
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json)
Hash identifier: 2IakTz3BpEHD3H9hIuKx1cSlfI3EBTETZv0KTeUuisA=
Subject key identifier: 49:59:F3:73:DA:FD:07:27:F1:DC:89:C8:3C:1D:E8:98:6B:8D:40:80
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial: 01E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
Manifest number: 01C6
Signing time: Fri 17 Jul 2026 05:31:20 +0000
Manifest this update: Fri 17 Jul 2026 05:31:20 +0000
Manifest next update: Fri 24 Jul 2026 05:31:20 +0000
Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: MbTwsp7Bvq59iMmI70zaI59taSciGDDLpd3yYqhioXA=)
2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 7eQsc3jFfyJA5G5xsvQGlnjUsJ7FXLyXJQcnFpGfOuU=)
3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Y5OchRYZWCfXmYyEmnL2P8kc7yv28yWNLEvFTKE+MGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Validity
Not Before: Jul 17 05:31:20 2026 GMT
Not After : Jul 24 05:31:20 2026 GMT
Subject: CN=6a59be28-41ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:2f:2c:8a:e1:86:57:fb:4b:73:13:df:55:
7b:b7:24:76:57:61:c1:66:0b:69:8e:62:a4:30:89:
69:a9:b0:0c:31:07:f0:0f:5d:8d:36:35:97:36:96:
e0:15:0e:08:7e:07:4e:8f:46:39:d1:b8:b5:5e:15:
83:b9:18:8c:88:cc:42:ae:ac:02:44:de:e8:96:5d:
0e:82:1b:df:9e:af:a4:c4:6d:29:f1:1b:03:ed:f4:
bd:42:91:f5:a1:bb:3e:e1:38:36:2b:2d:22:ae:ff:
2b:11:7a:18:06:51:10:54:14:39:63:88:f0:42:bf:
04:cb:73:9d:5e:d4:90:49:38:8a:ee:ef:cb:88:a2:
11:8b:d9:2d:a9:55:ff:6f:1f:d7:56:5e:ce:91:66:
a7:ec:25:66:8e:0a:2a:85:f4:ce:ad:80:74:67:fc:
46:49:15:28:65:19:9d:c2:e3:28:31:b3:43:6b:2e:
da:6c:9b:3c:a0:44:86:df:d3:45:dd:eb:c1:cc:8c:
8e:2e:cd:12:a6:2b:e3:6b:f7:9e:54:e0:e9:fb:75:
6f:18:d0:4e:7a:54:db:f5:18:72:c3:a3:04:c4:af:
66:92:e2:1e:57:4b:13:d0:09:ee:86:d8:80:0f:dc:
45:61:1a:2e:a0:2e:a2:ce:0f:9f:c6:61:26:0e:72:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:59:F3:73:DA:FD:07:27:F1:DC:89:C8:3C:1D:E8:98:6B:8D:40:80
X509v3 Authority Key Identifier:
keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:72:3e:be:c2:4e:b3:ee:6e:d1:01:fe:d3:a0:e1:47:9c:c5:
c0:ab:38:61:ba:b5:42:fb:d3:85:b0:38:93:1c:d8:0c:15:f9:
b7:48:32:a5:3d:c6:b2:e3:59:ff:46:8a:8b:b2:7f:1a:b7:ec:
11:f8:b3:70:3e:7d:ef:f5:cf:94:0e:c0:71:1d:a3:e4:ba:66:
fd:89:2c:b3:36:bd:6a:04:ca:88:9c:12:66:4e:4a:32:7d:98:
d6:0d:0a:72:c2:61:51:df:cb:77:88:48:83:83:56:39:0a:ca:
13:c0:36:32:b5:77:af:92:d9:eb:a1:68:b3:68:22:a6:5f:93:
56:7b:64:97:70:ef:14:f1:42:09:8d:79:80:12:79:01:6c:a6:
13:60:20:43:ac:1a:f7:35:99:b7:01:b9:5d:90:11:c5:e3:2b:
95:d0:c5:63:eb:b1:f8:fc:08:69:95:61:a9:5c:c2:27:a2:e4:
87:5e:73:b6:5e:4d:8c:78:e4:5a:66:89:a8:c7:0e:89:14:98:
01:af:16:df:07:bd:c0:03:df:6e:3f:01:4a:b6:b7:60:7b:f9:
fe:c9:1f:89:d3:4b:45:54:49:df:6b:b8:90:38:b9:58:0c:a8:
97:9d:77:87:82:a6:a9:5c:f1:e3:83:3c:75:6b:f2:f2:53:87:
a3:0a:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:00:19 2026 by rpki-client