
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
File: PefvwEame5klu7vcYTKxKXXbSm0.mft (raw, json)
Hash identifier: g7uCYE4J+kqG24ObADiNFN3HGLnfYvWd/EzPMpnMKt4=
Subject key identifier: C2:A7:E5:3E:D5:8F:6A:AF:3B:02:35:3F:75:3B:ED:0F:6F:7E:FC:D7
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial: 09C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
Manifest number: 099A
Signing time: Sat 28 Feb 2026 20:22:13 +0000
Manifest this update: Sat 28 Feb 2026 20:22:13 +0000
Manifest next update: Sat 07 Mar 2026 20:22:13 +0000
Files and hashes: 1: PefvwEame5klu7vcYTKxKXXbSm0.crl (hash: TOtL/NNIwo6P/sroeNLtQalKZDn+o8eZ/BafWdlCsPc=)
2: 2DFEDC68A39711ED936DC309C4F9AE02.roa (hash: dHGUh2TZsDHqiOEaZNl0HaiTJBOhXu4wr+Jn6ErPPq8=)
3: 9BB410F021B011EFA6C95F83C4F9AE02.roa (hash: ham/XAS0gNUsA7VUjnWwNOW385MWOqUwYnVoCHtaJMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2501 (0x9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Validity
Not Before: Feb 28 20:22:13 2026 GMT
Not After : Mar 7 20:22:13 2026 GMT
Subject: CN=69a34e75-dbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:96:9a:31:ad:ca:54:4a:2d:a5:82:cd:50:
b7:c6:fe:07:d1:55:5e:9a:39:9f:6c:9a:30:46:87:
e1:db:cd:3d:e1:5a:de:f9:bb:b7:94:52:e5:47:67:
e1:2a:2c:63:3d:21:84:9b:df:8e:91:b6:71:49:c5:
d6:7a:a0:03:61:d5:af:2a:fb:22:54:58:85:3b:0e:
a2:e9:f6:f2:f6:4e:3f:aa:fd:6e:52:af:7a:54:a3:
30:84:1c:30:06:3d:4d:52:59:17:b0:c4:b0:65:d0:
3d:65:2e:af:2e:7b:c6:e5:c7:1f:ef:78:5c:4d:a6:
a9:94:b7:c5:3c:39:07:13:e6:29:1b:83:3b:4c:3c:
de:18:f5:65:6a:94:b1:34:00:72:7c:69:25:f6:ac:
f7:2e:19:56:db:bd:c4:02:a6:09:48:5b:92:6b:54:
ab:c9:3c:26:bc:74:f2:22:2f:5d:44:a9:9e:70:c6:
99:47:d4:71:10:ec:9f:43:c0:77:80:c8:a7:e8:cc:
26:7a:81:d0:b8:38:f9:ef:ec:37:68:c8:1a:d2:7f:
be:52:44:b5:ae:d7:9c:d9:cc:94:84:d4:99:f5:f0:
9e:a4:d8:5e:67:d0:01:f8:9c:c6:32:d2:02:c7:eb:
4b:0b:68:7e:8e:94:e0:52:23:9e:7a:05:7c:ab:7f:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A7:E5:3E:D5:8F:6A:AF:3B:02:35:3F:75:3B:ED:0F:6F:7E:FC:D7
X509v3 Authority Key Identifier:
keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:f9:7a:49:e9:79:4a:a4:29:d6:ae:b8:3e:5a:34:b2:8d:a3:
f8:6a:25:e3:b6:fa:b5:25:3c:45:ad:98:a8:e7:b5:49:6f:b4:
68:bb:a8:81:60:00:c7:0f:6b:c0:da:af:9e:15:4c:c7:28:4a:
ee:db:3a:fb:05:7a:c0:0f:68:21:65:a6:82:b2:5d:fd:ef:53:
42:cc:b5:5c:33:fe:a7:6e:95:1b:1e:e5:ed:35:bb:7a:0c:16:
bd:78:aa:fb:d5:04:b4:61:4a:0d:d5:6e:fe:5e:92:82:18:25:
92:38:7a:fc:91:e7:9b:6a:96:85:d1:3b:3b:50:db:0f:03:4c:
c3:b8:59:0a:10:b6:b9:d2:85:62:1c:47:c9:d0:1e:05:fc:95:
95:d2:f0:53:28:94:a1:70:24:cf:43:77:d7:05:65:50:f1:64:
81:c6:11:3e:2a:c4:2b:2d:ac:cb:6a:45:8e:24:04:e0:81:97:
5c:ea:1d:f0:54:a2:ec:14:83:a7:52:59:38:a4:9a:c6:df:02:
70:a9:b6:f6:04:a2:3c:c4:d8:61:1d:c5:c2:6e:e1:e4:62:91:
aa:96:bc:46:fc:3f:42:5d:d0:5c:7a:2b:4c:e0:92:cd:56:51:
49:69:da:83:cd:2c:28:ba:37:26:d3:7e:7d:0b:82:2f:14:e6:
41:76:b5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:55 2026 by rpki-client