
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier: Y4EX8FpWdGOFNLTdsYkdkOrO+r8h2po+En8mQKLJb6U=
Subject key identifier: 5A:EB:58:17:81:62:1F:B9:A1:9F:29:D0:F4:F7:AA:AB:76:86:5D:C0
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial: 068F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number: 067D
Signing time: Sun 31 May 2026 23:14:57 +0000
Manifest this update: Sun 31 May 2026 23:14:57 +0000
Manifest next update: Sun 07 Jun 2026 23:14:57 +0000
Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: 1Se6Rryn8/B325rM5Vc2/XMwxyFYezhFWd2EsuYRtio=)
2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: 6cK1WB9mwOOoOwp+cGbSDlz8j71ro5RXPTbIMXDPpjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
Validity
Not Before: May 31 23:14:57 2026 GMT
Not After : Jun 7 23:14:57 2026 GMT
Subject: CN=6a1cc0f1-407a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:13:e0:24:d5:56:4b:86:a8:84:4d:66:89:
3a:29:35:c0:dc:93:0b:4c:2f:52:45:6e:09:b3:67:
9f:94:33:cb:f3:7f:27:49:9e:61:55:be:cd:fa:bf:
fa:0a:16:67:e0:8d:a3:85:12:bb:2f:cd:34:bf:c0:
08:11:a3:36:1e:97:fc:61:70:6a:c3:32:d1:08:14:
0c:39:68:3c:a8:f4:5a:51:20:b9:00:db:f5:66:08:
aa:23:1b:cc:30:42:41:0e:56:72:ed:6a:fc:f7:34:
55:18:95:44:d2:de:e9:a0:58:29:46:32:4d:07:bd:
84:9c:c3:65:70:52:b1:12:04:01:47:c0:7c:ec:2b:
5b:46:74:05:a4:94:6f:fe:16:22:5c:a8:52:d7:9f:
c6:78:e3:71:a1:07:60:38:d2:15:6c:98:43:c8:7e:
8f:b3:13:64:6a:53:e8:98:3d:b0:b8:26:06:5b:cf:
77:76:00:b1:dc:f5:eb:70:65:5a:27:8d:ff:4e:e8:
0a:86:c6:71:89:16:92:02:f7:f2:3a:fc:d9:9b:02:
fe:f3:cb:16:b7:44:f7:2f:fe:bb:e8:d3:5f:24:82:
b3:45:c7:bc:38:2d:c4:01:b1:a2:21:cd:54:45:4c:
21:00:b2:cd:23:9a:f3:ef:f2:0c:00:ce:7b:c4:9c:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EB:58:17:81:62:1F:B9:A1:9F:29:D0:F4:F7:AA:AB:76:86:5D:C0
X509v3 Authority Key Identifier:
keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:ee:8e:b3:c2:17:68:aa:62:3f:9b:b0:6b:6e:73:67:3a:
ca:56:c8:69:27:9c:99:77:66:a2:25:80:2c:98:ca:64:a2:3d:
ef:9b:10:91:78:0c:d6:79:1d:14:83:47:44:d6:3b:b5:e5:63:
70:5a:09:b3:9c:84:c6:0c:87:09:94:8c:db:79:5c:0d:18:5a:
d5:b2:6e:48:04:cc:86:14:d7:32:c7:71:39:73:ad:d7:8f:1b:
87:a4:78:4a:56:5c:02:07:bb:eb:2d:68:2b:13:d6:8d:33:9c:
0f:d0:88:70:01:b9:e3:6f:61:5c:f2:b5:97:43:b5:2b:78:94:
67:e7:f3:02:14:1c:82:9f:6d:64:58:70:f1:9d:14:7c:39:a0:
f8:ee:3b:96:80:0b:53:60:a8:34:7f:81:7d:33:df:6d:08:81:
fe:31:aa:c4:5f:00:90:e6:99:8f:7a:bb:c5:8a:16:21:1e:24:
57:30:de:39:0f:e7:54:42:d8:a9:bb:1b:09:b4:b6:76:60:d9:
19:ed:46:94:9e:8c:98:b7:53:a0:dd:d7:fc:14:45:78:e4:94:
2f:fc:6f:8c:bf:98:8c:d7:cd:c2:a5:31:ac:80:91:c7:ac:cd:
6a:78:78:9b:a1:0f:0f:af:0b:45:c4:1d:f4:4d:f4:cd:ae:a6:
73:42:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:52 2026 by rpki-client