
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File: P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier: h6FllZIAfbzNEbtOtGeXng3wQWhycZHyeZlENvJ28OU=
Subject key identifier: 2E:20:F0:F8:5D:69:CB:04:39:24:08:6E:53:1A:08:02:23:87:EC:0A
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: 0308
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number: 02D1
Signing time: Fri 17 Apr 2026 01:31:08 +0000
Manifest this update: Fri 17 Apr 2026 01:31:08 +0000
Manifest next update: Fri 24 Apr 2026 01:31:08 +0000
Files and hashes: 1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: OJoO3ibi4eNACfF1YWDZG3cQY0wmqugFUyGdRwyn0gA=)
2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: E6jRmVhR8Wb8IiIIspZxX6LgF3mhurpDSKUcMeN6BpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 776 (0x308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Validity
Not Before: Apr 17 01:31:08 2026 GMT
Not After : Apr 24 01:31:08 2026 GMT
Subject: CN=69e18d5c-7c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:44:06:2d:41:bb:04:74:4a:a5:86:16:65:
8c:99:f0:76:aa:e8:3a:f4:77:a0:69:81:ee:be:07:
02:a4:23:55:80:10:4f:d7:07:7d:8e:18:f1:f6:a1:
19:ed:e9:50:93:aa:ee:5f:f6:1a:ae:61:c3:97:00:
80:a0:25:25:da:04:3a:02:33:c1:f1:60:73:45:d9:
e7:34:39:0f:f2:fc:3e:87:76:64:07:2b:8a:80:b1:
f8:02:9f:53:9c:30:db:f5:bf:db:10:b3:2d:d9:f1:
d1:c3:53:f5:42:19:3c:b1:f7:c7:4a:a2:b9:43:5b:
38:b0:53:91:5f:13:57:98:13:77:b8:17:fe:63:51:
b5:cd:a1:eb:8b:b7:b5:a7:97:ab:a0:c9:f0:16:fe:
2d:49:f2:95:8a:05:07:92:f7:62:03:1b:01:d8:4f:
d6:9e:fa:73:6d:6a:83:60:0f:16:a5:49:90:f0:e9:
fe:4f:52:ff:5a:13:cb:81:23:f9:8a:f2:8e:76:20:
7a:12:d3:05:ce:2e:40:29:b1:f6:f4:67:e6:af:30:
29:0b:50:6e:75:62:3c:8d:44:44:90:0b:bf:25:40:
6e:21:63:11:12:84:4d:1a:bb:33:f0:c0:bf:81:9c:
5b:09:63:63:de:20:ff:dc:cd:bb:7a:ca:cd:a2:00:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:20:F0:F8:5D:69:CB:04:39:24:08:6E:53:1A:08:02:23:87:EC:0A
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:78:d0:0f:5b:e6:bc:fe:81:1b:97:2a:2c:91:e4:19:84:ce:
84:eb:f3:a1:75:63:08:e8:4b:f2:34:6e:59:31:d7:44:7a:32:
1a:4f:41:b6:d6:72:ce:1a:ee:8a:9a:0d:c7:86:ef:40:64:cb:
46:b0:54:e5:85:17:d9:97:17:67:47:c1:d3:91:14:97:0a:e2:
5f:22:50:12:18:94:0b:d6:fd:3b:d0:d7:ee:be:0d:9f:77:84:
1e:e6:14:24:21:be:c9:d3:27:a0:bf:1b:2f:2f:b3:ae:16:ac:
12:34:4b:e4:85:31:e8:53:57:b3:04:65:ad:62:fb:d1:1e:c2:
7a:49:2e:45:da:64:63:88:c7:be:31:43:bd:a6:37:d1:c8:85:
f0:a4:ce:8f:fb:77:44:d4:b6:a6:07:97:9c:0e:57:0d:85:d2:
b9:70:4a:21:b4:7d:0d:65:1b:37:22:52:9d:cc:02:51:31:0c:
ac:44:30:32:45:26:9c:55:6e:d8:18:d8:2c:32:1c:ce:b8:91:
86:60:7e:24:7d:c9:b8:68:6a:0b:2a:a1:fa:51:9c:46:03:e6:
f8:ac:b3:25:30:80:26:ab:99:ea:90:66:d8:88:bd:ba:a5:8f:
51:62:3c:aa:39:0d:0f:53:88:dc:12:61:fe:a1:22:e2:c3:d3:
4c:2f:9d:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFERjgxMTAvBgNVBAUTKDNGQkMzQUY0MzEwMkNFREE0RkEwRjdGQTlCRDkxQjJE
NjUzNDZENkUwHhcNMjYwNDE3MDEzMTA4WhcNMjYwNDI0MDEzMTA4WjAYMRYwFAYD
VQQDEw02OWUxOGQ1Yy03YzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2REBi1BuwR0SqWGFmWMmfB2qug69HegaYHuvgcCpCNVgBBP1wd9jhjx9qEZ
7elQk6ruX/YarmHDlwCAoCUl2gQ6AjPB8WBzRdnnNDkP8vw+h3ZkByuKgLH4Ap9T
nDDb9b/bELMt2fHRw1P1Qhk8sffHSqK5Q1s4sFORXxNXmBN3uBf+Y1G1zaHri7e1
p5eroMnwFv4tSfKVigUHkvdiAxsB2E/WnvpzbWqDYA8WpUmQ8On+T1L/WhPLgSP5
ivKOdiB6EtMFzi5AKbH29GfmrzApC1BudWI8jUREkAu/JUBuIWMREoRNGrsz8MC/
gZxbCWNj3iD/3M27esrNogC1JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4g8Phd
acsEOSQIblMaCAIjh+wKMB8GA1UdIwQYMBaAFD+8OvQxAs7aT6D3+pvZGy1lNG1u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MURGOC8yNkU1MzExNDU1
MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0cFBvUGY2bTlrYkxXVTBi
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A3dzY5REVDenRwUG9QZjZtOWtiTFdVMGJXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MURGOC8yNkU1MzExNDU1MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0
cFBvUGY2bTlrYkxXVTBiVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA3jQD1vmvP6BG5cqLJHkGYTOhOvzoXVjCOhL8jRuWTHXRHoyGk9BttZyzhru
ipoNx4bvQGTLRrBU5YUX2ZcXZ0fB05EUlwriXyJQEhiUC9b9O9DX7r4Nn3eEHuYU
JCG+ydMnoL8bLy+zrhasEjRL5IUx6FNXswRlrWL70R7CekkuRdpkY4jHvjFDvaY3
0ciF8KTOj/t3RNS2pgeXnA5XDYXSuXBKIbR9DWUbNyJSncwCUTEMrEQwMkUmnFVu
2BjYLDIczriRhmB+JH3JuGhqCyqh+lGcRgPm+KyzJTCAJquZ6pBm2Ii9uqWPUWI8
qjkND1OI3BJh/qEi4sPTTC+deQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:44 2026 by rpki-client