
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier: mw+Ujxbzc3Q1R706kkKEW0MtoiF+qQjlvZh/R5IN7dI=
Subject key identifier: 45:54:D6:96:4B:29:CC:CD:C1:A8:7F:1E:C5:4C:C7:CC:F4:94:40:C3
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial: 0CCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number: 0CB0
Signing time: Tue 28 Jul 2026 18:43:08 +0000
Manifest this update: Tue 28 Jul 2026 18:43:07 +0000
Manifest next update: Tue 04 Aug 2026 18:43:07 +0000
Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: G6BaLCrQ06mNpj7IcXD/jpqy8BKINnqRHq+eSOlopN0=)
2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: MVjgqlWP2+PxzhdlAammG4g4jdGVj5m8klqnIWeyc0E=)
3: 627B1438281211EA881CC32DC4F9AE02.roa (hash: hEcH8ZRuZadu9VcKHGuJsHI1HxqcK9oTlGT1pOjaHQo=)
4: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: pg9SsLOxgtqV7eWyJNRqBhktus5MyHYQ/fTT/Weq75Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Validity
Not Before: Jul 28 18:43:07 2026 GMT
Not After : Aug 4 18:43:07 2026 GMT
Subject: CN=6a68f83b-3bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:f9:c9:b0:5f:e5:7d:e8:90:a8:9e:5a:aa:
17:9b:a0:8b:68:7a:f0:01:d1:90:aa:7b:f3:f8:cc:
e1:38:08:cd:d0:9d:1e:41:84:e5:ed:ec:85:67:27:
9d:b1:87:96:2f:84:85:ca:0d:81:be:14:52:0f:9c:
a9:db:2a:77:70:2e:4b:d3:47:ee:7e:84:5e:04:d5:
c6:69:29:20:fb:42:7a:b7:2b:35:f4:80:02:6d:fb:
0f:ed:a7:a8:12:10:13:18:5e:ec:8c:58:19:ff:1e:
09:20:0d:b2:c3:f1:96:d6:d6:cb:4d:39:1b:2e:4d:
a0:71:72:7b:c6:51:b3:07:39:c0:75:0f:04:b5:e6:
30:59:93:b8:0b:52:53:0b:05:f5:ae:4a:79:4a:7b:
e3:74:9c:88:bb:86:d6:a6:23:b0:41:ef:c7:4f:be:
6c:d8:9f:ac:38:84:ba:a0:42:c6:d1:fa:57:b0:94:
b4:5d:a0:81:2c:8f:eb:44:dc:f8:f7:ba:50:a9:09:
ba:70:c0:41:8d:c0:ed:89:6a:2c:ba:35:0b:af:22:
79:a4:ab:95:8e:43:52:74:17:f8:1b:03:45:d7:39:
5d:bc:e0:b6:13:d1:10:f4:8b:09:35:30:ae:f9:4a:
fc:f9:fb:0c:cf:af:1b:11:85:17:3b:fa:33:c3:ad:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:54:D6:96:4B:29:CC:CD:C1:A8:7F:1E:C5:4C:C7:CC:F4:94:40:C3
X509v3 Authority Key Identifier:
keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:1a:3c:27:f1:0f:0d:13:c4:25:71:43:71:11:1c:b7:33:21:
51:72:36:15:cc:60:ad:c9:e8:50:82:84:ad:39:16:46:1b:6a:
8c:ad:f1:cf:93:18:59:a6:f3:77:38:cd:92:c8:e5:0c:49:92:
57:a1:df:af:90:77:28:eb:8d:4f:d0:e7:3a:80:f7:5c:f6:70:
ff:02:5f:18:a8:1d:79:cd:c1:03:aa:37:98:ca:dd:f7:e5:f0:
52:0d:01:9e:39:ae:60:80:66:fb:5c:11:a3:54:59:b1:1c:91:
b8:f2:fd:4f:80:41:e8:e2:1c:ad:47:30:cf:ef:5e:0c:4e:84:
d2:26:c5:90:2c:e0:20:8c:5e:85:63:f5:91:e5:b3:31:22:c7:
70:65:de:1f:9c:6d:f5:5c:4a:34:7b:4e:08:17:cd:6c:bd:11:
94:2e:30:aa:90:17:44:a6:2f:49:e3:4d:18:9a:db:64:45:ee:
d6:cc:a2:87:e5:1e:3f:74:bb:27:a1:1b:1b:97:5f:29:8e:46:
3c:5e:22:06:a6:cf:0c:6d:82:a9:9d:78:f4:b5:1f:c9:4f:21:
bc:f3:b2:26:bb:29:9a:6d:b2:e2:95:1f:f0:55:e0:d0:db:6e:
4e:e8:11:7f:74:c9:65:b0:d4:66:ab:a5:35:31:c3:80:b0:0c:
ba:c7:f6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:31 2026 by rpki-client