
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json)
Hash identifier: Dngyuhwfsq5T9KUncN84pMTvy5Tz+pYCEc9MitSA35I=
Subject key identifier: A8:FA:13:D1:02:74:A8:71:AF:5D:63:22:42:19:E0:FB:09:2D:AF:06
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2BAE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
Manifest number: 2B76
Signing time: Sat 28 Feb 2026 15:35:25 +0000
Manifest this update: Sat 28 Feb 2026 15:35:25 +0000
Manifest next update: Sat 07 Mar 2026 15:35:25 +0000
Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: jpcCz9ZMxFgQtoTwZ+HiyqhyvSVnJZV2/Be8eYhMFYA=)
2: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: ZzjJ0fYeabSd1C/BC1U5UndDu9GN0zOregXqheWTfhM=)
3: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: GUkxmfhQjkzWtcoFY/nFGmI+kTJXl/FtuE+i7SxBElE=)
4: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: vCyoBnhR3DIAJb9Y4r3GNDFo2RlfPGlQkgBB7NxfB/s=)
5: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: fYOyO0YMWUOxVdF0N0uoVfDbNQC2opdX5iKH0P2z63Q=)
6: A2842DA6E07D11F0A337A81D3B6F56BC.roa (hash: /NSn23GKZ4WI/0vwXgM15d1bZ9YjNXmwCH/XWGMxn98=)
7: E8573BE8F1C111F098487417396F56BC.roa (hash: qGeh6QL0o4WvOG3fg/wBG8/tXnaeNS7d3iyz0QkEV4E=)
8: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: 4v1pcgLcpH0cs1u2cZwujLM8z8Jad8X3rbuBbKPqsLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11182 (0x2bae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Validity
Not Before: Feb 28 15:35:25 2026 GMT
Not After : Mar 7 15:35:25 2026 GMT
Subject: CN=69a30b3d-d29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:56:dc:50:28:16:77:0d:39:98:c3:b8:82:
cc:d2:06:8a:57:cc:29:22:e5:bb:b4:00:f2:5a:ee:
ef:e3:b7:03:92:50:33:e2:e7:ae:d5:93:48:45:b6:
d3:38:61:ba:17:d5:50:c1:02:41:d2:ab:2e:a8:2c:
2d:6f:07:4f:96:45:9b:9f:b3:49:84:73:72:31:56:
0e:a5:b5:9c:c6:0c:92:93:b4:19:63:b8:bf:ae:eb:
a6:f0:f2:f1:53:a6:a1:48:60:40:cc:49:87:ca:da:
2d:4d:d6:81:24:b5:74:b9:8c:8b:4e:b8:61:32:19:
54:57:54:32:04:dd:c5:9b:f1:74:14:18:21:59:eb:
df:2c:53:84:95:d6:65:1b:fc:c1:86:3d:ff:7d:8b:
77:05:96:79:45:29:00:b1:51:9d:b8:f4:53:a2:5d:
d9:11:36:9a:dd:67:9b:e7:76:84:c2:98:81:a4:bc:
e4:b6:77:ed:b7:ff:29:80:71:2b:25:34:84:19:fa:
da:c5:09:f0:f8:6e:15:70:bc:c8:a3:27:9b:63:c9:
cf:c5:72:25:e1:6b:59:89:a7:15:44:ec:58:09:8b:
3c:9d:ec:a3:32:63:31:7e:e5:de:87:8d:5a:98:9b:
ba:a1:bb:36:20:26:fa:47:b5:0a:b7:2d:c1:24:e1:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:13:D1:02:74:A8:71:AF:5D:63:22:42:19:E0:FB:09:2D:AF:06
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:5d:fb:d9:5a:5c:b0:ca:8d:5f:55:43:90:86:21:e2:97:
3c:d6:4f:e8:18:ec:fc:96:92:88:db:85:fb:b0:f3:4c:0e:5d:
c6:69:7c:ce:ce:e6:19:73:21:3d:68:73:7a:ac:46:bf:fd:0a:
a5:00:18:1a:a8:05:8b:71:90:e8:7c:b4:46:01:de:b3:47:b6:
dc:ae:de:03:3a:e9:4c:ab:1f:30:57:35:6d:c9:7c:81:e0:c5:
a0:cd:de:e1:53:67:0e:dd:b6:5d:08:55:52:b9:34:b1:2d:28:
4c:a3:e2:c4:68:02:68:4c:68:95:d4:e9:fd:7d:1f:20:98:6e:
d2:f5:6d:b1:2c:7a:d2:b3:b4:94:9f:6b:ac:30:cc:83:e7:f0:
96:2d:9e:c3:83:fb:06:69:99:99:89:55:5c:ec:1f:76:dc:a9:
c3:cd:ad:9a:dc:92:75:d0:d1:6e:0e:2d:42:d6:45:54:28:f7:
8d:75:5e:51:c6:b6:0e:46:89:cb:4c:04:c1:48:7f:90:13:8e:
41:16:c1:17:a9:54:6c:11:04:35:6d:ea:2d:fe:a4:2c:c0:cc:
eb:5e:d5:cf:cc:46:76:63:ba:ff:63:3e:e6:78:c4:97:03:99:
5f:99:db:f1:a1:26:56:4b:7f:f7:a0:76:44:cc:ac:1d:68:d5:
d1:8b:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:19 2026 by rpki-client