
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
File: r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json)
Hash identifier: yLBkc48K4XWakHcz6qNOXc+4MUXeAg+OkOoQXL3jEyA=
Subject key identifier: 2A:64:A4:78:B7:D4:8A:AC:C0:4F:A3:0C:6B:AB:96:4B:2B:73:51:3D
Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Certificate serial: 01F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
Manifest number: 01CC
Signing time: Mon 27 Jul 2026 05:27:08 +0000
Manifest this update: Mon 27 Jul 2026 05:27:07 +0000
Manifest next update: Mon 03 Aug 2026 05:27:07 +0000
Files and hashes: 1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: mngnHqK3ij4CfGX5ln7QdzeQvB66Eo6gyhznMG196WY=)
2: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: YLQu+XBkP0u4scPVL2HjSFkhwvlDsdMdNxwXV2B40qg=)
3: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: SJ1zAtwuUDoklbt6R8JhcX6A+HkMTpxPrsLu4rdoP7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Validity
Not Before: Jul 27 05:27:07 2026 GMT
Not After : Aug 3 05:27:07 2026 GMT
Subject: CN=6a66ec2c-221b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:bc:b1:16:25:71:e1:a4:16:14:7f:0d:8c:
ed:ea:b8:21:1c:d2:3d:fc:85:9b:b4:18:24:fb:56:
3b:77:66:e0:e8:f7:15:3a:fe:08:3c:91:d7:49:60:
04:5f:fe:15:03:13:a5:74:a7:f4:b9:f9:87:f9:65:
1e:b1:c3:9e:ac:82:6f:2d:16:d1:72:41:2a:e1:ec:
ab:a9:c9:30:62:3a:60:4b:98:6a:5b:6e:84:47:4c:
b3:9b:6b:f0:9d:67:98:2f:42:7f:78:34:ac:46:c3:
50:e3:61:27:0c:da:92:54:c0:0a:3f:a2:79:c4:ce:
34:7b:2b:35:d1:f4:1e:d9:73:0f:30:3a:79:ac:69:
a6:2e:29:78:e5:dd:00:6b:84:52:0d:30:2c:1d:c8:
38:fd:40:20:11:8b:ee:9c:a9:51:d0:21:d9:f7:ef:
b5:fc:cc:86:33:15:73:8f:b1:cf:cb:06:f8:19:2b:
b6:96:ad:e5:ec:6b:40:cb:55:30:c5:f7:91:b0:ad:
e1:cd:5b:f1:10:3d:ac:32:37:24:af:00:33:b3:ee:
ef:ba:fe:74:5f:f8:0a:33:16:b9:d4:5e:f4:42:4d:
f2:94:16:15:c8:45:f8:e3:aa:3f:e7:f5:46:bc:f0:
ef:f5:c3:7a:5b:9c:5a:5b:ac:7c:bc:9e:8c:34:00:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:A4:78:B7:D4:8A:AC:C0:4F:A3:0C:6B:AB:96:4B:2B:73:51:3D
X509v3 Authority Key Identifier:
keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f1:ba:41:6f:6c:2e:ec:db:c5:22:31:11:70:74:b7:74:a0:
3d:a5:6b:0c:1b:a5:a7:66:e6:e4:93:11:9b:a5:38:aa:29:d5:
81:93:ee:ce:f6:fb:5d:0c:13:27:34:1e:34:1a:f6:00:62:f4:
5d:f7:9d:c8:b5:b2:9e:a9:96:34:60:78:57:85:79:a3:73:a4:
f2:39:ae:9c:89:9d:d7:93:bc:d9:0f:e6:76:df:0b:9b:cc:31:
df:bf:e4:e4:a9:d9:de:62:bd:96:1f:8a:06:c5:82:bb:67:78:
55:64:1f:b7:46:c1:13:0a:fa:00:4a:9d:d8:59:97:18:7e:93:
0c:45:11:8f:de:df:8a:29:05:af:f2:7e:32:6c:d2:92:5e:c4:
e7:8d:c9:06:ff:d1:ac:3f:68:bd:42:6e:b7:09:0a:14:78:bb:
88:a1:ce:d8:6f:6c:ca:86:b0:d1:60:5b:57:18:74:11:0f:f9:
3a:29:a2:20:11:27:a1:96:5a:ec:25:5e:fd:a9:37:f5:a7:98:
3f:93:90:aa:b9:20:9e:28:02:9c:c1:40:e5:0c:dd:7e:72:1c:
29:05:94:31:5f:b1:be:58:97:a4:4f:0b:c8:b5:3a:f6:cd:25:
92:aa:38:98:ea:38:28:01:04:43:19:af:74:7a:9f:35:c3:82:
8a:8f:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:29 2026 by rpki-client