
$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File: u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier: QQlCfh06smwHDNbFd6Z5sz3mgD5h9Vnc34C5tboVTxU=
Subject key identifier: DC:76:C8:54:4E:30:C0:FB:60:4B:7B:46:6B:E6:D3:AF:FC:93:E2:6D
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer: /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial: 02A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number: 0294
Signing time: Fri 17 Apr 2026 01:29:53 +0000
Manifest this update: Fri 17 Apr 2026 01:29:53 +0000
Manifest next update: Fri 24 Apr 2026 01:29:53 +0000
Files and hashes: 1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: In7zzeAOnoRD36srlwzom3+RRc+zYlSGyAqh5L9yUkk=)
2: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: b9DVs3sKMRxCpx6qLE96QA7SsPL0b1qBye22Pru51gY=)
3: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: 9SKQpptnj/JfGFLLT1UzGMBhecqFZTQ9eSGwwb/vYF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Validity
Not Before: Apr 17 01:29:53 2026 GMT
Not After : Apr 24 01:29:53 2026 GMT
Subject: CN=69e18d11-600d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:7d:77:df:9e:56:6a:72:8a:13:05:23:5a:
3a:c9:d8:7e:11:3c:a6:c0:cb:44:a4:91:70:40:cb:
0c:f4:e9:a4:ff:b9:c5:73:5f:59:4b:4d:0c:33:40:
52:4e:05:5d:86:8e:03:38:90:65:76:01:91:cd:81:
fb:fe:46:07:55:60:93:25:1b:49:72:4c:40:6a:d9:
16:de:0a:f4:c2:83:49:b4:33:eb:9e:73:a7:02:8b:
b6:51:01:7d:20:eb:bb:2d:fd:42:e7:05:93:7b:ab:
13:61:5a:9e:8f:f8:31:c7:ba:9f:43:ae:0e:0c:6c:
af:05:e9:5b:49:ea:1d:6f:11:fd:4d:a3:8c:73:f0:
7f:9c:4d:7f:ba:e0:09:35:5c:b3:89:cf:8e:74:22:
ee:c9:18:b5:ed:22:a6:46:19:2a:d8:59:c7:3e:34:
5a:d6:4b:fd:d0:2a:e5:c6:4b:a6:c2:08:66:8f:2f:
cc:21:eb:56:3b:25:38:9a:08:05:37:59:ef:22:df:
6c:35:d6:47:37:c4:bb:75:a4:7e:0b:19:d9:74:f4:
19:f1:e4:85:d4:d8:55:04:7d:bb:e4:1c:14:99:91:
35:81:59:b3:f2:88:57:d8:a4:19:b4:6a:21:84:cc:
cf:1f:0e:5c:cc:db:45:bd:25:0c:97:c0:9e:a1:05:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:76:C8:54:4E:30:C0:FB:60:4B:7B:46:6B:E6:D3:AF:FC:93:E2:6D
X509v3 Authority Key Identifier:
keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:1f:2d:6e:87:64:61:f5:86:75:80:7b:c1:8d:4a:21:40:26:
84:b2:56:19:31:1d:47:24:9f:b0:33:8c:d7:9f:07:e1:cc:67:
27:96:c9:17:ca:9b:c8:95:7a:3f:3a:e0:d3:29:11:d6:c0:08:
4c:8c:fc:4c:12:15:b8:1e:60:34:c3:bc:c9:78:d4:5a:77:b8:
14:0a:2b:c4:ad:c4:fb:e0:ea:c1:e8:25:97:5d:1b:79:b0:47:
cc:67:0e:1c:3c:03:f2:16:8a:0c:23:9a:b0:90:55:bd:23:c3:
4b:5f:ec:15:97:c8:6d:69:62:25:29:8e:7a:d1:5c:b5:9a:c3:
f2:f8:b9:b3:65:f5:f0:b6:f1:67:d0:6e:ac:be:65:4b:ca:0f:
c3:4a:b9:e3:d2:0d:3d:e1:95:da:5f:8c:9c:ab:a3:f7:e0:29:
52:db:25:eb:05:09:1a:66:5b:13:11:79:81:dd:25:49:c1:4e:
b1:9d:0b:a9:09:cb:f7:92:b3:60:d4:f7:8b:73:b9:fa:e1:11:
92:fb:99:c3:be:5b:ed:84:3b:4d:a8:72:0f:8e:59:66:4e:e1:
7a:5e:e0:93:1b:09:8f:cb:2c:f4:8d:a0:ce:99:a3:14:fd:11:
fd:a5:e6:9a:3d:db:a5:3e:20:90:30:35:aa:61:44:3b:38:34:
17:0b:5a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:18:19 2026 by rpki-client