
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier: jlwjZbdGjoUG3JbL8IGbYwnrbaaqvA0YmjDrhViuB9Y=
Subject key identifier: D8:CE:93:11:73:74:6F:6E:0F:80:B6:84:A4:7C:13:DD:EF:D6:9F:31
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number: 0118
Signing time: Thu 21 May 2026 05:59:59 +0000
Manifest this update: Thu 21 May 2026 05:59:59 +0000
Manifest next update: Thu 28 May 2026 05:59:59 +0000
Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: 6gTwPD+j+DuDu2tTVhrYw96w/Rj5sPOhmMSPawRkEOc=)
2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 1MNrxKgQIdnkp7DGKWCKsge4/v205nBecHy5tmcmZDU=)
3: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: WDWRrI/KRtPcAbR2bWOuMpgztLrYoQZ12yzCIYDgRAs=)
4: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: hENFINj2b9wOIFxjK3nr2DrkTGbz4MTQ9pqxVPQHBxY=)
5: C41B6A98396E11F1992DA1BA96833773.roa (hash: BPXuBuSemYn/E+9Uo6D+b9G7/Ig6Oc1u1YHeb89/AEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Validity
Not Before: May 21 05:59:59 2026 GMT
Not After : May 28 05:59:59 2026 GMT
Subject: CN=6a0e9f5f-f78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:cb:fb:bd:4c:32:26:62:22:e3:93:9c:45:
29:e3:99:a3:f6:d0:d8:c9:ea:f6:37:47:8f:17:28:
82:0a:f6:a0:74:f6:ea:ad:3e:29:00:19:a6:d0:f2:
8b:43:60:22:d6:e6:5b:78:6c:c6:a3:92:45:4e:f3:
84:ef:3b:ee:d1:61:ca:5e:87:ea:f7:c9:0a:eb:e7:
bf:88:df:cb:62:5a:d3:3d:4a:9c:b4:08:4e:0e:8d:
48:fa:6a:7f:1a:05:b4:0f:af:ae:e1:f9:4b:84:a4:
b4:69:44:ee:a3:28:ba:25:b9:54:9d:64:50:dc:4d:
ea:f8:13:fa:b8:99:ff:5b:ce:3f:86:94:62:95:0a:
72:7e:30:b4:cd:b4:56:d3:33:23:dd:54:43:fa:f1:
07:de:87:38:b3:b7:f9:3b:a9:df:3b:13:4d:11:95:
dc:58:14:a5:5a:cc:ae:3b:0d:65:09:9f:e7:a2:74:
cd:5b:ba:32:0d:04:3f:e3:68:53:c5:b0:70:8d:54:
57:48:64:c9:85:42:63:31:71:bf:b7:27:fb:e9:09:
6c:a6:b1:7c:0e:e3:24:8c:6d:9e:dd:73:2e:b3:f6:
21:8c:4f:4a:f2:9d:7b:20:75:ae:12:d1:53:c0:53:
82:93:a4:f9:e5:9a:6d:18:72:96:01:c3:98:d4:76:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:93:11:73:74:6F:6E:0F:80:B6:84:A4:7C:13:DD:EF:D6:9F:31
X509v3 Authority Key Identifier:
keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:a9:8f:e4:49:18:5d:64:c7:2c:9f:eb:e3:9d:ad:13:5f:3b:
d8:32:0b:a3:8e:f5:34:f9:23:77:03:bc:6c:02:34:93:60:21:
44:8d:ef:32:a2:6a:f0:37:ec:67:dd:9c:c6:45:1e:6c:2b:03:
2b:1c:a8:bb:32:b9:2a:21:55:01:34:e4:a9:49:01:20:d5:0c:
50:f5:49:d7:72:c6:b0:7e:9d:ec:0b:19:9f:cb:89:36:ca:81:
07:a0:bd:e4:47:9a:18:17:44:c1:03:44:db:22:05:d2:ca:f2:
ff:79:63:f2:c0:98:c4:02:2d:d8:fd:35:f5:2f:d2:7c:fc:bc:
5a:2c:11:84:1b:ae:53:41:a4:65:4a:1a:91:81:60:3c:ef:b4:
fe:99:f3:95:54:ca:10:42:ab:b2:81:b5:80:59:67:5a:f6:68:
9b:26:98:37:c9:52:54:b0:a9:b0:65:79:78:10:99:43:3f:56:
70:27:15:72:32:b7:39:47:8c:15:49:f1:3e:f7:9d:b8:22:bb:
34:5b:28:3f:82:77:d0:64:71:68:f2:ab:b7:91:f1:2d:8e:d2:
46:d4:9d:35:a6:63:ef:94:b1:e4:90:2b:77:7b:7a:32:9a:47:
45:67:0d:1f:6b:93:57:60:25:91:a4:7d:73:9d:97:e9:40:05:
29:51:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:39:34 2026 by rpki-client