
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier: sGluoJ5VuH73n2TZaoJc1s2anoQJGpzaGui9D4sjgCI=
Subject key identifier: BD:77:52:EE:DA:16:46:F3:9E:4C:D5:25:0B:2F:C8:81:99:34:D6:C3
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial: 0AD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number: 0AC5
Signing time: Mon 02 Mar 2026 02:16:59 +0000
Manifest this update: Mon 02 Mar 2026 02:16:57 +0000
Manifest next update: Mon 09 Mar 2026 02:16:57 +0000
Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: 9SdlicOpK1Z9p0BsTGT9iWLCWbT+Mxn+UFKei/ZeV/Y=)
2: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: th+/tvMvg+ad5+YQ/zoIufkXoQMlFYiSs+rYqVFCmXs=)
3: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: dcrlUq/LfqIpPMteaZR03KFsAdJIOdisOuX79mITHI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Validity
Not Before: Mar 2 02:16:57 2026 GMT
Not After : Mar 9 02:16:57 2026 GMT
Subject: CN=69a4f31b-177e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:30:c6:e2:77:be:61:db:90:43:f6:80:45:
19:7f:4b:47:68:9d:93:6d:67:55:74:d1:53:ba:06:
e4:66:5b:97:c5:3f:d2:b2:62:9a:03:df:c7:71:91:
4b:48:8c:b1:e8:1f:fe:6b:05:49:d5:88:4b:1d:52:
72:d6:02:d6:0d:72:8e:12:05:d1:d2:37:84:1c:f7:
0a:97:94:9c:11:ca:12:05:76:e8:9b:97:13:37:23:
74:6d:9e:ab:86:9d:6d:a4:86:fd:1f:78:3b:9e:e5:
b5:a1:94:7d:6e:39:6e:be:9d:b6:1d:6f:75:47:5d:
d3:22:b0:20:bc:15:89:70:d4:f5:e0:5e:90:6f:7d:
2d:0a:4b:9c:6e:1d:03:56:d6:30:14:ee:ae:74:35:
20:c3:8b:b5:06:9f:39:90:07:ba:fc:7c:1a:44:83:
d3:09:11:28:63:a9:fd:47:cd:30:b6:e5:9b:2f:31:
1f:8b:6e:a5:c9:2c:d3:de:d5:f3:cd:7d:80:41:50:
bc:68:4c:9b:5f:2f:c4:ac:e9:ce:b1:e8:97:09:27:
7a:37:03:73:36:53:f3:77:ef:91:a0:fb:ff:6a:22:
25:d5:65:d6:b9:57:5d:e9:17:84:bc:f9:96:06:4e:
a5:b5:e7:40:3e:9c:75:02:41:b5:e2:ed:76:e3:19:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:77:52:EE:DA:16:46:F3:9E:4C:D5:25:0B:2F:C8:81:99:34:D6:C3
X509v3 Authority Key Identifier:
keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:d0:ad:bd:97:24:1e:a0:f6:61:a0:9c:e4:d2:40:84:77:e4:
0c:71:9f:6e:9d:e5:bb:8b:9d:84:f2:41:ac:53:4a:95:09:ea:
80:88:c9:98:79:a6:d6:ab:aa:72:87:df:e6:04:86:f0:ae:a6:
f1:ab:d2:5d:e9:17:b3:24:9f:d5:70:a3:ae:24:5f:7c:37:e2:
20:c2:bd:18:42:59:dc:c3:44:63:fd:d4:ec:8d:e4:10:28:16:
17:72:fb:2b:87:58:5b:6a:dd:87:42:5d:fa:67:34:b8:23:0a:
fe:e3:65:52:ca:b0:d1:37:d4:5e:0d:03:a3:e3:a4:eb:27:50:
e6:ba:22:eb:98:a2:8c:b8:7c:2d:06:41:fd:ad:79:da:d2:34:
91:a4:ef:23:c4:24:b9:aa:90:4c:64:53:69:44:7b:7f:a6:cc:
62:ea:07:df:e1:26:a4:4f:ef:08:5e:0a:17:60:11:6c:bb:5b:
ce:30:ac:eb:36:7d:21:a7:6f:b8:61:2f:eb:93:ba:b5:c8:9d:
34:5d:ae:61:af:57:09:69:5c:6e:cc:33:3f:0d:e8:0a:50:a0:
4f:63:71:c8:b5:10:10:e5:0c:2d:fd:ff:b6:2a:75:ba:43:24:
cf:32:41:bb:23:57:38:e3:5c:7b:0d:2d:5f:70:85:ae:81:74:
cb:4b:68:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:12 2026 by rpki-client