
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier: kq1jL1v9LuHd4TgpOmiaRI7i0D5gkKDlI9WEb5khen0=
Subject key identifier: 76:A0:E0:71:CA:34:37:96:7A:39:63:A0:33:9B:D3:D0:B3:ED:FC:FE
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number: 023B
Signing time: Fri 17 Apr 2026 02:17:11 +0000
Manifest this update: Fri 17 Apr 2026 02:17:10 +0000
Manifest next update: Fri 24 Apr 2026 02:17:10 +0000
Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: 6tLKc0a0mhyaawM2PCKesQQCE3vP+2oObgXL8BBtvRg=)
2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Validity
Not Before: Apr 17 02:17:10 2026 GMT
Not After : Apr 24 02:17:10 2026 GMT
Subject: CN=69e19827-86cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:39:7d:72:89:55:93:3f:3b:43:3a:30:86:
81:03:1f:b7:ec:df:67:86:e7:e1:72:09:26:45:67:
ab:14:6a:56:91:34:28:31:62:23:c9:95:27:0f:b3:
c1:e0:4f:28:27:18:f6:8f:cd:d5:48:c9:2c:f9:38:
46:f0:fa:de:71:67:5d:16:bf:02:ea:bf:de:d6:64:
4b:85:1f:08:d6:29:5c:46:f2:b7:62:72:4d:da:a2:
a7:4b:ce:ea:2f:22:f3:73:d0:48:26:2d:cc:f0:d4:
cf:8a:34:81:67:8b:90:61:74:2f:e8:b0:44:63:f5:
27:e2:6b:8c:9e:e9:a4:ef:c0:ab:3c:7e:50:27:7d:
5d:35:8f:a6:a6:1e:85:e7:d0:14:ca:a7:b7:27:3a:
cc:34:16:a6:04:13:b9:02:15:d0:70:05:79:dd:65:
b9:e1:a1:1b:35:bc:74:b5:bb:69:9b:07:87:66:cd:
24:59:ff:b4:de:d6:4d:d2:50:dd:5f:2e:06:17:a7:
7f:e3:cc:05:f9:28:72:ef:5a:47:7f:29:40:c2:43:
49:08:27:b1:97:f2:20:f4:e5:05:87:c8:e6:10:b8:
e5:ea:43:96:67:2e:d4:68:08:0c:69:12:56:fc:87:
d3:1f:df:95:56:96:f4:c9:96:8a:ec:12:5c:0e:25:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A0:E0:71:CA:34:37:96:7A:39:63:A0:33:9B:D3:D0:B3:ED:FC:FE
X509v3 Authority Key Identifier:
keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9b:2b:f0:86:62:43:a8:f3:3f:63:21:fd:33:b1:5f:8b:08:
28:3a:fb:f9:26:c8:c7:80:e9:81:98:c1:e2:f6:84:48:44:03:
fd:ba:b3:4f:67:be:45:d0:b9:3c:65:c3:cb:fd:d2:21:e4:5e:
fc:ba:4f:36:20:61:e4:2b:2b:a5:6f:13:23:7f:42:a6:19:79:
89:8f:2f:a0:3a:19:51:ba:f0:9b:5b:14:14:f6:b3:aa:58:1b:
d3:43:15:eb:90:26:97:81:9f:f2:76:f1:66:dd:1a:38:4b:78:
11:87:06:9b:41:86:fd:df:58:c7:c0:96:67:64:08:26:98:43:
c5:cd:fb:07:f5:53:99:b6:8d:84:da:59:4b:4c:5d:78:9b:9e:
b9:80:5f:39:89:1a:25:a5:3c:8c:71:44:9c:59:95:82:34:b8:
ec:e9:37:52:17:a8:40:7a:24:d2:02:98:f7:47:c4:ff:1c:02:
6c:9b:9f:5b:b6:9c:37:20:0c:d4:16:da:af:bf:b5:6b:f3:20:
d7:96:78:f7:d4:3d:f5:08:00:d2:6b:25:c6:1a:27:c1:22:14:
6a:d8:d2:d9:a7:7f:81:97:6c:1a:f2:76:0a:8d:50:e3:07:fd:
11:de:55:28:78:a7:e9:4e:7c:b9:79:c1:b9:33:3e:a9:09:ea:
d8:f3:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:01 2026 by rpki-client