
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier: xgqODtOeBL7LJtL7SOCO0j6L8sVXWA+DB4J75khGzxs=
Subject key identifier: E6:F1:F1:94:7C:22:A1:06:28:11:99:64:BC:BF:A4:65:CC:59:CD:1F
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial: 0D40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number: 0D22
Signing time: Sun 01 Mar 2026 22:59:02 +0000
Manifest this update: Sun 01 Mar 2026 22:59:01 +0000
Manifest next update: Sun 08 Mar 2026 22:59:01 +0000
Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: Tz//yQXFiMbww+zCT9u58Gt3BoabMFICs2vhvr1Jugw=)
2: F1862B06642911EAA019224CC4F9AE02.roa (hash: hDbqIpDhadNVfJA3BTlR/LAeNyzW7Yu5fEKJ3DRQByg=)
3: F058F664642911EAA019224CC4F9AE02.roa (hash: fswItdkW32lVXP3oyuar/xrvNWOlG7N9r4aiXCCow9Y=)
4: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: SRfMw9xLPZ7elFROo10aiya6fCbNB9qdBZAT+zdBGkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3392 (0xd40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Validity
Not Before: Mar 1 22:59:01 2026 GMT
Not After : Mar 8 22:59:01 2026 GMT
Subject: CN=69a4c4b5-16c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:7b:3e:d4:6a:3e:05:94:07:71:31:9a:e9:
6d:be:1c:ba:e4:a1:35:4d:9a:a9:3b:b2:cb:35:b2:
34:8f:6d:b3:a3:6f:45:d8:6c:5b:4e:fe:3b:fa:5a:
6e:72:1c:d9:b9:84:a2:f8:5e:50:c1:c3:ed:11:1f:
b0:0a:8f:98:70:08:3e:ec:ca:90:89:59:6e:e8:d0:
f0:05:83:1d:e2:2c:98:9e:22:0f:f1:6d:6d:3c:ab:
0c:7b:82:69:6a:78:9f:f3:1d:8f:2d:e5:1e:54:42:
f0:79:1a:7b:7c:5f:42:1a:9f:4e:a6:79:f1:0b:42:
f3:b4:f9:cb:77:b8:77:5b:21:b6:84:36:5e:f6:64:
a4:54:39:3c:df:b7:78:1e:42:4c:9f:97:ed:5e:ff:
91:c5:9f:a3:a5:38:fb:65:76:e4:44:f4:22:44:bf:
59:3a:d5:30:39:9e:73:ab:9c:7b:4f:ea:85:8b:fb:
f7:23:c5:b7:0d:c5:9e:09:e8:bc:3c:58:e9:5d:21:
1d:76:f2:7d:13:ee:32:e3:ff:59:64:44:ee:02:05:
34:93:29:ad:77:bd:eb:88:14:f9:b2:2c:b8:03:2b:
a7:51:1f:96:52:c8:e9:47:8e:5e:71:87:ba:3e:b8:
e0:c5:33:a6:6b:b6:c6:d4:0e:4e:79:0c:15:20:80:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F1:F1:94:7C:22:A1:06:28:11:99:64:BC:BF:A4:65:CC:59:CD:1F
X509v3 Authority Key Identifier:
keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:75:e2:b7:64:69:0e:b5:ef:43:ee:e2:79:8b:27:e8:3b:0c:
d1:d5:7c:ad:8c:07:79:dc:cd:6f:40:59:94:de:18:71:35:b1:
3a:f8:92:6d:e0:15:19:49:e5:91:e7:67:60:cb:39:2f:e2:60:
03:e2:8e:a6:35:32:fe:ac:4e:e2:b8:65:57:38:64:f8:5f:5e:
80:44:4d:5c:41:6e:0e:3b:68:e3:8c:ed:8b:e9:32:b6:26:39:
ee:5b:48:8a:d8:f9:33:f9:c0:10:54:62:db:36:36:8d:08:70:
5d:eb:ec:e0:37:b7:ca:b6:e0:f5:3e:20:75:a9:03:a1:ec:7c:
01:f3:fc:f6:ff:e5:a6:0e:a1:0d:8a:70:b9:af:91:d3:8b:21:
79:3e:e2:da:b4:a5:85:6a:8f:33:d1:72:29:9a:47:d1:1c:8c:
39:b7:06:b3:a1:26:6a:a9:4d:18:1a:19:c9:3a:3f:23:2e:d7:
2d:ec:30:c6:37:6c:e7:58:04:82:21:c9:ff:c6:f1:ce:8d:cf:
8f:78:e7:31:ee:db:b7:96:04:64:d5:3a:32:90:cd:e2:a6:d3:
1b:50:0f:86:1f:37:73:e4:e9:07:30:3f:2b:3f:9d:86:1a:a0:
7a:d1:7a:25:8f:3d:b9:76:78:5d:77:97:ae:6f:f8:57:70:98:
9b:94:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:24 2026 by rpki-client