
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json)
Hash identifier: RE6WamkpRJjp77TYA9MzXyfu9G6cU39cPN4p2ZwjOk0=
Subject key identifier: BB:7E:BC:E6:4E:CD:37:72:14:9B:95:62:09:47:99:82:1C:98:84:40
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2C4A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
Manifest number: 2BF5
Signing time: Tue 28 Jul 2026 15:39:27 +0000
Manifest this update: Tue 28 Jul 2026 15:39:26 +0000
Manifest next update: Tue 04 Aug 2026 15:39:26 +0000
Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: VveDObymWuvQITefWou3cxPDNvFP05151CJurHOwhb0=)
2: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: e0sKc/3PzukaFrJycUXB6K4Zrj8DGKsFURALFcSQcVU=)
3: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: KdnM+2nBmwCpA+MGMHO0Bl1xzd46blXEMYh3gkA7MWA=)
4: 67651980457511F1A878DB0BB4833773.roa (hash: GjVTK2ytg9BrTHoilrkMS80z8PqnneVdCKJsJLnsMTU=)
5: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: lwhgxQ+LgrJn47zyUAnLsM4ouCqlk1HX6qTOZMFb/HM=)
6: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: Eo31vAFnAsF5u9q6EjT+7W+u7j0+BA8u4cDp5rL/syM=)
7: 994EDA7E477011F19156235992833773.roa (hash: cW3AAUhFV3UrR438cEqC9lCUETRlljc4Il2HXpHaPiI=)
8: E8573BE8F1C111F098487417396F56BC.roa (hash: F0Fv187N1RGFhEEbx/oMjZ1udUPLSoWgSQeuKM9bGms=)
9: A2842DA6E07D11F0A337A81D3B6F56BC.roa (hash: BXRFGNYuity9lTYV79AbAsykkMdd6+n6EZ7PrTkQhsk=)
10: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: 80yPdyzDWGKZGoqPlrkXe6z7oxzuh7a6qYo6nHURbRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11338 (0x2c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Validity
Not Before: Jul 28 15:39:26 2026 GMT
Not After : Aug 4 15:39:26 2026 GMT
Subject: CN=6a68cd2e-f751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:c5:16:ee:07:6a:13:43:57:bc:01:29:03:
1d:5f:b6:cb:d3:97:2a:b2:43:3c:87:83:4d:5a:21:
05:0d:61:7e:ee:93:ad:78:f2:88:98:3e:ed:a9:05:
5f:f5:d1:d3:09:43:2c:f1:cc:ea:35:c2:df:35:1c:
9d:68:00:40:df:93:15:a4:d9:b1:0a:95:d3:87:d2:
98:28:55:d9:e6:77:9b:85:d2:67:a8:c4:c9:48:a4:
15:f2:47:aa:69:06:b9:58:e9:dc:dd:1f:6a:24:1f:
82:53:9c:05:23:1b:c6:a8:01:3f:e9:39:af:21:09:
fd:ac:ff:a3:f1:46:4f:1d:6f:8d:c6:94:11:3a:c1:
ca:4f:fc:42:52:25:95:49:ac:e6:18:a7:57:dd:66:
91:0a:2a:f7:ae:9e:1b:ba:7e:c1:eb:d2:1e:27:89:
48:8c:e8:cc:a6:0f:a5:9f:90:c6:59:55:3b:93:17:
d5:d4:2b:1e:61:52:56:c2:6d:4e:0f:c0:25:47:94:
4a:45:66:54:41:71:8d:d0:9a:06:1a:45:f6:e3:ed:
c7:47:33:01:73:2a:bc:09:c6:06:1b:68:26:3f:6e:
28:f9:fc:22:8e:62:ff:ce:6f:6b:52:28:44:97:90:
90:75:f9:9f:9e:ed:45:75:f0:9e:8c:5b:5b:82:ec:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7E:BC:E6:4E:CD:37:72:14:9B:95:62:09:47:99:82:1C:98:84:40
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:14:ac:a9:84:79:21:67:1b:b4:92:59:68:5b:0b:88:6a:3b:
16:3d:d6:58:27:64:08:d9:51:e1:c7:5a:c5:ba:1f:d7:dd:46:
3d:4e:7f:ca:19:93:7c:97:b1:bf:9e:50:ea:65:85:80:5e:fa:
a3:3c:59:ce:f8:e7:d1:b6:70:da:1a:1f:17:60:37:ac:d3:83:
a8:75:39:9d:52:a4:00:af:bf:a6:1a:fc:be:25:ac:33:9a:3a:
5f:b4:10:af:5c:2c:fa:59:74:5f:2b:48:ec:d1:3d:b0:a5:4e:
92:5a:a1:ed:3d:20:dc:a7:e1:5a:f9:d0:d0:38:25:71:51:62:
f5:52:e6:34:de:42:c7:82:9d:62:ad:9a:90:70:43:64:b4:4a:
c2:55:06:8b:22:21:46:55:8b:a0:d7:5a:91:b0:4d:9b:7e:9f:
3b:18:92:ca:4f:66:48:f1:e8:ec:88:96:a5:22:a4:6a:fa:c6:
4a:8f:e0:8a:2a:3c:b0:65:e8:54:76:7a:99:1b:9d:07:e3:19:
5a:3d:d9:59:b4:6f:94:dd:03:a2:90:c6:3a:8b:9a:f9:b5:3f:
b0:61:4d:6d:1a:ba:e2:af:23:ce:32:92:98:d7:5d:0e:f7:5c:
58:86:c4:13:2a:c4:02:d4:d7:99:42:80:10:53:6d:8d:90:69:
c4:f9:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:24 2026 by rpki-client