
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json)
Hash identifier: coiSGAmMvszajZBIYXJ9k63Q9FJTW9emdP+peALb2Uk=
Subject key identifier: 72:12:2D:24:E1:DA:AA:13:AD:D4:31:8A:5E:DE:F4:B2:E3:E1:F7:74
Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A
Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
Certificate serial: 0757
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
Manifest number: 0882
Signing time: Mon 20 Jul 2026 20:56:18 +0000
Manifest this update: Mon 20 Jul 2026 20:56:18 +0000
Manifest next update: Mon 27 Jul 2026 20:56:18 +0000
Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: rhWHcaB82O1BbUefyzBfFOn864QwhuxUxL9pumIsffc=)
2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: uPVVKDs8FXCGXCVQqQJZYdG3JPqyWcieyoiy4+qFczg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl
rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1879 (0x757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
Validity
Not Before: Jul 20 20:56:18 2026 GMT
Not After : Jul 27 20:56:18 2026 GMT
Subject: CN=6a5e8b72-4288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:f8:47:82:b0:79:8c:7c:e4:d9:e5:0c:34:
cf:9c:14:fe:18:17:aa:5b:2b:fd:bd:99:c0:a1:4d:
41:07:35:3f:38:d0:96:bc:c8:1f:6e:49:c5:e4:eb:
06:de:5c:d4:bf:b7:cf:2a:c0:c5:21:41:56:65:65:
63:9d:8c:9a:bc:81:0d:d6:ca:e5:d0:32:9a:c0:f3:
03:73:d8:a9:d6:c6:9d:44:fb:2c:ab:fd:ee:38:59:
e4:f6:82:71:8d:16:02:ae:45:74:63:17:71:5f:32:
3b:28:e4:cd:f5:9a:d0:d1:6e:71:4d:44:cf:85:6b:
12:a9:5a:94:26:8f:f9:e0:ce:fe:99:fb:57:3a:69:
74:0b:05:6c:d2:b2:31:5a:7f:03:61:f5:0f:01:7a:
b7:bc:14:1b:4d:0a:d2:b4:9a:a0:a3:8e:25:fb:5f:
04:94:68:c6:04:d1:ee:09:27:71:8c:36:d4:63:4a:
01:35:25:76:81:29:19:54:51:17:6d:6f:62:3a:58:
96:1f:c2:04:82:b2:94:aa:d6:bc:c4:dd:29:80:03:
86:16:47:15:82:26:d8:8a:64:ca:fe:7c:ba:ec:66:
68:71:20:4e:75:7b:76:34:b3:5e:a1:1d:b4:c2:37:
39:c2:5d:c8:19:91:e0:1d:01:bb:1f:ff:9b:40:5b:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:12:2D:24:E1:DA:AA:13:AD:D4:31:8A:5E:DE:F4:B2:E3:E1:F7:74
X509v3 Authority Key Identifier:
keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f2:c5:01:e7:2c:20:76:00:21:18:d8:a0:a2:f3:ac:f5:8d:
0d:06:a2:b5:f6:1b:af:e3:a5:cb:fc:34:49:c1:a0:80:6d:dd:
2f:0c:85:92:f2:58:b5:ca:50:53:1e:d7:39:1b:49:04:e6:7e:
16:12:dd:24:01:de:45:a5:0e:a1:30:3e:85:3a:cb:5a:3c:22:
2c:39:8e:78:ea:9c:b0:f8:29:53:d9:5c:70:b8:97:e1:d7:6a:
dd:d3:15:18:06:51:01:26:de:b0:70:29:fd:d3:e9:7d:61:22:
bc:93:54:0f:2b:d7:51:a9:9f:0c:3c:65:9f:ec:8b:eb:55:f2:
c5:a6:9b:1e:55:c7:b7:15:ee:1f:39:5a:0c:a6:fb:a8:5d:57:
78:7d:72:71:56:37:86:e9:ce:87:a1:78:44:ba:24:44:f4:f9:
fd:47:6f:97:2f:f7:b2:be:86:e7:63:9c:6c:12:34:00:63:22:
83:b7:3c:1d:28:27:52:93:ec:79:31:06:00:73:fb:32:8f:65:
c4:6f:2f:ab:d2:c9:fc:0c:84:4d:9d:1c:10:a8:b0:a8:7a:70:
36:5b:fc:e9:57:e8:39:26:94:97:f1:bb:28:b7:db:41:c8:65:
13:fa:b0:df:a5:22:b2:c3:9b:8d:ac:6c:2b:a7:36:6a:26:76:
1e:6b:c5:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF
NTIyMzdFOEEwHhcNMjYwNzIwMjA1NjE4WhcNMjYwNzI3MjA1NjE4WjAYMRYwFAYD
VQQDEw02YTVlOGI3Mi00Mjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAujH4R4KweYx85NnlDDTPnBT+GBeqWyv9vZnAoU1BBzU/ONCWvMgfbknF5OsG
3lzUv7fPKsDFIUFWZWVjnYyavIEN1srl0DKawPMDc9ip1sadRPssq/3uOFnk9oJx
jRYCrkV0YxdxXzI7KOTN9ZrQ0W5xTUTPhWsSqVqUJo/54M7+mftXOml0CwVs0rIx
Wn8DYfUPAXq3vBQbTQrStJqgo44l+18ElGjGBNHuCSdxjDbUY0oBNSV2gSkZVFEX
bW9iOliWH8IEgrKUqta8xN0pgAOGFkcVgibYimTK/ny67GZocSBOdXt2NLNeoR20
wjc5wl3IGZHgHQG7H/+bQFs9nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHISLSTh
2qoTrdQxil7e9LLj4fd0MB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4
NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx
NDFvaFd3NGhWRXJsSWpmb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe/LFAecsIHYAIRjYoKLzrPWNDQaitfYbr+Oly/w0ScGggG3dLwyFkvJYtcpQ
Ux7XORtJBOZ+FhLdJAHeRaUOoTA+hTrLWjwiLDmOeOqcsPgpU9lccLiX4ddq3dMV
GAZRASbesHAp/dPpfWEivJNUDyvXUamfDDxln+yL61XyxaabHlXHtxXuHzlaDKb7
qF1XeH1ycVY3hunOh6F4RLokRPT5/Udvly/3sr6G52OcbBI0AGMig7c8HSgnUpPs
eTEGAHP7Mo9lxG8vq9LJ/AyETZ0cEKiwqHpwNlv86VfoOSaUl/G7KLfbQchlE/qw
36UissObjaxsK6c2aiZ2HmvFjQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:33:46 2026 by rpki-client