
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier: MrcgyxIY5Oc/+ihFffjz7CqxCmmIwbCtNl4AJAAH65I=
Subject key identifier: 68:30:A8:86:F1:E6:08:54:90:23:A3:AB:6C:09:A4:59:C7:35:03:FF
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number: 026B
Signing time: Thu 23 Jul 2026 03:13:47 +0000
Manifest this update: Thu 23 Jul 2026 03:13:47 +0000
Manifest next update: Thu 30 Jul 2026 03:13:47 +0000
Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: F7Q5QPtLPjbAqeGZ7EG8CZzr1svJ6tmKR/+3mnguZx8=)
2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Validity
Not Before: Jul 23 03:13:47 2026 GMT
Not After : Jul 30 03:13:47 2026 GMT
Subject: CN=6a6186eb-d3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:56:f1:94:99:da:f7:6a:de:cc:d0:50:ee:
6d:23:9f:4b:cb:74:67:5e:ba:c4:14:8c:97:16:22:
03:13:4d:8e:77:4d:7d:68:1f:70:05:fd:89:93:cc:
b6:2f:97:90:59:24:1a:35:00:95:f2:f4:c4:db:1c:
af:48:04:14:ad:c9:db:71:0c:cd:95:38:ac:06:fb:
08:42:a4:6d:b4:65:eb:b9:e1:3f:61:70:3b:1f:6d:
3d:7c:71:c6:59:63:2a:1a:ab:89:5f:97:ff:3b:e9:
f6:68:19:1e:86:1c:de:80:b2:0c:49:aa:97:61:c6:
81:e4:53:75:07:1b:17:8a:88:6f:16:63:db:78:ed:
27:06:e3:b7:7a:31:ab:f3:67:54:b6:79:e4:f5:62:
e4:c3:16:92:89:3c:2b:9c:23:90:7f:a0:a4:11:a7:
68:32:ed:40:8f:d8:31:13:01:9a:b1:37:fa:48:bf:
f3:7f:be:be:74:1d:fb:b1:06:34:b7:f8:2d:cf:ea:
c6:5c:2f:ce:b7:3f:7c:13:53:48:10:62:bb:88:42:
a3:e0:c2:5d:00:f5:12:a1:e8:36:1f:61:34:4a:a6:
c9:59:45:9a:70:25:77:d5:af:e8:76:e7:79:62:17:
d7:0b:1f:dc:d1:59:e4:52:ca:99:75:27:69:95:52:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:30:A8:86:F1:E6:08:54:90:23:A3:AB:6C:09:A4:59:C7:35:03:FF
X509v3 Authority Key Identifier:
keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:b0:7b:52:19:72:93:79:94:fb:cb:88:6d:20:f0:6e:48:00:
07:0e:1b:18:ec:71:b8:0d:72:c4:c5:eb:5d:ea:f1:2e:65:4e:
ac:19:df:af:af:af:0a:7f:c4:9b:f9:48:7f:39:cb:8f:2e:b0:
22:7f:97:29:46:7a:0f:ce:7d:5c:9a:3c:5d:29:d8:7e:85:4c:
76:c2:77:f6:a5:97:bc:91:98:e2:cb:f9:70:9f:e0:5c:3e:90:
2b:4a:4d:1f:b7:8f:45:f1:1b:53:36:24:17:31:40:d4:e6:c9:
09:08:4e:d4:40:e9:b2:db:e5:95:a7:ba:64:2e:0e:89:96:58:
65:34:24:40:a7:74:68:6c:00:42:6f:37:5c:cb:5a:20:cb:4d:
d9:17:1c:0f:01:b7:ee:95:15:81:5e:d6:d6:23:ce:0c:7b:a8:
21:dc:50:50:73:21:01:8e:e9:8b:c6:8a:14:97:36:0b:a3:ad:
db:b0:ed:4d:42:57:21:f6:51:a1:3f:a3:8b:e0:1e:8f:45:b2:
60:a5:cd:91:71:fd:67:b3:89:00:38:42:b8:00:81:43:02:e6:
f4:9f:19:1c:08:57:c0:ad:32:99:5d:c7:96:55:89:c7:48:76:
f4:2c:27:76:d1:90:a7:47:9e:21:03:86:ab:a7:36:0b:02:f3:
11:9b:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:04 2026 by rpki-client