
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier: 6NCDpMn2w91sr1tOXBxtRaoEFMH5eCnLI9WQex+HTxI=
Subject key identifier: 48:A6:7B:D7:B5:43:C7:F6:1D:70:B3:CA:6E:3A:95:13:A9:37:64:61
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number: 0279
Signing time: Wed 19 Aug 2026 02:29:35 +0000
Manifest this update: Wed 19 Aug 2026 02:29:34 +0000
Manifest next update: Wed 26 Aug 2026 02:29:34 +0000
Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: Q+G8M3kFnaepgZFWY2rOKUyuZvp4Xza+Vtu4OiCzpR8=)
2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Validity
Not Before: Aug 19 02:29:34 2026 GMT
Not After : Aug 26 02:29:34 2026 GMT
Subject: CN=6a85150f-4f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:19:cb:42:3d:6e:69:47:70:63:89:f1:51:
32:97:a6:3c:7b:23:da:24:79:80:8c:81:7a:7f:ba:
62:29:18:eb:c1:0e:3d:8b:32:d0:e7:f6:cc:6f:60:
16:67:69:a7:3a:87:ba:32:c0:8d:90:9b:62:1c:19:
ab:cb:dd:b6:06:12:37:65:07:79:54:b1:4c:b3:8d:
18:ce:84:eb:93:8e:0e:9a:72:53:9e:2f:19:04:8e:
e7:33:86:e9:d5:cf:08:29:8c:66:9e:e7:8a:62:b6:
08:31:09:17:06:72:63:6d:2e:62:83:3a:4d:12:de:
df:17:14:68:21:39:4b:54:c7:e3:36:cb:68:94:0b:
34:6f:18:2d:fa:a7:01:d7:9c:81:72:f6:42:52:2e:
c4:4e:78:05:5a:4a:6b:b5:e0:26:6b:7e:78:ff:ac:
fc:90:d0:79:c1:f3:c0:da:b7:20:71:cf:d7:ff:38:
4f:20:29:e7:e9:7f:6c:87:d6:64:bc:e2:71:ce:cb:
0e:d2:e0:70:c7:20:95:a0:c5:e2:ef:4b:50:f9:cc:
77:3e:43:c5:51:bb:53:f1:6b:15:09:61:4e:3c:28:
6a:c7:21:d3:00:59:56:21:db:13:cb:78:4e:7e:a7:
f2:e5:2f:c3:b1:84:47:8d:17:55:66:4b:13:ad:15:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A6:7B:D7:B5:43:C7:F6:1D:70:B3:CA:6E:3A:95:13:A9:37:64:61
X509v3 Authority Key Identifier:
keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:cb:f6:3e:88:b4:12:95:ce:2a:ad:b9:85:d2:2e:84:4c:7a:
f8:2b:6f:8c:b1:10:c4:73:fd:a0:b7:9a:2c:69:59:ed:42:86:
df:41:75:ec:c6:25:ae:71:34:0e:47:07:35:66:e4:a9:29:15:
7e:ab:c5:dc:22:fe:bd:01:61:34:ac:d4:5b:79:9e:00:ed:ba:
95:e8:df:3e:6b:a3:81:e6:66:cd:1c:24:3b:67:63:33:b2:a2:
92:fc:b1:33:70:31:50:fa:f0:be:f2:43:2a:8b:1f:99:eb:09:
8b:f0:2d:66:03:54:8c:56:fb:f3:b5:66:5b:c7:42:13:1b:e5:
60:61:dc:32:51:35:7e:42:93:2b:06:71:0a:a3:d6:94:5f:47:
76:ae:3a:37:80:45:12:fc:7b:52:bc:05:17:5c:30:51:54:e1:
06:01:c2:90:e5:0a:69:91:b1:32:c6:8a:72:13:5a:a3:ae:9b:
1e:92:48:ad:e5:4d:02:b1:da:af:08:fc:13:91:f1:46:c2:14:
47:1d:9d:61:bd:e5:3b:c1:3e:56:2a:7d:f5:2f:26:a8:06:8a:
23:7e:10:32:60:c3:06:07:13:67:64:21:30:c4:de:9b:c6:b9:
66:c0:dd:f3:1b:70:f4:94:e6:d6:f8:a3:16:4b:c5:b2:fe:f9:
d3:fb:4c:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5
M0FDNjkzNjgwHhcNMjYwODE5MDIyOTM0WhcNMjYwODI2MDIyOTM0WjAYMRYwFAYD
VQQDEw02YTg1MTUwZi00Zjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoSIZy0I9bmlHcGOJ8VEyl6Y8eyPaJHmAjIF6f7piKRjrwQ49izLQ5/bMb2AW
Z2mnOoe6MsCNkJtiHBmry922BhI3ZQd5VLFMs40YzoTrk44OmnJTni8ZBI7nM4bp
1c8IKYxmnueKYrYIMQkXBnJjbS5igzpNEt7fFxRoITlLVMfjNstolAs0bxgt+qcB
15yBcvZCUi7ETngFWkprteAma354/6z8kNB5wfPA2rcgcc/X/zhPICnn6X9sh9Zk
vOJxzssO0uBwxyCVoMXi70tQ+cx3PkPFUbtT8WsVCWFOPChqxyHTAFlWIdsTy3hO
fqfy5S/DsYRHjRdVZksTrRXT9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEime9e1
Q8f2HXCzym46lROpN2RhMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx
QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1
ZmpjZzdGU3N2MWlUckdrMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAccv2Poi0EpXOKq25hdIuhEx6+CtvjLEQxHP9oLeaLGlZ7UKG30F17MYlrnE0
DkcHNWbkqSkVfqvF3CL+vQFhNKzUW3meAO26lejfPmujgeZmzRwkO2djM7Kikvyx
M3AxUPrwvvJDKosfmesJi/AtZgNUjFb787VmW8dCExvlYGHcMlE1fkKTKwZxCqPW
lF9Hdq46N4BFEvx7UrwFF1wwUVThBgHCkOUKaZGxMsaKchNao66bHpJIreVNArHa
rwj8E5HxRsIURx2dYb3lO8E+Vip99S8mqAaKI34QMmDDBgcTZ2QhMMTem8a5ZsDd
8xtw9JTm1vijFkvFsv750/tMvg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:21 2026 by rpki-client