
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier: bmBAzZ/+tAHSS4JiMdP6mrFh7pslkupuUmEEqa1tf34=
Subject key identifier: B2:3E:BF:CE:2A:19:B6:4E:0B:EC:B0:0F:3A:76:53:09:BC:79:4C:C5
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial: 06C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number: 06B7
Signing time: Tue 22 Sep 2026 22:07:52 +0000
Manifest this update: Tue 22 Sep 2026 22:07:52 +0000
Manifest next update: Tue 29 Sep 2026 22:07:52 +0000
Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: MrDlhIUxTZDxo652z8X8iQ0pKizcyA9gJwjqdOXG788=)
2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: 6cK1WB9mwOOoOwp+cGbSDlz8j71ro5RXPTbIMXDPpjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
Validity
Not Before: Sep 22 22:07:52 2026 GMT
Not After : Sep 29 22:07:52 2026 GMT
Subject: CN=6ab2fc38-a6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:ca:af:a9:88:1c:75:75:23:5e:e6:05:ca:
5a:5c:39:e7:ac:1d:66:72:b3:5b:e8:83:ba:63:66:
21:83:5f:d0:a9:14:0e:9d:6e:d0:d0:c0:76:4d:50:
11:f8:ea:c8:95:42:88:6c:7d:20:4d:b0:51:a5:37:
e3:ce:79:62:0b:11:c2:d2:07:36:d3:05:9b:18:28:
99:b6:00:13:a6:e5:bb:c7:f3:34:77:f0:8a:bc:2d:
41:3e:e6:fd:5c:56:ac:7d:e3:27:d6:ad:b4:50:72:
b2:04:44:57:fb:6f:da:df:38:c4:0c:ca:87:bb:09:
c4:82:31:82:3c:95:98:c4:48:17:fb:2e:cd:7d:da:
58:a7:23:f5:32:d0:04:fe:14:47:02:17:8f:0c:55:
fc:ac:cd:3e:b1:1b:3d:23:13:c4:79:3f:d5:e6:db:
4e:26:2d:88:2b:6d:d6:dc:ed:5a:fd:18:82:01:18:
0b:e1:0f:b2:50:72:20:28:97:08:aa:aa:ea:8c:d9:
1a:b5:0e:c6:d5:04:61:88:33:0f:44:3c:88:c6:1d:
f5:59:0c:fa:87:9e:67:45:32:b5:53:ed:5f:6d:45:
f0:b4:de:46:5d:c8:0f:60:4b:0b:0a:b7:d2:e7:cf:
00:b5:b6:ba:54:dc:5e:11:65:35:a4:07:21:74:1e:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:BF:CE:2A:19:B6:4E:0B:EC:B0:0F:3A:76:53:09:BC:79:4C:C5
X509v3 Authority Key Identifier:
keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:eb:58:98:07:0e:cd:c7:59:d3:c7:08:5c:ab:4a:0d:f3:b8:
cc:a9:8d:e4:49:56:a0:12:8c:be:07:c3:83:c3:9d:07:1c:f7:
d7:09:5d:1c:28:ce:7b:42:03:ce:27:c6:80:70:fd:bd:3a:56:
8b:59:43:43:d5:f2:16:71:db:87:56:ff:6b:69:1b:fb:07:9e:
e6:12:7e:92:65:61:9f:d0:92:37:ce:21:0d:c9:4c:92:99:ed:
97:cb:fa:ce:89:03:52:1a:73:9c:76:8c:8d:5d:67:1e:78:bd:
c3:b8:46:8e:4b:8f:8e:38:36:39:c4:ef:e0:cf:85:01:64:03:
63:e2:e1:36:5f:d5:25:3f:d0:c9:6e:31:18:80:2a:13:a8:87:
eb:e8:bd:ca:f6:35:00:ab:c0:63:44:6f:cd:f1:08:84:17:e5:
91:dd:ed:de:da:4d:5e:0a:37:5c:8d:c1:4d:4d:44:3f:6a:2c:
85:e1:04:dd:5a:27:16:e4:47:e9:c2:de:6f:5c:47:bf:72:d7:
18:81:43:8e:6f:4d:a2:98:9d:f6:c0:c2:ad:ed:dd:7b:22:f8:
69:0d:ca:94:92:98:1b:f4:c1:53:5c:05:cb:f8:4f:7e:7e:a2:
5e:29:51:3c:fb:0a:52:f2:65:73:e1:92:8b:d2:93:86:4c:ef:
5b:e2:ef:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy
MjQxNjJBRjQwHhcNMjYwOTIyMjIwNzUyWhcNMjYwOTI5MjIwNzUyWjAYMRYwFAYD
VQQDEw02YWIyZmMzOC1hNmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1iPKr6mIHHV1I17mBcpaXDnnrB1mcrNb6IO6Y2Yhg1/QqRQOnW7Q0MB2TVAR
+OrIlUKIbH0gTbBRpTfjznliCxHC0gc20wWbGCiZtgATpuW7x/M0d/CKvC1BPub9
XFasfeMn1q20UHKyBERX+2/a3zjEDMqHuwnEgjGCPJWYxEgX+y7NfdpYpyP1MtAE
/hRHAhePDFX8rM0+sRs9IxPEeT/V5ttOJi2IK23W3O1a/RiCARgL4Q+yUHIgKJcI
qqrqjNkatQ7G1QRhiDMPRDyIxh31WQz6h55nRTK1U+1fbUXwtN5GXcgPYEsLCrfS
588Atba6VNxeEWU1pAchdB6M/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLI+v84q
GbZOC+ywDzp2Uwm8eUzFMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5
RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL
dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzczOC8zMjBDM0E5QUM5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6
S1dZM2J5NEhWVUVpUVdLdlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhetYmAcOzcdZ08cIXKtKDfO4zKmN5ElWoBKMvgfDg8OdBxz31wldHCjOe0ID
zifGgHD9vTpWi1lDQ9XyFnHbh1b/a2kb+wee5hJ+kmVhn9CSN84hDclMkpntl8v6
zokDUhpznHaMjV1nHni9w7hGjkuPjjg2OcTv4M+FAWQDY+LhNl/VJT/QyW4xGIAq
E6iH6+i9yvY1AKvAY0RvzfEIhBflkd3t3tpNXgo3XI3BTU1EP2osheEE3VonFuRH
6cLeb1xHv3LXGIFDjm9Nopid9sDCre3deyL4aQ3KlJKYG/TBU1wFy/hPfn6iXilR
PPsKUvJlc+GSi9KThkzvW+Lvzg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:22:06 2026 by rpki-client