
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier: XgiEBlDzIHUfQDMQDfGAMeNtf8kwvsnD/NYx5u5OQ9s=
Subject key identifier: E7:EC:33:EC:A9:A4:5F:B8:52:0B:C5:A2:8D:6C:F6:F9:E8:AE:BE:F9
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial: 0AED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number: 0ADD
Signing time: Thu 16 Apr 2026 19:20:55 +0000
Manifest this update: Thu 16 Apr 2026 19:20:54 +0000
Manifest next update: Thu 23 Apr 2026 19:20:54 +0000
Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: wVbD6qPS8P8pR14y7TuDyMk81Iw37/X9dyQu7lraypQ=)
2: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: th+/tvMvg+ad5+YQ/zoIufkXoQMlFYiSs+rYqVFCmXs=)
3: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: dcrlUq/LfqIpPMteaZR03KFsAdJIOdisOuX79mITHI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2797 (0xaed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Validity
Not Before: Apr 16 19:20:54 2026 GMT
Not After : Apr 23 19:20:54 2026 GMT
Subject: CN=69e13697-2d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:76:fe:60:07:57:60:68:c2:95:fc:42:f5:
2d:54:c5:45:d5:95:5d:15:bd:d3:89:c9:b4:01:ec:
09:b6:bb:91:0f:30:fa:73:59:be:9e:6f:9e:71:e0:
a1:cc:2d:02:ac:9f:61:d7:40:f4:de:cf:a0:c7:4a:
30:64:17:b5:dd:1b:96:d7:dd:b0:b1:c3:7f:6b:34:
de:6d:82:67:2c:08:3b:02:c3:e2:c3:56:9b:28:54:
2b:b2:19:1a:6d:d3:22:ae:44:9d:e9:0e:e7:d9:8f:
87:ae:69:90:94:10:0e:9a:c9:9b:8c:40:e2:cc:9d:
76:70:39:02:97:c8:11:d2:18:61:73:b8:d1:aa:26:
76:da:15:ac:7f:b0:b5:45:47:a4:03:0f:e2:0e:4d:
cf:b6:88:eb:3a:b1:31:b7:66:fe:f2:87:3a:7e:ef:
1b:3d:85:9a:6a:73:9d:28:aa:36:4c:ae:f8:1d:83:
13:d7:eb:fa:77:59:f0:89:80:ce:e8:ae:b2:38:af:
f1:ab:55:a8:ec:0d:97:ad:72:7d:f1:a7:2e:c7:a7:
b6:e2:b5:f6:d7:5b:4d:e0:23:42:ff:57:31:8c:f5:
f3:56:36:7c:e4:de:66:ae:a9:22:3b:88:b0:2e:a1:
23:ba:06:bf:09:e1:46:90:52:5b:b8:1e:20:a0:d0:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:33:EC:A9:A4:5F:B8:52:0B:C5:A2:8D:6C:F6:F9:E8:AE:BE:F9
X509v3 Authority Key Identifier:
keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:85:39:fd:bd:8e:3d:4f:48:0e:82:4e:2c:e9:52:5b:f5:d6:
99:b9:14:ec:19:73:92:37:cb:d7:45:5e:d8:cb:49:ff:fe:da:
f3:57:ab:f0:e7:81:3d:92:37:90:a5:c7:76:8f:b8:03:c5:bb:
32:de:84:b0:08:85:15:73:89:5b:aa:62:0d:0a:be:02:96:3d:
29:f5:76:02:5c:95:d5:8a:c7:68:7d:a6:9c:78:39:67:76:d2:
4d:18:15:29:12:8e:f5:4f:ed:ea:24:c0:11:8b:c2:b7:77:05:
b1:6e:15:ff:51:1f:17:15:00:db:af:8e:91:86:ba:1b:df:d6:
81:2c:14:21:cd:4e:94:18:f9:b1:32:da:b9:75:94:21:e1:f5:
9b:33:c5:d5:34:09:7e:4a:67:94:4a:86:96:ad:ca:92:7c:4a:
da:eb:4f:f5:a0:fc:15:6a:f2:b7:f5:d3:2f:26:70:5c:ec:0f:
f5:37:11:4b:84:77:1d:ab:d3:3f:3f:f9:dc:82:12:4c:61:8a:
dc:37:1d:63:c1:cb:61:2e:62:8d:c2:9d:60:0e:77:f8:b8:d4:
3d:0b:ed:24:86:9c:b0:63:3a:65:ce:3b:9a:33:15:f4:ea:11:
18:20:25:47:24:43:18:46:5e:9f:57:3e:21:38:fe:54:c2:95:
94:34:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:40 2026 by rpki-client