:dc:13:0f:4c:3b:3c:6c:b9:35:
51:70:86:51:bf:2b:cc:55:e1:a7:b5:29:ab:96:61:7e:25:b5:
ab:c8:27:9a:93:98:f0:0a:1e:49:dc:0d:b6:fe:84:74:3e:c8:
82:a6:a2:cc:df:cf:d3:5c:19:59:5c:36:f8:d7:79:72:77:23:
fb:30:4f:e9:40:13:5b:5e:1c:fb:c9:5c:30:99:18:03:86:a5:
4d:86:b2:b1:ba:91:28:7b:fa:82:05:07:69:8c:5e:16:b7:3a:
a4:e6:68:40:93:60:8a:77:21:c2:1f:3f:86:c1:0e:1d:ae:f0:
59:b7:20:20:2b:d4:ba:df:a9:5f:e4:61:f9:7a:1a:5f:56:14:
8f:27:46:27:98:99:bc:38:e9:81:ae:5e:95:ef:a3:29:38:1a:
48:ee:df:d4:8e:41:fb:b2:96:eb:fa:af:08:67:a2:9e:1d:5a:
05:d4:11:01:96:48:f0:49:ce:d1:0e:14:c2:55:c5:c1:3c:c3:
59:47:7f:bb:f8:1a:5c:16:c4:3b:04:79:00:96:54:a2:8a:ef:
c1:66:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:08 2026 by rpki-client