
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier: 0906vUWYJVELZKJaoOzrWnanqzjyeiCrCfIG3LUblMA=
Subject key identifier: 81:98:60:7F:6D:63:A0:71:B4:4F:FC:D4:9C:48:7C:A0:94:37:9A:B3
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial: 0678
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number: 0666
Signing time: Thu 16 Apr 2026 22:34:48 +0000
Manifest this update: Thu 16 Apr 2026 22:34:47 +0000
Manifest next update: Thu 23 Apr 2026 22:34:47 +0000
Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: IJVwxLQqMm+MFxBlRu//9aApqgy2453j76xqonOwY6Q=)
2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: 6cK1WB9mwOOoOwp+cGbSDlz8j71ro5RXPTbIMXDPpjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1656 (0x678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
Validity
Not Before: Apr 16 22:34:47 2026 GMT
Not After : Apr 23 22:34:47 2026 GMT
Subject: CN=69e16408-af3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:79:5a:6d:d6:4e:b5:b5:4a:22:79:c0:19:
45:dd:47:fc:26:4f:de:ba:5d:04:39:f0:5f:d4:f0:
07:22:db:f3:01:a1:27:8e:31:e8:2d:c4:3c:88:3b:
56:f9:28:78:73:64:48:c8:bd:b0:08:18:de:ac:54:
64:c2:6b:f8:27:d1:e7:d2:97:3e:02:53:a7:37:32:
7a:88:f0:00:0d:39:82:a5:dd:b3:b3:f1:7d:82:9e:
80:85:11:fe:dc:24:13:1c:97:0a:59:8a:40:04:f8:
e0:8a:38:cf:a1:e4:82:75:20:1b:d7:dc:5c:4f:f9:
26:83:46:6a:2c:44:d0:3a:3b:2b:06:d8:9e:dd:ba:
b4:4c:fd:de:8b:02:89:68:1f:5f:05:77:84:30:b6:
22:37:5b:9e:39:db:ff:0e:c5:0d:02:e9:28:5e:05:
4b:5c:ac:30:75:05:e6:75:67:8c:3c:71:c1:4b:29:
95:04:5b:94:b9:71:c1:52:67:64:e7:8d:42:06:a1:
d7:66:0b:09:c9:53:59:13:bc:bc:b9:21:2b:ef:c5:
99:64:4a:2c:a8:42:06:de:8a:6b:6a:c9:08:72:05:
bf:2a:f7:d0:74:68:f8:62:26:eb:75:aa:ba:fb:af:
90:4d:03:6e:ba:0c:cc:66:73:c0:74:b9:54:28:a5:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:60:7F:6D:63:A0:71:B4:4F:FC:D4:9C:48:7C:A0:94:37:9A:B3
X509v3 Authority Key Identifier:
keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:06:10:33:fb:2e:ab:89:90:b0:bd:7f:0a:80:6d:2d:78:f4:
ab:49:5e:84:6d:e9:e6:89:20:bc:00:2c:c1:b8:0b:cc:db:68:
1b:6b:19:a1:47:4b:13:68:58:7b:6e:81:7a:0d:28:0d:19:ba:
a2:c8:9b:ea:97:e4:c9:0c:2d:bb:e6:de:d8:33:d5:4f:3b:2e:
89:e8:42:65:c7:7c:90:3a:ab:20:5b:eb:6d:dd:40:bc:9c:00:
9c:a1:2e:31:4d:34:44:91:2d:65:43:25:9a:6d:3a:63:62:30:
79:b0:f7:b2:d3:8c:9d:b9:35:7d:52:6e:22:f5:61:98:2c:2e:
4e:f7:40:f3:57:6f:93:2d:ad:dc:1f:05:e2:c8:0f:48:f8:7e:
bf:20:2d:70:2b:7d:e6:fb:63:a7:55:b3:83:08:12:9c:2f:8a:
b7:f6:20:a9:bf:16:a8:ab:38:55:62:c7:a3:1e:46:ea:42:27:
9b:e7:5c:19:b8:c9:73:79:37:6f:8d:a8:57:50:80:4f:f2:cf:
a2:44:fa:da:05:58:6d:00:ec:9a:65:12:1b:cf:2d:a0:99:6c:
66:95:61:cf:f9:ca:c1:70:a0:89:b1:ec:83:0e:39:80:7a:23:
2a:cc:d8:0e:f8:e2:f4:0a:a9:5a:38:04:70:e8:6d:64:ec:2c:
10:93:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:52 2026 by rpki-client