
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json)
Hash identifier: 4GUFEMLi2jm16AZk8Y+yaUtwdlEw4SeIDP+MAVBNiqM=
Subject key identifier: 51:3B:F1:DC:B6:6F:BB:68:DD:6F:E2:3E:76:BD:BB:85:67:B4:3F:7C
Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Certificate serial: 0AAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
Manifest number: 0AA3
Signing time: Mon 22 Jun 2026 19:31:03 +0000
Manifest this update: Mon 22 Jun 2026 19:31:02 +0000
Manifest next update: Mon 29 Jun 2026 19:31:02 +0000
Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: df7xsO9W7nimUjQoaEAMgmLloShvdUH7B3At1+elhUQ=)
2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: fTC3RP5UwYJo/xgaymTCOGYfDdh0ORjauT4dKfVe+3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2732 (0xaac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Validity
Not Before: Jun 22 19:31:02 2026 GMT
Not After : Jun 29 19:31:02 2026 GMT
Subject: CN=6a398d77-9140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:90:3e:4a:5e:82:f0:e7:f9:63:1a:9d:3d:
95:ca:5c:ef:58:d0:7d:34:2c:bd:df:9e:ab:4b:de:
d8:3d:19:29:d4:9d:ab:cf:6e:eb:10:bc:99:8f:a0:
53:f9:ba:a6:16:21:21:8b:76:50:fe:b2:7c:63:1a:
5a:ac:de:de:bc:6d:92:2b:78:59:93:35:4a:42:4f:
19:f2:53:1e:08:29:64:f9:a9:86:0b:2e:f1:fd:c6:
08:34:54:f5:38:1a:31:a1:49:49:0e:21:42:0a:12:
9a:0e:a6:b4:97:37:81:51:de:14:9d:7c:10:42:f2:
a8:75:16:9a:32:6d:24:3f:c9:5e:14:94:d9:81:ed:
9e:5d:2b:54:bc:05:c8:1d:fb:f4:e1:ab:c2:bf:da:
c4:60:d9:08:d6:67:8f:e4:0b:57:10:3c:99:6a:80:
58:b8:e7:3a:b8:c1:0d:d9:07:5d:90:8d:96:81:5d:
12:c7:4d:f9:6d:6c:bf:21:aa:ad:8f:c9:48:40:80:
f2:73:32:76:76:22:8a:6c:77:38:e6:ea:8f:d5:94:
e9:da:77:3f:a2:53:02:6d:90:ab:e2:32:eb:59:c8:
0e:38:72:4a:3f:f2:19:e8:b1:2f:47:71:67:a1:56:
6c:39:33:f0:61:25:6e:b5:5d:52:d6:b6:1d:df:61:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3B:F1:DC:B6:6F:BB:68:DD:6F:E2:3E:76:BD:BB:85:67:B4:3F:7C
X509v3 Authority Key Identifier:
keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:35:9a:14:97:b5:92:02:a7:f6:4c:53:ae:de:85:2a:66:3f:
b3:95:b1:fd:cf:4e:60:d9:48:0b:a7:0f:44:05:54:5d:76:b1:
6a:00:3c:68:73:b3:74:96:4f:c7:e5:73:aa:08:80:2e:92:62:
ba:98:ca:9a:1e:4a:53:fc:b5:64:e4:9a:06:bf:6a:7e:6a:c7:
ea:52:38:f9:6a:eb:f2:11:83:82:72:5a:dc:00:1c:50:90:cc:
42:14:82:7a:92:d9:6d:25:9b:42:dc:dd:84:6e:61:58:bd:82:
73:97:75:a9:5c:cf:96:82:ff:74:96:19:20:fe:69:ca:fc:fc:
57:77:af:c7:88:6a:06:fa:2f:d1:57:cf:90:dd:e2:0a:72:6f:
a0:a1:8c:0f:61:60:5d:68:96:e7:01:39:4e:89:7a:aa:4c:55:
6f:09:f7:66:95:d9:59:c0:2c:ee:49:c5:43:07:bc:29:8a:43:
7b:78:51:53:d4:e4:c8:e2:1b:a0:d7:fe:42:50:38:b4:26:da:
80:34:f3:18:d9:6a:17:54:71:2c:fd:c6:c4:0d:5f:fd:c7:c5:
54:d3:f5:00:59:81:30:54:3f:9f:71:a3:2d:d0:18:d5:69:b5:
c9:af:d4:8e:84:5e:96:54:66:9b:b9:82:b5:28:56:27:e3:35:
66:da:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:23:24 2026 by rpki-client