
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier: FEOukAHTWA1pTzLtn9C34oiExqenQfU03vgtYZog/d4=
Subject key identifier: 4A:89:40:A5:CA:D1:54:72:30:0E:1D:A7:97:90:B0:38:44:CA:4C:31
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number: 0258
Signing time: Mon 15 Jun 2026 02:19:31 +0000
Manifest this update: Mon 15 Jun 2026 02:19:30 +0000
Manifest next update: Mon 22 Jun 2026 02:19:30 +0000
Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: byiNzombOnxJEKBkpcQfAHtZM46ApnJ2Iu75bx58Zu4=)
2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Validity
Not Before: Jun 15 02:19:30 2026 GMT
Not After : Jun 22 02:19:30 2026 GMT
Subject: CN=6a2f6133-9841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:81:c6:bc:29:de:b0:e8:9c:96:1b:9f:98:
a1:55:11:9d:bc:0f:73:33:8f:89:94:21:56:f7:dd:
fc:94:5d:c4:f5:1d:b6:92:5b:ee:ed:84:b8:be:32:
3d:ac:c2:d4:93:7d:53:17:08:17:ff:82:93:19:4d:
f7:60:c4:6f:a7:9f:4a:a6:4b:06:db:55:24:1f:48:
8e:96:32:06:17:2d:7a:31:2d:2f:2e:fa:92:80:cd:
03:fd:5b:73:1b:b3:54:1a:fa:30:21:ff:67:42:d5:
43:f4:db:34:68:61:f3:78:e2:32:5e:03:ff:6e:2a:
01:e6:fc:c1:55:40:45:58:d2:be:f2:5e:cf:bd:c9:
0f:a8:80:82:53:19:44:6d:70:3e:65:7a:0d:4c:4a:
82:5c:9f:dc:80:a7:6a:89:46:67:e0:45:3a:bd:5a:
0b:d3:59:3a:7a:72:e4:71:0f:44:e0:5e:e3:69:7d:
5f:9d:8a:43:02:2d:3c:a7:8b:eb:78:8b:4e:82:2b:
dd:b6:82:75:38:9c:2c:32:e8:d1:40:6c:7f:90:85:
af:47:0b:ea:91:2e:01:57:5c:da:db:87:2c:ca:9c:
ff:1a:f6:94:08:a1:98:d5:3a:18:df:e9:46:27:b4:
04:fc:3e:5f:d0:a6:6f:9e:0a:26:43:ca:28:ef:42:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:89:40:A5:CA:D1:54:72:30:0E:1D:A7:97:90:B0:38:44:CA:4C:31
X509v3 Authority Key Identifier:
keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:7b:b1:06:02:03:24:77:81:db:aa:b3:0a:b7:af:91:af:b8:
18:f0:21:cc:87:51:2c:be:5a:dc:ae:c1:62:83:bf:1b:10:7d:
41:cd:b9:e1:8f:09:b0:93:d2:e3:38:1e:91:97:43:67:5d:f5:
1e:01:9f:d5:d0:76:e9:36:de:6d:c6:bb:84:b9:b7:09:9f:8c:
b5:14:e3:d8:81:c2:3a:f4:ac:59:2b:16:94:bb:2d:92:8b:23:
6c:c1:6f:7d:9f:fb:a6:8f:fc:ae:a7:11:18:3e:52:d0:ba:d5:
df:29:68:3d:bd:40:39:9a:3a:f9:2e:3a:7e:41:17:e5:ff:87:
ca:70:ba:40:5a:99:ad:74:ba:98:ae:70:bc:51:94:59:01:3b:
20:d0:a9:75:30:c1:bc:bb:93:68:9b:1a:8b:51:a3:ef:ee:84:
09:8d:ee:12:ad:09:e7:01:29:6a:22:00:76:5d:c1:02:86:8b:
12:13:18:18:f2:8c:59:09:9d:be:19:ed:b1:97:30:e1:9d:a7:
a5:61:66:47:69:0a:c5:90:9c:27:23:16:68:90:77:bb:04:fa:
21:bc:13:d7:d5:ff:77:0d:32:40:61:60:89:05:5d:ae:5f:d1:
40:6c:16:a7:3c:f1:96:a7:75:d4:cd:f1:08:ac:c2:db:4f:85:
78:6e:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 17:37:27 2026 by rpki-client