
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
File: P7ClbiDxlMd0mHnU0iWz-X6evs8.mft (raw, json)
Hash identifier: 2eT8EIS6OsplE4zRLzTs9ajBBPdLO1rfjFFyg++5p9E=
Subject key identifier: 17:26:9B:A3:81:83:55:BA:62:29:27:7B:40:6C:C8:3A:B4:25:D9:30
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 085C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
Manifest number: 0822
Signing time: Thu 16 Apr 2026 21:14:51 +0000
Manifest this update: Thu 16 Apr 2026 21:14:50 +0000
Manifest next update: Thu 23 Apr 2026 21:14:50 +0000
Files and hashes: 1: P7ClbiDxlMd0mHnU0iWz-X6evs8.crl (hash: HZzWoB416nH+MudOoSwt51C81oCvHOEKKVcZDo8yZok=)
2: 5EB91EB40F9611F0A2F2830DC4F9AE02.roa (hash: SSYC29tGawUFme3RXhIZyQeg2PtzaX+D5ecktRUmY7I=)
3: 4792C69CCB5011F08BC97C80C4F9AE02.roa (hash: koyQjeZeanH/WxX+hG3btxn3WoeYvMUcBqScjdbVX8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Apr 16 21:14:50 2026 GMT
Not After : Apr 23 21:14:50 2026 GMT
Subject: CN=69e1514b-9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:3b:98:d4:f8:64:79:f0:09:16:77:86:ee:
06:ba:18:6a:0a:82:89:04:93:c7:7d:cb:02:5c:cc:
33:df:38:d1:25:9c:0e:66:75:24:44:1b:41:b4:9f:
c8:56:b5:77:b4:80:cc:2e:af:83:09:d4:86:5c:43:
e6:30:e5:f7:0e:d1:23:db:72:05:43:51:5b:6b:69:
2e:87:06:47:24:57:ee:e6:cc:60:72:1e:12:f4:50:
33:10:7f:b8:09:ae:fb:aa:0a:10:28:11:f5:23:19:
1a:fa:89:3b:3a:12:b0:b1:79:b1:db:74:e8:7d:ee:
48:d5:86:b3:4b:38:67:88:fd:b3:9b:66:98:d9:a5:
27:61:5c:e2:fa:75:7e:cf:b3:d9:b5:45:c8:b5:eb:
9a:99:08:73:8b:ab:5d:c7:b1:19:62:c2:c2:21:93:
db:34:01:15:0f:ab:06:e1:35:c0:a9:a0:6d:3c:f5:
16:0e:0d:ac:b5:08:a4:9e:10:69:e0:fe:71:9c:67:
83:c5:b6:c3:04:9c:e5:53:8c:63:ef:a7:4c:a5:8e:
38:8b:59:f2:ab:f9:94:60:e5:e9:ed:7d:a1:08:11:
53:38:0c:57:52:80:ef:0a:38:98:3c:cd:63:9e:dd:
f7:1c:e0:13:8a:a7:9b:97:0e:d2:ef:3f:f0:ab:21:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:9B:A3:81:83:55:BA:62:29:27:7B:40:6C:C8:3A:B4:25:D9:30
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:74:ff:38:35:0c:0b:96:dd:7b:b5:57:3f:fd:0a:d1:bc:b7:
d7:2c:35:31:02:cc:a7:8e:5a:be:a3:8b:f9:c1:c4:b3:35:39:
9b:66:ce:89:60:a0:d3:04:d3:d1:eb:fa:37:da:55:e9:46:94:
76:02:a3:80:1a:2c:74:9b:28:93:3e:a0:f9:23:ac:9b:0d:3a:
30:07:ea:9c:63:ce:8c:d2:d3:1c:e5:47:10:d1:aa:79:c7:ab:
83:94:b0:55:28:2d:08:4a:2a:b4:b8:d9:99:7a:48:fc:7b:cb:
07:b5:60:28:60:35:3f:e0:26:2e:26:06:32:0e:07:78:07:0e:
5c:34:e7:ae:ce:af:57:e4:40:ce:f8:c8:5e:91:b2:c4:f9:23:
5f:52:1c:f2:13:61:7d:e1:c5:f3:96:70:82:88:05:25:b5:aa:
ce:56:44:81:35:bc:eb:2b:3f:81:86:b2:04:cd:3b:a7:d2:95:
76:c0:9c:d9:4e:91:b6:77:07:0d:18:bd:a0:3f:52:b7:e0:50:
e4:d4:3d:c5:0f:26:74:75:1b:c6:ed:6e:d8:93:f5:34:83:fe:
1b:bb:4b:c2:c4:d7:f4:a1:fb:f3:3f:66:ed:dd:a2:0e:3a:af:
c3:69:11:2f:d7:65:b4:71:1d:30:e8:fb:2d:7a:47:63:38:0c:
7a:89:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:33 2026 by rpki-client