
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier: c7QpgAVUjDD752KkhVpPvLHuXHQAoKHQpz29CpiVLQ8=
Subject key identifier: 4D:7A:57:92:DB:E3:E8:19:09:3C:00:4C:78:AD:70:81:D0:DB:1C:D3
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number: 0257
Signing time: Sat 13 Jun 2026 02:16:57 +0000
Manifest this update: Sat 13 Jun 2026 02:16:57 +0000
Manifest next update: Sat 20 Jun 2026 02:16:57 +0000
Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: g7bDUyX32DJ5GW1a7uFhTn7pYgyn16f+Rm9lW1RQiYc=)
2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Validity
Not Before: Jun 13 02:16:57 2026 GMT
Not After : Jun 20 02:16:57 2026 GMT
Subject: CN=6a2cbd99-e8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:65:14:58:5a:35:0d:81:f0:5f:f7:9e:44:
f8:f6:d7:bb:c8:5d:b9:70:09:2b:20:00:94:96:fe:
18:ff:2d:6f:35:6f:31:c9:02:d0:e1:91:b3:83:ec:
0a:34:e2:33:8b:e8:22:cf:7d:d8:31:2b:91:1b:d3:
5e:40:e3:5e:fd:88:21:03:91:7e:62:aa:21:03:fe:
2e:19:0a:97:a6:4d:18:30:ce:ed:37:35:2e:4e:39:
17:8d:fb:ef:44:86:50:86:39:1a:3a:ca:27:56:6f:
b3:3b:1a:0d:75:14:97:eb:b7:74:bc:08:c1:25:2c:
58:54:24:f7:02:0f:15:45:0d:07:d3:94:83:4c:f3:
7f:0d:61:f3:46:67:e4:05:85:d5:4a:88:56:3b:95:
1d:01:6d:ea:09:27:a7:5d:2f:b4:35:0c:b2:f7:ab:
9c:a1:ba:de:e1:f0:72:c0:e6:9e:03:78:93:93:c1:
ec:64:82:1f:53:4e:e8:eb:ef:6a:ca:83:6a:a1:3b:
35:a9:cf:e0:36:7b:e8:92:e8:c5:b8:7d:fe:35:6f:
2d:3d:3a:08:72:4d:83:5d:14:17:8c:ad:73:de:f5:
ae:d6:b2:36:3b:34:b0:47:75:56:e4:fa:c2:c7:46:
41:ac:fa:6e:d4:fe:8e:12:7a:8b:22:a3:95:7a:5b:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7A:57:92:DB:E3:E8:19:09:3C:00:4C:78:AD:70:81:D0:DB:1C:D3
X509v3 Authority Key Identifier:
keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b1:8a:de:f6:f1:ad:1f:de:e3:9a:2e:bf:b1:5b:f1:58:2f:
dc:2a:a7:ee:6c:18:5c:2d:60:77:98:2c:5a:d8:e5:68:b2:58:
f2:75:d0:b0:d0:6c:ac:90:b8:92:3b:51:cb:07:81:31:ed:6c:
f5:93:6e:87:0e:1c:dc:a2:96:61:3f:4a:05:b8:4f:46:a0:03:
5e:44:f3:6a:a5:c2:a3:cf:46:cc:b9:94:e3:c9:64:ce:66:c9:
44:61:09:e7:d8:b7:66:c5:99:7b:92:ff:02:d9:70:ed:44:26:
c0:68:d7:04:c9:51:bc:7e:a5:9e:56:10:dc:c4:ef:80:77:f1:
77:b6:42:b1:54:13:ed:33:49:bc:ee:12:65:3e:1d:54:7b:f6:
45:3a:6a:a1:35:41:cd:2e:e2:21:20:ff:fa:73:4e:e1:4d:15:
1a:1e:64:f3:df:37:50:dc:c8:50:be:d8:e4:64:68:ba:96:3c:
74:aa:b5:6d:cd:e6:0d:2a:2e:5b:48:3a:0e:dc:63:ee:3c:ea:
a1:63:03:ce:0b:1d:1a:fe:b2:4e:8d:ea:6d:87:ea:99:6b:bf:
e5:51:d1:ba:90:39:47:96:86:0d:1e:ad:fd:20:b9:e8:cf:af:
9c:cd:6b:74:7d:c8:0e:e4:22:00:1c:a3:f7:2e:76:a0:2a:cb:
64:3b:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:04 2026 by rpki-client