
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier: pc8bwPMoWZZak53LAXvmOs1dW+0y7P7nzt0MGtFGbZI=
Subject key identifier: 49:73:9A:93:11:5A:DD:B6:C4:EA:94:24:4A:1D:66:58:50:EB:F8:68
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number: 0137
Signing time: Thu 23 Jul 2026 07:11:25 +0000
Manifest this update: Thu 23 Jul 2026 07:11:25 +0000
Manifest next update: Thu 30 Jul 2026 07:11:25 +0000
Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: yHNs/wGwFlWi15TuTYF5Ld55SrHQnSKqPY89+M6EbY4=)
2: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: WDWRrI/KRtPcAbR2bWOuMpgztLrYoQZ12yzCIYDgRAs=)
3: C41B6A98396E11F1992DA1BA96833773.roa (hash: BPXuBuSemYn/E+9Uo6D+b9G7/Ig6Oc1u1YHeb89/AEQ=)
4: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: hENFINj2b9wOIFxjK3nr2DrkTGbz4MTQ9pqxVPQHBxY=)
5: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 1MNrxKgQIdnkp7DGKWCKsge4/v205nBecHy5tmcmZDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Validity
Not Before: Jul 23 07:11:25 2026 GMT
Not After : Jul 30 07:11:25 2026 GMT
Subject: CN=6a61be9d-69cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:05:74:87:06:93:94:c0:52:d2:d6:75:8d:
fd:c7:e5:9a:3d:c2:bb:75:56:22:99:18:9b:f4:0e:
55:f5:ce:4b:d0:3b:aa:2c:ce:3d:e9:a9:3f:f9:93:
ae:9b:ba:e3:32:2a:0f:7c:81:bb:31:50:d7:e0:e6:
c9:07:c6:18:65:43:28:81:1d:18:b4:f2:54:56:52:
68:52:42:b7:8d:68:d0:fe:93:07:3c:84:ae:7f:01:
fb:c8:58:c3:36:77:9f:a9:be:2d:c8:83:d9:bc:73:
6a:25:5e:c1:15:57:6c:77:02:3b:8f:f4:04:7f:74:
5d:25:64:eb:5a:8b:9c:ca:32:c6:00:b6:8c:fd:f6:
b1:86:f8:8b:0d:e8:c9:d7:e5:ff:72:e7:ca:10:1d:
d0:23:a1:eb:a9:59:60:92:77:78:86:cb:ab:72:44:
6f:92:f5:3c:9f:f5:57:95:2b:10:9e:71:19:23:e6:
a7:b5:02:19:94:df:82:fd:01:67:de:bf:39:c1:27:
3c:78:3f:4e:2d:7c:f3:ae:af:c9:1b:3b:17:5f:0a:
55:48:ba:f4:b1:2f:19:d8:68:7a:5e:86:93:cb:4d:
84:50:5d:43:12:a0:d6:4f:6f:34:ba:29:d0:8f:a0:
84:84:87:90:08:16:e7:07:57:32:d0:77:d8:d8:37:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:73:9A:93:11:5A:DD:B6:C4:EA:94:24:4A:1D:66:58:50:EB:F8:68
X509v3 Authority Key Identifier:
keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:6a:b9:78:24:66:2f:c6:bb:08:05:a2:7f:69:bc:8e:1b:e4:
e0:50:f1:80:7c:4c:fb:38:32:af:5f:b1:0b:35:02:31:6d:be:
7b:f2:bc:4a:e5:f6:87:fe:09:91:b6:61:3f:a6:c5:52:24:b9:
df:1e:0a:3a:f6:92:86:73:09:8f:68:c3:a0:76:00:8e:84:bd:
93:da:d0:77:10:44:94:c5:2b:ee:cd:0e:1d:9c:ed:df:b1:b9:
c0:39:38:b2:e1:de:d8:71:3b:71:5a:6e:76:81:21:32:35:59:
99:f2:a9:9d:46:5d:71:23:bf:9d:ee:ea:b9:ca:a9:e5:7b:c5:
83:9d:42:ff:5e:25:94:a0:5e:15:ec:ac:87:53:52:b1:63:77:
e3:22:af:ab:3b:67:ff:20:7d:c8:92:14:20:a4:8e:36:e1:a9:
ce:b1:8e:5d:24:73:26:51:aa:8d:ee:8f:2f:ec:19:c4:64:19:
dc:ae:0a:46:fc:e5:09:b3:e2:ff:4c:d1:2a:8f:d6:5f:13:4d:
a9:4c:51:b9:41:a0:fb:46:1f:14:ec:1a:7e:01:75:e4:00:f3:
25:97:7f:54:72:bf:48:e4:42:0f:dc:bd:e9:95:c6:de:58:9b:
0c:f5:9d:60:60:45:10:75:be:68:fa:43:49:7d:7f:1b:53:08:
4a:d4:08:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:28 2026 by rpki-client