
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier: eMyhO5WuSX8/6Wii5xSXGidUyf+RradwPg+IGX9LeqA=
Subject key identifier: 23:0B:54:F4:7B:66:3F:6B:12:7B:DD:DE:86:EC:A4:D6:FD:80:DB:52
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number: 0667
Signing time: Sat 18 Apr 2026 22:33:53 +0000
Manifest this update: Sat 18 Apr 2026 22:33:52 +0000
Manifest next update: Sat 25 Apr 2026 22:33:52 +0000
Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: aw6nupTFoPiLqivG28Va+3nfou73YKn9mzroGkpfc58=)
2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: 6cK1WB9mwOOoOwp+cGbSDlz8j71ro5RXPTbIMXDPpjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 22:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
Validity
Not Before: Apr 18 22:33:52 2026 GMT
Not After : Apr 25 22:33:52 2026 GMT
Subject: CN=69e406d0-406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:3e:94:c5:a2:a7:ff:ef:cd:a2:bd:9e:96:
f8:c0:a0:23:d9:76:ff:30:3b:74:6d:d8:52:1d:1f:
15:5b:47:5b:8e:73:d7:d6:b7:f3:79:7d:f8:88:ea:
43:bb:3c:6b:3c:ee:b2:e4:fa:37:ec:ce:21:3e:98:
ab:29:cd:ae:50:19:d8:c6:f7:d8:a4:bd:b5:0d:76:
6c:cf:1c:b1:c9:69:14:42:aa:53:79:79:7f:1c:67:
09:c6:fe:16:ed:9e:89:d1:a6:93:cc:bf:1f:a6:06:
d3:69:59:7e:5b:d6:3b:0f:5d:96:5f:17:fd:d6:e2:
9f:f7:28:f8:e8:a6:bf:0e:6d:92:52:45:69:40:2b:
09:39:63:d5:f4:66:85:86:6c:f2:98:aa:fd:b1:e7:
3d:58:dc:1c:83:d8:46:27:57:10:41:82:79:16:e1:
60:07:6d:2d:9f:99:0b:1e:51:15:9d:21:c2:9d:fd:
09:a3:5a:9b:cb:c0:25:8f:10:95:f1:1b:88:8f:a7:
1a:ba:81:8e:74:97:a9:3f:34:1a:34:b6:5d:04:c4:
e9:6f:fb:9e:8e:0b:f3:40:5a:6e:b4:89:8d:ac:f1:
8f:15:2f:59:5c:c9:db:37:c1:6a:ae:95:57:51:dc:
fd:ab:1a:d9:f2:3e:67:5b:e8:6e:31:78:ab:2b:32:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0B:54:F4:7B:66:3F:6B:12:7B:DD:DE:86:EC:A4:D6:FD:80:DB:52
X509v3 Authority Key Identifier:
keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3d:b3:12:cd:c7:02:be:6d:1b:4d:47:0b:41:3a:c5:18:1b:
06:10:e2:03:db:87:da:6f:7f:dc:9a:ad:34:d1:2d:7d:1e:af:
15:3a:25:8c:58:a7:f5:46:67:49:03:ba:80:27:a8:0d:29:d3:
5f:87:b9:d7:af:f2:ef:db:81:ad:fe:ac:e6:85:d0:de:c5:55:
60:71:5a:61:f7:fb:90:90:ed:56:14:3e:dd:1a:0e:25:05:7c:
7d:6c:4e:3b:09:ff:d2:2f:86:bd:0c:c5:ec:cd:bb:9b:4c:60:
07:d1:a4:cf:d8:f8:4d:f5:90:16:15:8e:d5:a2:a4:d6:13:2b:
5f:59:32:64:8a:57:48:eb:83:4c:49:27:78:7c:1f:9c:20:3e:
6d:36:3b:2c:5f:fb:08:43:90:0f:af:24:de:a7:aa:10:d5:e8:
09:4a:fe:be:72:d7:c3:20:5e:17:e1:23:66:a9:ba:fa:a7:59:
56:cb:b9:58:19:e9:7a:eb:b7:21:48:ec:b0:34:ed:3a:4f:3e:
cd:f3:9b:6f:e6:d3:87:98:36:64:01:d2:cb:33:89:cf:06:99:
42:10:10:c7:42:c9:4e:f6:09:e9:7a:96:0f:34:f8:fb:8e:7d:
8e:0e:a8:f8:83:9f:81:cf:67:5b:44:17:8d:df:fd:c9:50:d6:
ea:31:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:12 2026 by rpki-client