
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier: ntHwQlizkPDwudi9lTWFsYvlrevTBmEgM/nb9KCzjb0=
Subject key identifier: EE:FC:CE:A9:77:C1:A3:AF:F9:1E:EC:1D:75:CC:6C:64:FD:14:AF:BA
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial: 0D87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number: 0D5A
Signing time: Fri 12 Jun 2026 18:00:49 +0000
Manifest this update: Fri 12 Jun 2026 18:00:48 +0000
Manifest next update: Fri 19 Jun 2026 18:00:48 +0000
Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: JonBEU1AFXhGckJqvS4sf8aLViLbJuwOuwBfHVxVjbI=)
2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: TfxnYvMqsGqSHtutk4H1PEC5zPxBvYNGo/9OPc5rkx8=)
3: F1862B06642911EAA019224CC4F9AE02.roa (hash: +RFwF52pSjAP6X0JbZmmA2Om4iE/d6yTz0SFz6eLkRo=)
4: F058F664642911EAA019224CC4F9AE02.roa (hash: ep+PFUWQF1RX41+hItOv/fNufapGxk0WdJRfAH7AmxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3463 (0xd87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Validity
Not Before: Jun 12 18:00:48 2026 GMT
Not After : Jun 19 18:00:48 2026 GMT
Subject: CN=6a2c4951-ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:8a:1f:b8:16:94:97:db:e1:a0:3f:70:d1:
b7:df:c3:df:85:d2:b5:ec:9a:d4:12:5c:56:ef:e2:
7c:1b:09:86:77:7e:ce:61:85:0b:57:b6:84:c5:62:
dc:4c:fa:d4:d9:bc:4d:32:5d:a4:7e:00:a8:af:bb:
de:7e:57:0f:4b:03:05:8e:14:36:f7:fa:4d:33:ed:
3d:3f:82:4a:7b:e0:d1:fd:a6:65:df:7e:15:c7:6f:
57:0b:96:ca:2b:5b:05:d2:64:f3:66:54:0f:49:3a:
6f:55:f9:fc:e2:3a:8b:73:f7:63:79:a9:45:e3:7a:
47:28:a3:c3:04:80:fb:4b:5d:51:9c:3e:4c:08:29:
85:0b:bc:58:e3:37:7e:38:a0:f2:95:21:fb:80:72:
c2:8b:01:82:83:a9:4a:67:b0:ea:ff:6a:d1:20:ad:
0a:bf:5c:e6:fd:96:f0:61:0e:b9:1a:83:23:85:da:
b9:9f:ff:77:08:35:b7:66:47:83:03:d5:21:17:2a:
8e:6c:d9:3a:1c:a9:c4:84:a1:d7:a0:6d:b4:50:00:
b9:8d:58:6f:f2:59:95:1f:46:a9:b7:1b:f8:fa:49:
77:a2:30:20:3b:62:22:eb:d2:6b:48:fb:e0:af:2a:
46:e0:88:e4:8d:ef:50:d1:a5:fd:d5:75:07:ff:14:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:CE:A9:77:C1:A3:AF:F9:1E:EC:1D:75:CC:6C:64:FD:14:AF:BA
X509v3 Authority Key Identifier:
keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:43:e2:ef:1d:bd:4f:dd:3d:7c:c2:9d:52:aa:9b:56:01:f0:
1b:ba:43:ce:7e:a9:4c:b8:31:92:31:6b:b3:4b:85:5e:6c:26:
4f:50:70:2e:c7:0a:73:21:12:9a:83:23:61:43:61:2f:51:63:
3f:aa:75:d7:4f:03:86:93:4c:d0:61:3f:73:6e:af:d0:d4:40:
16:f1:de:35:76:8b:c9:95:6c:3b:53:80:a3:13:6e:6f:f1:bc:
21:60:69:de:3c:91:09:84:e2:7b:38:df:df:f5:5c:76:fc:e9:
66:ea:18:ec:16:b1:96:93:03:1e:af:bf:67:c0:1c:19:08:a3:
d1:45:b1:e0:fd:e1:99:d8:04:ed:b7:97:55:7a:1c:fd:90:4a:
15:07:97:ff:5b:e5:89:2f:f1:bf:1f:9b:2c:28:c2:27:86:e0:
d8:0e:13:b2:af:85:68:e9:b9:04:be:fa:f4:1e:92:67:04:57:
26:d2:92:05:7c:2e:ed:3c:78:e6:3a:a5:b1:96:0d:95:2f:17:
a2:33:ca:7c:ee:9f:9f:be:e1:c1:28:56:12:4c:c5:b1:58:aa:
c9:55:e0:75:ec:81:6c:7c:2d:1d:60:27:25:47:0d:8a:ee:9f:
f3:b7:49:95:b0:f7:65:4c:19:6b:3f:fc:af:8c:8a:61:11:b5:
5b:a6:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:17 2026 by rpki-client