
$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File: u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier: pjXHAtaPQBf/743F1WuNCoLUywJh7JGjzRL8neQe78I=
Subject key identifier: 8B:97:02:12:92:4E:E8:E1:07:02:5B:98:44:D9:57:8D:DB:5D:FF:CC
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer: /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial: 02B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number: 02A1
Signing time: Wed 13 May 2026 01:40:34 +0000
Manifest this update: Wed 13 May 2026 01:40:34 +0000
Manifest next update: Wed 20 May 2026 01:40:34 +0000
Files and hashes: 1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: y5hXN8XhtpAn6pUDfYixo2Pz5gdG9FUtnR1fk6ESrPc=)
2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: 9SKQpptnj/JfGFLLT1UzGMBhecqFZTQ9eSGwwb/vYF8=)
3: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: b9DVs3sKMRxCpx6qLE96QA7SsPL0b1qBye22Pru51gY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Validity
Not Before: May 13 01:40:34 2026 GMT
Not After : May 20 01:40:34 2026 GMT
Subject: CN=6a03d692-e87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:4d:63:49:ab:63:99:fb:9b:c7:38:c8:7e:
25:2a:32:bf:51:17:29:c5:3d:f1:81:e6:1d:c3:d1:
63:e0:72:54:5f:e9:05:8a:c8:70:02:87:23:98:5f:
44:fa:69:67:d4:af:5c:1f:bf:d6:82:d7:d5:c1:28:
ec:8c:df:8c:46:80:c8:56:a6:18:8f:71:12:60:56:
6f:ef:d6:fe:d4:51:6e:ff:ef:01:4c:1f:2a:67:b8:
a3:ad:f4:96:62:87:41:76:00:a4:8a:26:e0:b7:11:
50:9e:b5:e5:aa:20:48:90:4f:d4:15:cc:88:5c:2f:
35:98:bf:d0:3b:23:6c:14:1b:e0:57:82:86:85:0c:
2e:c4:ef:35:9e:c2:b2:0b:ef:59:4d:55:3d:3d:f6:
a0:23:48:0e:f6:cb:11:13:dd:a2:8e:2c:e2:90:2f:
98:39:74:6f:4f:3e:b7:5e:a8:ff:bf:0e:5c:3b:d8:
30:19:1c:d6:2f:1f:1c:38:d9:a8:d4:3a:32:9e:8d:
58:1e:f2:26:26:6d:5a:63:50:05:d7:d1:2a:3f:5c:
e5:04:a4:e9:35:80:a2:46:bf:f1:5a:96:53:4f:bc:
a3:81:80:1a:d4:f7:48:78:a9:15:15:37:eb:6b:f4:
8e:e5:50:6e:d2:ad:00:c1:07:92:ff:9d:2b:6a:5e:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:97:02:12:92:4E:E8:E1:07:02:5B:98:44:D9:57:8D:DB:5D:FF:CC
X509v3 Authority Key Identifier:
keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b5:b0:8b:e2:f6:98:1c:f0:bb:21:ba:1a:86:73:43:df:99:
e3:59:cf:c5:95:ce:c0:08:0d:53:90:d0:3e:53:a4:f7:99:bd:
d2:a2:d5:99:cf:5e:e5:ac:81:ea:96:cc:b4:5b:85:2a:0c:1f:
de:eb:c5:73:37:91:55:89:ba:69:f2:54:af:ba:02:ba:75:44:
81:f1:65:9b:4f:f7:8e:6b:af:a6:8e:5d:4d:5b:6f:e1:f5:fd:
36:d0:69:d1:19:96:bd:ed:bb:a7:36:0f:e1:82:46:2d:8f:75:
3a:53:ed:a8:32:e9:c5:79:a3:4e:f2:29:73:47:25:f5:30:f9:
b3:d2:ca:a4:cf:9a:91:04:59:6d:a8:9a:2a:9b:eb:78:00:a0:
84:71:0f:9e:ad:e5:ae:73:37:33:eb:af:7c:b7:6c:69:fa:21:
5f:ee:83:02:78:72:f5:92:09:86:d9:48:4c:98:00:4b:e6:83:
96:d0:61:3a:34:49:f5:b0:b8:19:47:9f:61:41:81:08:12:fd:
30:f4:f2:ec:ab:1a:4b:47:bf:98:64:c1:67:b2:b3:de:4c:f7:
04:61:a1:bd:e7:26:77:b2:d9:30:44:fc:99:8d:36:cd:4a:9e:
74:e7:f3:e0:34:8a:35:32:44:e0:6e:5f:8e:e2:f2:a5:82:60:
e9:51:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:12 2026 by rpki-client