
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier: EYcGrWAgBlE504LzzxGUpBCvXjLzAPl0DhKkUHrhTEM=
Subject key identifier: C4:F0:5A:C2:ED:BE:1E:D6:12:C4:48:06:87:8E:AF:54:02:3E:F8:1C
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial: 0AFA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number: 0AEA
Signing time: Tue 12 May 2026 19:27:37 +0000
Manifest this update: Tue 12 May 2026 19:27:37 +0000
Manifest next update: Tue 19 May 2026 19:27:37 +0000
Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: wa3V7RVSABAcl7A57tyxgUtHEsoqU/xL2uwe+gr4j84=)
2: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: th+/tvMvg+ad5+YQ/zoIufkXoQMlFYiSs+rYqVFCmXs=)
3: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: dcrlUq/LfqIpPMteaZR03KFsAdJIOdisOuX79mITHI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2810 (0xafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Validity
Not Before: May 12 19:27:37 2026 GMT
Not After : May 19 19:27:37 2026 GMT
Subject: CN=6a037f29-77e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:40:db:c8:c2:81:c1:8e:6f:47:c8:24:67:
eb:82:48:46:71:d7:a6:4b:07:c8:40:92:7e:95:9f:
9a:39:58:a2:94:11:2c:35:07:c7:ee:49:21:b9:0e:
3c:99:6a:d5:60:2c:50:48:24:80:7f:ce:4c:dd:e0:
c2:22:14:3a:55:0d:3d:dc:ea:3c:2c:be:f5:a4:85:
f0:ba:91:23:2e:73:96:14:c0:fd:d6:ae:be:2a:89:
22:66:b1:3f:f0:e8:11:cd:55:b7:2f:41:95:41:c1:
e8:0b:59:3b:90:92:c2:45:ad:a6:00:bc:b6:12:72:
b2:91:27:96:47:4a:ab:2e:62:e4:2a:72:83:94:fb:
06:29:92:bc:d2:30:16:22:d6:77:59:03:42:9b:c2:
19:b0:44:a1:0c:8f:ae:ec:7a:1e:6d:65:ef:43:33:
ac:e3:dc:f8:18:57:9b:90:2c:0e:bd:ee:f0:39:c4:
ca:35:77:29:a2:ea:28:22:5a:e7:ce:97:41:7e:ce:
18:fd:19:0d:91:28:0b:35:12:5c:0d:8d:21:9b:fc:
92:ca:76:89:28:8d:68:cb:de:d0:95:ee:f8:11:4b:
bb:cf:47:e3:5f:13:bf:53:c6:27:b1:62:07:3b:9b:
35:54:26:00:6e:ee:88:c3:c6:dd:a0:1a:10:af:d5:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F0:5A:C2:ED:BE:1E:D6:12:C4:48:06:87:8E:AF:54:02:3E:F8:1C
X509v3 Authority Key Identifier:
keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d3:4a:0d:64:01:16:e2:bc:ca:20:27:a5:be:3e:90:10:7a:
1f:b1:48:e8:e5:a2:5e:f8:37:7e:e1:a7:98:c3:30:71:5d:15:
8b:1f:8a:7f:bc:2c:67:a7:52:4c:c4:8a:ee:d4:da:9a:06:8c:
0f:27:03:25:31:0f:95:26:29:82:80:db:a0:64:df:74:9d:dd:
6b:b4:b6:43:fb:e1:5e:da:4f:2b:61:1d:f9:0d:f3:c6:48:e7:
1f:59:74:7c:ba:2f:f3:bc:a2:5b:c4:55:50:49:a2:95:6e:c8:
3e:cf:ba:7a:e9:71:e9:d6:7d:78:be:e8:bf:8e:61:a7:98:93:
4e:87:b7:a8:bb:86:15:45:4b:1c:71:9c:43:7b:92:b8:ab:30:
d6:f9:31:9d:06:aa:87:70:ac:23:e3:78:15:d8:19:0c:f2:ec:
07:a2:b5:ad:f7:59:7d:5c:23:3b:5a:d2:16:8c:39:35:67:12:
5d:09:87:dc:d5:e6:bf:df:79:b1:73:54:b1:06:8d:35:55:50:
fb:f2:21:77:49:cc:a2:98:a3:e1:46:7c:f3:73:b6:e8:14:57:
2f:b2:8c:a1:d1:76:ae:1d:3d:89:9b:ee:4b:49:b5:f6:86:88:
01:c5:ca:25:f5:45:f3:1b:20:d6:06:85:0d:5e:22:01:7e:7f:
c7:b6:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:40 2026 by rpki-client