
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json)
Hash identifier: sfEBasPht3WKNL6+7k3fXQpppOIE4N/wYJq4G38ORHU=
Subject key identifier: 87:56:68:00:F3:F1:D8:95:CA:07:2A:45:FB:A3:50:51:1F:9D:55:85
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2C8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
Manifest number: 2C24
Signing time: Sun 20 Sep 2026 15:31:36 +0000
Manifest this update: Sun 20 Sep 2026 15:31:35 +0000
Manifest next update: Sun 27 Sep 2026 15:31:35 +0000
Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: 7LMHrrW5rM65ByPnGldRwWQddmQWWkIKS90gkEQ8lGk=)
2: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: ZRgcko4mZDU94zW1mE2zsmeg1CEm3cVuoBFvJp8bDbw=)
3: A2842DA6E07D11F0A337A81D3B6F56BC.roa (hash: W75lhz8qeJnkZlqY0a8HErBGtduWKn0r2gMd7akKn1I=)
4: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: yhb7QiTNwaWZ43QEtEdSQmUgbkqueVHBiH7mFyaEGz0=)
5: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: b4dUJUsflstBmfkTo+6WB27BRTM43w5uV9OUP+GZroI=)
6: 67651980457511F1A878DB0BB4833773.roa (hash: CbnlijH2x4Ft1TEKptp1p5G8ICI1ZcbvpB+WwaI4aoo=)
7: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: O1KjNFYquoWK1QcR2byS/JmrbBhF5FfSwYJTB0+MwzI=)
8: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: lm86AbCRcdzPDBKNa+uwq/jScnKUTOerK/ZRzjBHp4k=)
9: E8573BE8F1C111F098487417396F56BC.roa (hash: DXYFlPFZJbTgCXiYCSA164GI8iIK5udt+JzmMbupbPs=)
10: 994EDA7E477011F19156235992833773.roa (hash: 1hC10MLLED1ieGexLaVRyCq07RG6S3oek0GO+3joQEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11403 (0x2c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Validity
Not Before: Sep 20 15:31:35 2026 GMT
Not After : Sep 27 15:31:35 2026 GMT
Subject: CN=6aaffc58-1d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:64:4c:ed:cb:6b:97:11:29:f2:67:44:de:4f:
ab:77:ca:a0:cd:52:70:57:ec:36:fb:3b:c1:bd:be:
de:f1:4e:96:f2:b5:69:c3:de:e2:49:a9:a7:8b:18:
25:67:84:79:c4:3a:2e:3e:24:a9:c6:5a:aa:46:b9:
c3:b4:d1:65:46:78:6a:ea:9a:c4:b4:d6:df:2d:b8:
b5:cb:d9:60:b2:46:85:7c:67:01:6d:79:71:02:54:
83:87:c4:48:b6:17:00:c9:5f:72:b6:96:9f:47:aa:
df:88:2e:3c:e1:d6:ac:50:87:c7:12:59:14:49:0a:
fa:77:cc:25:06:34:77:4a:86:71:91:b5:eb:ef:ec:
28:e9:e8:09:60:80:3a:3e:16:87:eb:a6:c5:21:21:
cf:27:eb:ee:4f:1a:f3:b8:90:af:4e:7f:ce:70:50:
1d:ba:3f:ed:47:82:25:6f:e8:9c:41:1d:d4:31:9b:
f5:86:c6:8b:22:dc:14:9b:22:09:83:dc:84:7f:b8:
f7:5e:ed:a3:54:ab:ac:b4:e4:58:63:fe:83:41:ec:
0b:18:83:51:c1:fd:11:45:85:45:d6:95:66:a5:8e:
ae:70:22:28:b3:dd:19:89:2b:35:f0:c0:b1:eb:79:
57:63:9a:43:2f:58:e7:bc:cf:54:a0:79:ea:a0:a4:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:68:00:F3:F1:D8:95:CA:07:2A:45:FB:A3:50:51:1F:9D:55:85
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:73:22:56:ee:06:0b:f6:99:c3:64:f1:b3:49:b4:d5:24:ca:
26:21:7a:a3:01:fd:02:77:4d:18:fd:fb:6d:e7:0b:c7:e0:52:
16:53:39:83:97:94:ec:3c:0a:32:49:45:23:b5:1e:96:08:23:
fb:45:0b:90:9e:a5:69:65:9f:31:85:d0:a6:cd:a1:e3:c3:2a:
49:ab:ec:c7:7b:1e:b8:18:6e:a5:ef:96:69:db:82:11:85:28:
80:e1:83:73:36:1b:95:51:ed:47:6d:04:c2:50:ce:2f:8d:35:
db:05:07:05:ce:da:7c:db:b0:7a:1a:12:2b:7c:b4:42:bf:3a:
5c:e6:0e:4f:09:91:21:6d:21:03:bf:a8:a6:2e:07:09:06:c8:
76:36:19:6f:86:5a:31:33:68:ed:12:f2:68:96:ed:02:f4:3d:
73:41:87:fb:5c:23:85:7b:06:6b:93:d4:75:29:32:28:62:95:
fa:91:26:5d:fe:83:cd:f5:6e:5c:4e:35:6d:1e:a6:f0:ae:46:
8e:79:ec:02:f1:8f:91:28:e2:4d:07:4f:fe:4b:5f:ad:24:ba:
d0:6f:db:7c:c3:eb:71:51:38:c2:bd:a5:b6:5d:ae:f2:76:83:
3b:12:db:6a:97:d4:94:9a:1e:22:52:6d:fc:13:87:29:53:c3:
46:88:a9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:21:33 2026 by rpki-client