
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
File: h7_uyP-fsmiAINtZpiLBOhXlryA.mft (raw, json)
Hash identifier: pmbRXhe1iuRgc875hHi24NlyC8Ahthpx3nCfMdv3ME4=
Subject key identifier: EB:D0:67:DF:4A:E6:0E:C2:13:FE:FC:D8:1C:E7:C6:A0:D3:E8:88:4E
Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20
Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
Manifest number: 01CC
Signing time: Mon 02 Mar 2026 02:13:52 +0000
Manifest this update: Mon 02 Mar 2026 02:13:50 +0000
Manifest next update: Mon 09 Mar 2026 02:13:50 +0000
Files and hashes: 1: h7_uyP-fsmiAINtZpiLBOhXlryA.crl (hash: OuuOjjuoWAXo3pSYu+qhhSSawWnrNziPBTZbxE/e9rw=)
2: 28382F96644E11EEA1DCB653C4F9AE02.roa (hash: Hn/cKj3PeYZoLPGpaN1fINnhbucRAfAoTwU5JZOQO60=)
3: ADB02E5C5CB411F0BE8D2465C4F9AE02.roa (hash: 96qp6OlFvyt4AD3Ueh7h17elJXQzlKp/F00ZsiqHEMU=)
4: 81D3CB186B7D11F0A482004CC4F9AE02.roa (hash: WJIyz/cRqbc3/QMwliSVH70tDNBX6svUIefvj+Dz1lY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl
rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
Validity
Not Before: Mar 2 02:13:50 2026 GMT
Not After : Mar 9 02:13:50 2026 GMT
Subject: CN=69a4f260-fac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:f4:65:69:15:cb:1d:b1:94:81:e4:36:29:
3b:36:4c:6d:35:52:bf:86:6f:96:72:58:69:35:95:
1d:f4:00:7e:fd:e8:fd:33:25:a3:e7:30:c2:30:18:
75:b8:47:9c:41:6f:0d:19:74:a6:8d:9a:1f:5a:45:
ac:5f:31:8d:3c:e5:3f:da:0b:41:25:73:46:a6:fa:
2c:e5:48:42:59:98:77:d3:c3:4a:00:28:f8:30:c1:
f2:0a:03:6a:cd:89:c0:2f:50:41:bf:18:73:97:04:
50:20:cb:1f:dc:69:d8:5c:1b:98:81:1a:20:11:cc:
7e:23:5d:f7:a1:ac:c3:f7:0d:04:a8:e4:fd:c2:af:
76:ac:c3:de:63:0c:52:56:e3:f7:d6:a6:3a:f0:ea:
3d:33:54:79:9f:7c:b8:54:d5:44:71:0f:36:52:e4:
59:56:63:81:b0:4c:c6:ce:7c:25:75:bc:59:c5:39:
41:18:de:45:a7:ac:31:ed:e1:6f:60:6b:08:c5:d9:
1e:0a:df:a7:fb:d0:4b:15:b7:fe:ff:50:b4:8b:80:
cb:b2:14:06:dd:13:7b:be:1c:a4:7c:af:26:2b:ec:
6e:b6:65:cb:6d:a2:d6:d6:34:50:e7:91:96:53:c5:
db:3d:57:bf:2c:b0:c2:c2:11:c9:e3:0f:54:bf:23:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:67:DF:4A:E6:0E:C2:13:FE:FC:D8:1C:E7:C6:A0:D3:E8:88:4E
X509v3 Authority Key Identifier:
keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:f3:52:89:8a:e3:bd:81:79:4a:56:03:03:74:3b:ce:6f:80:
9c:fb:d1:81:fe:33:39:9b:4e:5a:89:f6:83:3c:59:89:fa:15:
b4:a5:da:d1:81:4c:05:d7:4f:b6:41:97:75:de:48:8c:3a:d6:
f4:d2:f0:0b:46:db:d0:78:a2:53:c0:58:6c:ef:10:3a:ff:c2:
96:10:c3:5f:4a:4b:62:7c:e1:39:5d:29:ce:d9:0d:a2:9d:de:
0a:ac:d6:95:d8:21:65:17:59:62:d5:b0:8d:e7:54:9a:c3:4d:
f4:95:80:72:ef:2e:cd:70:96:44:86:83:84:a5:41:d5:66:77:
7d:c2:43:10:52:05:8d:b2:20:81:6e:e0:d4:e6:15:97:4c:79:
f6:a7:6c:0c:36:50:70:43:f8:e0:65:da:3e:d6:05:00:a9:df:
2e:34:b1:81:1c:c1:1c:1c:46:6b:9c:7a:84:01:5e:f0:dd:d0:
14:c4:45:36:aa:c1:8d:fe:21:39:25:a3:17:b0:16:78:9c:55:
31:9b:39:c9:4c:53:8e:a4:56:3c:45:28:8f:5a:25:1f:27:99:
e3:b4:9f:cd:d3:26:3e:cd:33:cf:56:ce:25:59:3a:ff:6e:07:
de:f8:0d:c1:f1:32:34:da:1e:58:58:53:0e:88:08:b5:2a:17:
f8:41:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:12:45 2026 by rpki-client