
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier: B2sWAqnSaq3vt+gvU+t3T9OUaZfLzDfHzKmjt/nXGsw=
Subject key identifier: DB:73:EE:AD:40:58:08:8B:0B:7D:FD:32:3F:E2:9D:E5:F2:4D:B2:7D
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number: 0241
Signing time: Mon 13 Jul 2026 02:41:40 +0000
Manifest this update: Mon 13 Jul 2026 02:41:40 +0000
Manifest next update: Mon 20 Jul 2026 02:41:40 +0000
Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: L9d+LkwDYnG1HwntM6JgZly0O56lciFq9jYbw++oqh0=)
2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: qnvrSMl0yQyYkmnyhwN0g0h+sOgggPn26d38v0T1z/c=)
3: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: WH/ILcSrKq9+xG39/9dwHQTlGi9rnQp31CFmoa5QIUM=)
4: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: /zH5NCxaOe44lNiOZuL2x1qIFvtAXXk9k531YTZP3Dw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 02:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Validity
Not Before: Jul 13 02:41:40 2026 GMT
Not After : Jul 20 02:41:40 2026 GMT
Subject: CN=6a545064-bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:6a:07:71:bd:7f:7a:d7:08:cc:de:4f:1d:
83:2a:7c:56:49:41:40:e6:87:89:3f:da:73:c1:c3:
df:4e:d9:b5:fe:84:1a:1e:08:90:ba:84:a3:36:ee:
5f:4b:be:b9:4d:cf:7f:d8:00:99:18:b0:f5:de:3c:
b8:ef:be:30:99:f7:e5:a9:27:4c:34:e6:a5:77:14:
08:e5:8b:4b:43:ce:42:85:47:e6:ab:38:97:b8:96:
b3:c0:ad:c5:57:3c:62:66:45:2f:b9:eb:1b:a2:00:
b5:3c:96:80:cf:a0:e9:f5:50:62:cd:82:d8:77:20:
4d:33:09:f7:5a:36:be:9d:09:36:98:29:fb:b8:dc:
a2:d8:ed:05:91:34:36:e8:a7:19:0b:38:b4:f5:73:
e2:cd:92:e7:d9:22:5d:be:f5:e1:ec:64:16:91:55:
34:da:32:34:52:4c:39:c4:4e:4c:a9:fa:5f:c3:93:
69:1e:8b:d3:11:c6:b6:3a:fd:73:d1:c3:7e:8c:63:
b8:f9:4b:d8:f0:22:88:63:68:9b:7d:8e:a8:82:1d:
d6:f4:9e:b9:7b:dc:99:b8:dc:2e:31:13:c3:fe:d0:
0b:e4:9d:b4:ba:1f:a9:74:6d:73:91:97:89:f3:b9:
dc:0f:ad:d3:c2:f8:8d:d4:4b:44:f1:20:4d:5b:2c:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:EE:AD:40:58:08:8B:0B:7D:FD:32:3F:E2:9D:E5:F2:4D:B2:7D
X509v3 Authority Key Identifier:
keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f6:d6:c6:1e:ab:bc:f1:84:0a:76:68:12:46:8d:98:89:39:cd:
c0:d3:9e:98:67:0b:82:c2:7d:57:f3:b8:8d:6c:21:80:21:5a:
3d:b4:25:01:60:09:ed:2f:11:33:aa:e5:87:33:34:89:2d:2c:
f6:db:19:4d:7d:54:ab:75:a3:b8:d0:32:bb:9b:d4:4c:da:ba:
f7:3b:76:12:32:4c:4c:bf:ba:a1:de:b7:a3:a9:4c:d4:ba:e1:
66:e0:d1:3f:40:a0:e7:bd:de:75:1a:40:47:d5:2e:d7:ae:21:
26:22:85:68:72:5f:6e:ec:fa:c4:2a:a1:74:d8:99:ec:ea:aa:
e4:d0:77:6f:15:c1:7b:b8:07:85:3d:d2:70:c1:64:a5:f9:89:
dc:0e:53:9b:eb:81:ce:69:83:6e:f9:52:a4:f1:2b:fa:fc:da:
55:5b:fd:ca:26:f8:28:82:63:f4:50:c8:4e:de:5d:73:8a:f1:
fd:ca:04:7f:13:71:2e:5d:8a:ac:b2:c1:9b:0b:db:d0:c3:25:
17:e9:59:81:24:f4:71:b3:e1:e3:40:b3:53:a2:19:32:d7:c0:
fa:04:6c:e6:21:01:e3:25:5e:98:9b:cc:f8:98:a3:55:76:4f:
e0:cd:d4:29:50:89:a3:5e:90:5e:dd:88:69:50:38:98:94:ed:
be:f6:2b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 03:59:59 2026 by rpki-client