
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier: n1KrUJIs8dvao14TDS38j68Ju9Zm0jY+oNbsTW9MwtY=
Subject key identifier: 73:16:7E:10:AD:D5:8D:32:79:58:63:51:CF:25:D6:8E:18:7B:1D:1C
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number: 0247
Signing time: Mon 11 May 2026 02:26:11 +0000
Manifest this update: Mon 11 May 2026 02:26:10 +0000
Manifest next update: Mon 18 May 2026 02:26:10 +0000
Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: icD5iBBM/jlVcNDKqz1mOoJnPWFijpHGqp6YdNiDv08=)
2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Validity
Not Before: May 11 02:26:10 2026 GMT
Not After : May 18 02:26:10 2026 GMT
Subject: CN=6a013e43-3516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:58:3a:47:19:84:a0:40:58:a6:cc:9c:05:
ac:37:31:b9:89:63:45:d8:ee:8b:f9:17:e9:2d:f2:
1d:cf:7d:ce:cd:38:b7:76:a7:53:66:80:0c:4c:ec:
ce:a9:24:c2:21:29:6b:fe:09:39:77:c2:39:3b:09:
29:57:45:0b:3c:d5:8c:68:60:0d:49:6c:2c:2f:c4:
85:4c:65:b8:e0:c7:95:c4:b6:c4:c0:66:16:9a:8b:
9b:69:a1:64:8b:7a:85:ca:64:43:49:23:95:94:a9:
78:5a:fa:b3:68:12:a8:70:e2:3f:f0:1c:33:7b:55:
36:17:91:5b:58:3e:ac:a3:56:ec:c2:63:8e:cc:d1:
2a:99:af:09:16:ba:69:5e:ea:70:4a:64:b5:71:64:
81:61:88:b0:d0:48:1c:61:23:b5:04:45:6a:80:d9:
aa:20:4c:db:b9:92:65:47:2c:dc:05:e5:6f:a7:fb:
a4:18:fd:98:1b:79:68:96:43:1a:0a:51:13:18:21:
3c:41:bf:af:82:df:7d:1d:21:13:7a:8c:92:d9:b3:
a8:84:96:8e:ab:18:2f:d9:86:b2:99:8f:a2:33:b0:
b1:ae:d7:2f:c0:cb:18:7a:c6:db:10:b5:36:0a:47:
17:dc:e5:64:59:f0:20:c2:15:0a:65:1e:56:88:08:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:16:7E:10:AD:D5:8D:32:79:58:63:51:CF:25:D6:8E:18:7B:1D:1C
X509v3 Authority Key Identifier:
keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:af:f8:e3:a8:98:0d:ac:03:9c:77:bc:85:0c:9c:e2:87:b0:
ea:f6:38:c1:e9:09:ff:6a:01:1d:0d:46:37:8e:98:bf:44:17:
3a:70:2f:63:90:4b:09:28:a5:0f:f5:2f:2b:39:01:9f:03:25:
e2:4b:a9:f1:2e:34:70:67:61:5d:46:1b:22:3a:b4:6f:98:90:
64:63:b7:2c:09:84:14:20:de:76:45:7e:37:3b:1e:c1:6b:0d:
04:cb:f0:44:3e:d2:0a:50:fc:14:43:32:bf:d7:6a:56:fa:87:
c4:cc:02:bb:ed:7f:7d:6f:c4:02:34:d5:b5:4b:ff:c6:30:01:
a5:9b:1b:3d:6c:d3:23:cc:b1:7a:76:d1:55:76:5e:ee:22:42:
17:62:a5:63:8a:56:1a:36:b3:90:05:84:5a:29:df:5f:ae:7d:
4c:c6:d6:80:2d:64:a2:e3:0b:1d:64:88:b2:d2:5c:79:32:dc:
0d:e3:74:ab:d0:df:cb:7e:d9:d2:63:55:a1:4c:08:8a:57:75:
ee:41:b4:70:4a:be:9c:6b:f9:3c:35:f9:4d:bc:da:1f:68:69:
1c:ea:15:41:a3:36:20:5e:fb:99:cb:70:7f:bd:29:fb:3d:b2:
6a:fb:92:ec:16:e7:85:00:d0:3f:e3:47:76:af:ed:d7:fd:dc:
82:6c:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:51 2026 by rpki-client