
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json)
Hash identifier: fAa/1byan1P2F9phmUadntk56IQsmY2OXXZQyvK4PqY=
Subject key identifier: E8:A2:3D:6B:DC:2E:BB:0F:6F:35:97:B8:29:31:2E:47:60:D9:2D:3F
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial: 08F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
Manifest number: 08A6
Signing time: Tue 28 Jul 2026 21:00:38 +0000
Manifest this update: Tue 28 Jul 2026 21:00:38 +0000
Manifest next update: Tue 04 Aug 2026 21:00:38 +0000
Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: U1Do+UsTEJBiFpJ3lZNpXK6HvINEDAJNYBAdfbQ9fpg=)
2: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: kfnLo6TLNnxHzHz2hfx3dzeu6fOXlby4NhM/hMtaUog=)
3: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: N8OrGg15ZoxlIKz8paOj7jgooryKDtsZ+DLKkaeQezQ=)
4: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: MaFJmDPMqlk1C6MUJjdtLiNgPwGqra//weYceabgP/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Validity
Not Before: Jul 28 21:00:38 2026 GMT
Not After : Aug 4 21:00:38 2026 GMT
Subject: CN=6a691876-1a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:aa:6d:83:78:92:06:9b:0b:8f:26:34:2e:
8d:48:2e:59:cb:8c:c9:a7:b0:92:4c:11:68:5d:74:
a2:05:1a:f7:13:1d:db:26:20:16:4e:77:7f:19:a3:
5b:50:36:05:18:ee:a3:51:21:99:84:46:ab:01:20:
6b:41:9d:f2:a3:4f:e8:02:20:44:8c:db:ac:10:5c:
f8:65:93:f9:be:6b:d1:c6:75:7c:b4:7c:11:8f:05:
f6:c2:55:88:6a:fe:c9:3d:74:ed:81:79:2e:f7:75:
3b:8d:11:f6:e7:e7:17:a9:ed:66:f3:78:b8:90:ae:
21:37:cf:19:a4:4b:4b:a3:da:5b:35:e4:34:84:8e:
64:87:3d:25:93:4d:9c:43:ee:2a:46:7a:94:93:5a:
8a:fd:16:59:16:16:a3:38:56:6b:a0:a4:a8:77:ec:
6d:bc:b4:cb:42:96:42:ff:29:32:df:0f:57:ae:48:
2b:c3:bf:48:cb:e8:56:2e:2a:9d:db:50:c3:ab:4d:
0a:b0:7c:86:05:21:e0:d4:26:ca:18:2a:5f:77:b4:
6b:81:3b:9d:cd:f9:31:e7:07:5f:c7:56:e3:d1:ca:
6f:a8:b3:be:99:09:2b:3b:86:a9:24:95:96:ee:c9:
ae:ab:43:37:ef:ed:9c:a1:ea:7c:7f:6d:b6:e8:2a:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A2:3D:6B:DC:2E:BB:0F:6F:35:97:B8:29:31:2E:47:60:D9:2D:3F
X509v3 Authority Key Identifier:
keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:e5:34:84:f9:1c:aa:a9:b8:11:09:a7:3c:fe:96:87:41:33:
3e:f3:a4:46:ee:7f:35:a2:ed:ab:85:9e:68:1a:2a:f8:ca:f5:
ed:55:a9:15:f2:82:db:d4:0e:ef:f2:56:18:ff:25:8c:0e:73:
57:34:5a:f1:a7:b8:63:8c:5f:0b:2f:be:ec:28:5c:9c:39:81:
9e:ce:c3:00:a0:a4:11:76:4f:0d:0c:4d:87:0b:5b:7c:60:0e:
7a:97:89:e1:d3:bc:ab:be:ec:13:31:43:83:05:96:26:d2:8f:
fc:8c:40:8c:85:3d:27:e7:3b:da:2c:c0:b9:cf:88:1b:9d:cd:
a5:15:ce:a8:e4:24:fd:97:47:04:b9:6a:ca:19:74:9d:48:5c:
aa:f6:b1:41:bf:bc:83:aa:c1:78:5f:2c:97:be:73:6d:3d:66:
c1:b8:63:f9:82:bd:1e:25:46:f0:b6:c4:c2:b0:0a:8e:bc:e4:
ff:11:0e:35:56:c0:59:46:55:e4:b9:aa:89:ca:cb:dd:c7:d7:
05:25:df:34:ed:6d:58:9a:20:dc:4b:a8:97:a5:3e:ee:15:ad:
82:db:15:74:f8:f1:af:07:52:94:3c:a3:d1:71:d6:95:76:49:
e3:3b:10:3d:b7:a0:73:12:96:43:95:2e:af:94:6a:28:92:8e:
53:47:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:58 2026 by rpki-client