
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json)
Hash identifier: QTUl6uZS8Aezoez7BBI9JalaMctR1pGP52ZVqwz1xmI=
Subject key identifier: C5:13:E4:A0:6A:F7:49:F1:F2:70:60:CE:D9:DB:05:E6:56:60:4F:D7
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial: 0A17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
Manifest number: 09F5
Signing time: Sun 26 Jul 2026 20:24:00 +0000
Manifest this update: Sun 26 Jul 2026 20:24:00 +0000
Manifest next update: Sun 02 Aug 2026 20:24:00 +0000
Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: dPzall7iF1zMppyMuIvcMjxzQrSM5vCYykuZec0VBCk=)
2: 0A72D294006511F1BE07F947566F56BC.roa (hash: E/Iz9/9M4AyqWvgd1aB5MPhf6Qtoegq5pv3fO35/BF0=)
3: 359388D8006511F1AA0FA34B566F56BC.roa (hash: ZOtwRxhmupTieRo9qgJrLBkzO+gTqGzLiKJz701clvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2583 (0xa17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Validity
Not Before: Jul 26 20:24:00 2026 GMT
Not After : Aug 2 20:24:00 2026 GMT
Subject: CN=6a666ce0-2878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:a8:31:13:95:1d:cd:34:f7:0b:e4:dd:05:
3f:c9:e1:25:10:77:83:46:9f:2a:19:0b:48:f1:9d:
c3:ba:7f:6a:2e:2d:2e:64:28:80:5d:2a:78:69:a1:
7b:64:79:71:e6:60:d4:62:d4:0e:ba:39:34:f0:c8:
58:3f:70:92:d4:fc:3e:7a:5f:63:c5:33:fe:16:21:
b9:68:49:b3:e3:33:7d:c4:4a:74:49:d1:71:84:ad:
73:be:ce:7c:2f:cc:12:2b:e0:31:e5:fd:db:63:db:
22:62:de:37:73:25:16:c7:5e:71:bd:68:4f:ea:7f:
af:a9:26:b2:78:e9:54:75:96:92:14:4b:dc:74:4e:
38:c1:bd:c1:eb:46:6c:f9:ad:3a:64:54:d2:c2:3c:
cc:77:53:f4:f8:75:67:db:35:76:b8:24:92:2b:fb:
0e:48:a5:b0:2a:b7:88:10:36:c8:f5:db:ae:2e:ba:
1f:79:dd:fb:ab:2b:43:74:23:b9:d5:72:35:62:85:
51:91:b6:95:18:33:a3:08:3d:3f:47:ca:74:2a:f8:
3a:e8:89:41:2c:ac:37:58:fd:dd:40:4b:12:37:11:
b6:82:aa:89:9b:e2:a0:36:fe:f9:b6:25:05:6a:22:
65:19:5d:d2:7a:b4:b2:bf:54:19:0d:e0:ea:03:f1:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:E4:A0:6A:F7:49:F1:F2:70:60:CE:D9:DB:05:E6:56:60:4F:D7
X509v3 Authority Key Identifier:
keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:5d:8b:ea:b4:1c:35:83:22:c5:a1:05:5c:de:3f:c4:43:88:
b1:89:5e:2f:e3:96:79:0c:12:5f:c9:90:51:43:cb:e8:3e:61:
b0:1a:e8:77:60:69:00:f9:50:46:03:e8:0b:1e:84:69:3c:1b:
d3:28:82:fa:af:00:18:1d:9c:ed:14:0e:9f:1c:ad:62:db:56:
13:ec:55:78:50:6d:1e:8a:12:d2:c4:c0:76:d3:ed:a3:3a:2e:
6d:30:5a:30:f4:31:d0:b9:2e:24:d3:d4:f1:4f:a5:5c:aa:14:
e7:a5:e2:45:c8:3b:06:f4:3e:14:06:d2:6d:71:8b:22:f5:f2:
7d:13:87:a7:01:59:e7:ae:08:c5:cd:4e:00:52:41:46:d6:c1:
7b:c6:6e:7a:17:8a:2b:82:e1:14:74:f0:57:09:d0:21:4c:cc:
af:05:02:77:6c:89:0e:89:60:10:da:f0:1c:e7:9e:99:b4:68:
39:c7:e1:a6:3d:8b:6c:b6:56:50:47:4c:4e:04:26:bc:bb:6f:
92:3b:e2:57:f7:25:a8:6d:45:a1:09:61:72:d6:27:5f:fe:09:
0a:83:76:ba:43:93:0d:bd:3d:77:cb:10:b3:c5:13:14:9c:fa:
4d:e2:0f:78:21:88:66:32:52:89:67:74:0c:93:29:0d:f2:1f:
ae:24:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:22:44 2026 by rpki-client