
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File: p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier: g3arlospB097hOQYhqTRb45jFpReMkSFV+E3+IDybjc=
Subject key identifier: 90:88:14:1A:7A:6E:96:8C:EF:1D:31:5A:9F:CC:50:C6:9E:4A:80:9B
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number: 0165
Signing time: Fri 17 Apr 2026 04:35:19 +0000
Manifest this update: Fri 17 Apr 2026 04:35:19 +0000
Manifest next update: Fri 24 Apr 2026 04:35:19 +0000
Files and hashes: 1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: s44VhiFymvy1yecOXh19x4ovPm7/TxCbG73WHwV4y30=)
2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: B4ENBOCrcVu9vsQndhxBPW5NCETQQHs3UmACZhgsEgU=)
3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QRkcZsDgIJjnFNUASfY5VIlKLs39JH6eip+JITXFwy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Validity
Not Before: Apr 17 04:35:19 2026 GMT
Not After : Apr 24 04:35:19 2026 GMT
Subject: CN=69e1b887-84d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:31:f2:8d:e3:79:55:ad:fa:e4:6d:f3:1d:
97:3f:26:bf:c2:a3:4f:46:5b:45:9c:8e:e3:d8:2f:
48:b5:cf:e4:17:87:d4:83:fb:bf:eb:b8:8f:9c:92:
fc:5a:bd:72:66:a9:8b:cd:42:0e:63:d2:7d:c0:8a:
7f:e6:d0:1e:81:fc:4e:80:cb:81:98:09:83:90:f8:
d4:4e:b2:b5:87:f6:7d:88:f0:3f:d9:e5:15:aa:49:
2d:6f:da:45:15:57:50:95:b1:02:ec:0b:3c:37:72:
0d:fc:26:25:cd:f1:14:9c:a2:1b:32:30:66:87:8c:
16:f2:a4:08:83:fd:3a:85:fc:aa:6a:c9:f2:2c:fe:
e2:83:25:11:c8:e7:53:6f:e1:9a:3f:6e:e7:4e:80:
a4:e6:1c:89:2a:5b:5a:59:57:7e:d0:42:e0:8a:0b:
2e:b1:31:c0:b9:25:c9:e5:74:7c:33:30:05:de:58:
8b:16:54:1d:8d:bc:0c:34:fb:5a:13:5a:1c:e6:e6:
7f:c7:2b:4a:1f:1e:13:8a:02:1f:ef:d9:2b:3b:7c:
99:22:ee:02:4e:06:f5:e5:34:44:70:01:95:d3:18:
3b:2d:c3:f6:2d:46:ff:70:99:17:e9:63:9e:87:e2:
f2:45:55:38:00:ed:ab:04:6c:b6:f6:5f:46:01:3d:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:14:1A:7A:6E:96:8C:EF:1D:31:5A:9F:CC:50:C6:9E:4A:80:9B
X509v3 Authority Key Identifier:
keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:37:0d:32:7a:fc:33:7e:e0:eb:30:d6:5a:a2:3f:62:3c:07:
7b:73:e0:f3:93:6c:1f:04:68:d6:22:ce:6f:79:52:76:79:42:
0e:35:12:02:b6:7b:6c:39:b0:c8:52:5b:f7:0f:6a:fe:6d:8e:
28:39:22:7a:65:68:92:7d:88:71:55:ee:95:97:10:38:c6:e8:
4f:0b:7f:70:2f:76:34:c0:e0:1c:2d:36:e5:e9:23:58:d8:ab:
9f:60:6e:6c:c2:1c:5e:c4:4e:a9:a4:6e:29:74:a8:e4:23:95:
6e:14:80:e9:25:17:ba:c2:38:4a:bf:d3:63:e1:63:82:0e:41:
a0:ba:d8:b8:a4:9f:80:43:86:4a:2d:96:5f:86:91:bb:59:24:
2a:4d:5f:7a:0a:88:d9:07:af:d7:6d:20:d4:ff:3b:1b:86:80:
6f:74:fb:cc:09:46:5f:b2:89:b2:6f:8a:a1:0b:7f:2f:42:58:
e2:0a:88:89:ff:b0:6c:e7:41:15:42:2e:24:80:56:2f:23:3d:
6b:57:67:50:6e:1a:49:de:8f:7d:0c:4c:f9:28:f0:e3:51:93:
62:14:5d:1f:23:53:db:8a:ba:5a:e8:24:1e:a0:cf:80:e0:a5:
35:ae:aa:87:88:e7:87:19:0f:96:90:bd:d8:a0:88:a1:77:3e:
10:a3:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:11 2026 by rpki-client