
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier: mH6l5CXEcjbj+PFy7Clh3EjwFqm1WKp2dQr43Ae3kYo=
Subject key identifier: 03:C2:64:5B:9A:1B:ED:3A:7C:B2:4A:EC:21:5D:C6:70:DD:6F:C2:73
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 02F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number: 02C0
Signing time: Mon 27 Jul 2026 02:50:15 +0000
Manifest this update: Mon 27 Jul 2026 02:50:15 +0000
Manifest next update: Mon 03 Aug 2026 02:50:15 +0000
Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: 1BIXDqJrTQ+u/UyjsHL1aURYzYL/CGMiwP17A/PvXMc=)
2: 84EE99E868A911F1B1EBC4147A47A888.roa (hash: z/+T5dr4icEG46i7t+MZU5zchUhuJVVudXp4434069I=)
3: C3C2560ABFDA11F0A858A529C4F9AE02.roa (hash: BkxKV7IhdZCefMM8QPhYXEEYW9dJOyUUvjsBlVaijE8=)
4: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: Wpi2JAjBrkvZuNJTiIpyUxWGu04n+1j7IVuyCXVldS0=)
5: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: 3O6BvMokBPQb3h3RA+cEG9OncfKf9sHCk/LbeGG4QfA=)
6: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: u18PyOf6WCGxWY2aATMIM9qv2GW3Pt67w7d5BWo1AFo=)
7: 4953C028C13A11F0B7555663C4F9AE02.roa (hash: sHSb0pTIf8ICWzfHaOSo11pRZiOv88WhOhvv7Mz8Vos=)
8: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: 8+Ic42DDpm+gCqgWvnh0TXwsiANCVNuehMizJwv4Ko4=)
9: 4337A376EC3211F080B8AAB9416F56BC.roa (hash: 0XIZnoNrC2grMc/00+Jp/CKQRxxNj6Nk+mSX6aVc2KE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754 (0x2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Jul 27 02:50:15 2026 GMT
Not After : Aug 3 02:50:15 2026 GMT
Subject: CN=6a66c767-c095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:b1:33:bb:a4:d1:fd:22:cb:f2:21:bd:70:
f8:a5:3e:d2:02:54:3d:46:fb:06:58:3d:01:88:ea:
1e:e4:99:84:2b:58:17:76:d2:41:13:f5:ba:51:63:
1b:68:5d:83:bc:bf:f5:14:ac:ea:af:97:bd:a7:22:
f1:5d:cf:d3:17:0b:f6:cc:b4:bf:ac:4c:c1:b1:15:
5b:ab:10:5c:79:b6:35:8e:d3:df:4a:95:46:4f:c8:
ef:c7:ac:d3:53:30:0f:a1:d0:72:d9:4c:8f:b7:28:
d5:df:d6:93:c4:f5:bd:36:d9:32:c0:fe:f5:6b:c5:
4a:a6:00:20:ca:2d:ff:2c:62:f3:22:a7:8a:7b:ef:
12:cc:95:91:17:f5:40:ea:a6:14:1a:f3:e1:70:05:
ab:e6:89:0a:0f:f5:d1:a1:94:c8:12:37:85:3a:1e:
92:3b:33:40:1f:df:16:52:d5:40:37:57:4a:0c:95:
73:ef:65:f1:bf:58:6b:02:47:19:51:8c:24:54:35:
e9:e1:43:3c:98:29:b8:6e:69:73:65:6c:f9:f4:fe:
13:e1:19:fc:7c:df:e9:19:67:6c:5e:c7:9f:ef:18:
99:0f:b0:28:74:02:cb:1b:54:41:4d:cd:d5:a8:30:
a7:1a:0a:d1:ae:b3:fe:d5:28:83:26:0d:21:75:c3:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C2:64:5B:9A:1B:ED:3A:7C:B2:4A:EC:21:5D:C6:70:DD:6F:C2:73
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:90:a5:cc:25:20:2a:99:69:df:b9:cb:ef:54:b8:12:4c:a4:
44:3b:6c:cb:5b:47:ff:b7:02:cc:cf:fd:b6:37:1c:8f:b1:e2:
9b:e0:d9:9c:1b:32:c5:f9:ec:77:f5:e7:fd:a0:19:29:2c:ee:
53:3e:3d:e4:99:d7:78:ec:34:ba:5f:ee:97:5f:9a:b8:4d:b6:
cc:fa:0a:e1:97:b7:4d:9e:1b:7e:41:07:51:38:84:33:bc:57:
c4:01:cf:6b:08:a3:29:6b:5f:e5:09:cb:4d:17:0c:24:a5:7f:
65:58:af:fb:a0:ad:e9:0b:b6:ba:18:a1:9c:f6:7f:a2:7b:8e:
df:e6:97:ac:0d:b1:cf:13:5d:63:54:3d:db:da:d9:05:b6:aa:
0a:f4:80:bd:fb:ba:bc:b0:6c:f2:2c:d8:f9:c0:f8:60:a4:06:
93:21:eb:c1:cc:fd:67:0b:a7:80:1f:be:6e:41:9b:9f:48:de:
fc:8d:47:c8:14:46:66:4f:8b:92:72:9d:2f:58:b8:cd:b1:e4:
f0:5a:96:14:76:8c:e6:2f:5f:a1:02:62:74:18:4b:d9:a7:f4:
1c:27:21:e7:4c:ff:c8:55:d3:cc:5d:34:bd:68:de:cb:5f:ee:
cf:f9:b8:9e:d2:90:25:6e:56:ea:61:00:ab:ff:a6:64:94:d7:
be:71:41:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:41 2026 by rpki-client