
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json)
Hash identifier: 3Kx65FVzKvYd+zoqu350aBcT47t9DuzVCdt3u3986N4=
Subject key identifier: 44:5E:DE:92:16:F6:7C:65:4D:97:F4:A8:F0:8B:61:03:92:BD:6B:DA
Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Certificate serial: 0BC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
Manifest number: 0BB3
Signing time: Thu 16 Apr 2026 18:56:55 +0000
Manifest this update: Thu 16 Apr 2026 18:56:55 +0000
Manifest next update: Thu 23 Apr 2026 18:56:55 +0000
Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: VFDDg3Rkr8wfKYnCYqRz/DNmpuv87OrpO0hYTqeqNK4=)
2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: 31dQK67wiYiy5G3Mr5Z9I8W/2zQAHp6VfQMF8EbdjCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Validity
Not Before: Apr 16 18:56:55 2026 GMT
Not After : Apr 23 18:56:55 2026 GMT
Subject: CN=69e130f7-fe43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:ec:ac:8f:2b:08:ac:e1:d5:8b:f6:20:b1:
bd:9a:1d:d3:b5:a2:ac:c8:db:ad:00:b7:0c:9e:46:
a2:8a:ae:7d:5f:7c:de:20:4c:00:ab:52:14:ea:75:
f0:a9:64:2c:3c:db:2b:c6:9d:65:36:c3:b4:04:ed:
da:04:cd:a1:2c:30:7a:53:6f:41:1f:0c:49:bf:2a:
2d:e9:71:be:4f:b6:72:68:01:42:f9:ad:ac:48:9f:
7b:4d:e3:66:68:68:b4:70:0e:3b:c4:95:05:09:b5:
e7:85:29:28:9e:9d:86:a5:6a:33:06:4a:30:94:e2:
f9:83:23:d7:dc:13:a2:d0:ff:d1:ee:6e:64:02:ec:
66:3d:63:62:f1:f0:54:eb:8b:cd:d2:ef:6e:6c:85:
30:34:6b:42:22:33:00:d3:37:d4:d3:fe:d2:3e:39:
09:c7:f8:ab:35:b3:80:04:37:9b:e6:52:85:8c:30:
56:ab:77:21:8f:db:f1:b2:35:34:35:d6:ab:e8:ce:
fd:2f:f5:47:55:e1:29:b7:f4:e7:c4:69:44:7a:d1:
f4:b6:40:11:a7:1c:43:88:72:67:a2:60:30:bd:07:
29:c4:7e:5a:98:94:18:12:40:ea:1a:1e:1a:03:2f:
c2:08:c6:45:d5:79:b6:c2:68:6b:cf:d2:af:d7:14:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5E:DE:92:16:F6:7C:65:4D:97:F4:A8:F0:8B:61:03:92:BD:6B:DA
X509v3 Authority Key Identifier:
keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ee:6a:85:c5:7f:ef:25:bc:45:b1:10:eb:3d:22:4b:a6:cb:
b6:ba:61:f9:33:0d:e8:fe:70:5c:c6:2d:cb:b8:7a:4f:20:ac:
83:14:c2:f6:1a:26:b7:e5:1b:c7:a9:5d:ee:9d:06:9d:92:c8:
6e:2b:c8:60:86:e6:6a:63:01:4c:c8:f1:12:bb:c3:43:76:b8:
66:99:42:ac:f1:35:83:84:0e:fe:68:64:b0:92:d1:52:00:12:
93:0e:eb:1a:8f:92:bb:42:69:2c:4e:e7:1f:1b:29:f7:51:1d:
f9:2d:e5:fb:10:63:9e:18:c7:86:b1:5c:49:0d:58:07:dc:bb:
87:2e:71:2d:5b:29:a0:6f:e1:4d:8c:db:23:a2:bc:1c:b7:bc:
f1:95:3a:e7:4f:be:69:c7:88:37:07:e3:85:d7:4d:1c:e9:cd:
9a:5a:be:6b:67:24:e1:e3:ce:91:7f:4f:01:5f:eb:4e:45:e6:
86:66:92:e1:69:9a:ba:43:af:f8:a4:ba:4c:8b:d5:36:eb:a3:
d5:00:3f:df:da:0d:0f:bc:ac:de:04:6c:53:16:df:44:0d:73:
4f:bf:c3:f6:07:ea:a6:4a:0b:04:37:54:74:bb:0c:87:d5:34:
a2:c3:36:2a:69:4c:08:db:d3:f6:33:51:7e:73:c2:0a:7f:d2:
1f:ac:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:04 2026 by rpki-client