
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json)
Hash identifier: 12HK/grrZWrCvWrCE/FleTlDben6HJIBKAn2WsjeArY=
Subject key identifier: 7B:71:A3:17:46:E0:3B:AA:1B:0E:66:F4:4E:B6:C5:9B:00:EA:84:82
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
Manifest number: 023F
Signing time: Mon 27 Jul 2026 04:20:28 +0000
Manifest this update: Mon 27 Jul 2026 04:20:27 +0000
Manifest next update: Mon 03 Aug 2026 04:20:27 +0000
Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: cbyHG77lYtuixjFlKBCMNb+YseymvLR+mmVl3WHiDVk=)
2: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: o3DLj0A49CBn+DQBy0PkQcbscmEcGxRHaVNwUFP538g=)
3: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: GDl5mVu/aHI+hBuO6VNjgfJXS25xVSRkSRDDKqvvcrI=)
4: 60C72042052911F0A2361C50C4F9AE02.roa (hash: Mi+iRYH8oLuQ7nVmsO2NAf7yTqeWaOmHLkb8IkLkMI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Validity
Not Before: Jul 27 04:20:27 2026 GMT
Not After : Aug 3 04:20:27 2026 GMT
Subject: CN=6a66dc8c-925b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:8c:56:8e:87:17:0d:09:f0:07:78:e9:92:
73:49:42:26:bc:fa:c2:19:47:7a:48:ea:d8:e5:b1:
b3:10:d2:df:86:d6:f2:cc:b9:c0:7e:37:85:93:98:
4e:d9:f5:8c:3e:f5:36:bb:e6:62:bd:40:f9:8a:a1:
d5:c6:e3:dc:eb:90:97:1e:ab:b5:90:0b:52:32:eb:
87:60:e4:09:f6:b5:cb:47:fd:3f:ab:5f:e4:5e:6f:
88:57:7e:ea:72:5a:8c:ff:f0:d5:5f:9e:ce:dc:3b:
0a:c2:c2:2a:45:7b:71:b2:c4:8d:4a:97:b5:72:b6:
80:ae:53:7c:ea:d8:65:83:08:b9:47:a6:51:e4:8e:
8c:8c:0e:a7:08:aa:71:be:7c:5b:4f:6e:b5:58:80:
b6:4e:af:b2:9e:65:6e:34:b4:c4:4f:99:d2:0e:7d:
22:28:31:29:29:43:4b:40:12:d1:63:a4:ae:ff:cd:
16:16:aa:af:8a:c9:f1:4a:7e:3f:f4:0c:73:4a:54:
ed:df:87:e5:0b:78:cc:17:3a:e0:8a:a7:bc:92:4c:
ec:26:c6:82:6d:07:db:72:bc:91:0c:22:4d:a2:b5:
0e:d5:19:d9:12:78:8e:61:0e:65:73:b6:d1:e1:9a:
ec:77:a4:b3:4e:e8:d7:72:85:33:0e:cb:e2:d1:8c:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:71:A3:17:46:E0:3B:AA:1B:0E:66:F4:4E:B6:C5:9B:00:EA:84:82
X509v3 Authority Key Identifier:
keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:78:6e:68:6c:fa:9f:bb:8e:98:53:04:1a:90:34:32:34:70:
2d:de:bd:38:71:75:c5:69:6c:cb:d3:e5:93:3f:82:ba:d9:ca:
3a:ad:66:2d:0a:cb:82:05:dc:df:11:47:6e:cf:32:1f:6f:cc:
e8:60:79:05:88:f2:92:ae:50:df:c9:3b:68:20:1e:31:8b:91:
86:98:a2:0a:9c:96:d1:83:b6:88:66:4b:2c:b6:7e:dd:2a:c9:
1c:9b:ad:e0:e1:68:cd:93:5a:1d:2a:32:bf:d4:00:ca:b4:48:
37:ee:29:af:49:4c:02:1f:8f:b1:08:f8:3a:ef:ee:18:11:6f:
94:c3:7b:1c:f0:aa:b6:76:3d:26:c5:68:04:9b:19:34:c5:cf:
04:17:64:6f:58:a9:89:55:93:f9:77:76:b8:ef:e6:e4:76:e9:
3b:d6:64:86:6a:b1:a2:8e:6a:42:16:fe:7e:ad:df:3e:d1:35:
c6:c4:76:f3:99:7d:04:0b:69:b9:61:e3:3f:de:3f:e4:cc:51:
7c:83:22:4a:26:6a:a6:b2:f4:8c:74:d8:f7:54:ee:4a:82:ba:
0b:e5:e9:92:90:6e:7f:3d:6b:1b:11:fa:9f:b9:93:e6:3c:f7:
d3:4c:2d:aa:de:12:83:10:00:0c:50:f4:d1:3b:7f:33:dc:d8:
8c:52:02:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:38:47 2026 by rpki-client