
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier: ONp/3HaTWosTkzGDuokeChhK7ZgpQ5VI78FC5C8q3Yw=
Subject key identifier: 9E:8A:72:C9:EF:B8:71:0A:E0:37:26:5C:9B:20:E4:44:69:3D:4A:94
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial: 06CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number: 06B8
Signing time: Thu 24 Sep 2026 22:18:58 +0000
Manifest this update: Thu 24 Sep 2026 22:18:58 +0000
Manifest next update: Thu 01 Oct 2026 22:18:58 +0000
Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: 4MoP+yAJ+SMOy1ljbCkIe7d2MjEAjdTRnnUBbSqH66w=)
2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: 6cK1WB9mwOOoOwp+cGbSDlz8j71ro5RXPTbIMXDPpjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
Validity
Not Before: Sep 24 22:18:58 2026 GMT
Not After : Oct 1 22:18:58 2026 GMT
Subject: CN=6ab5a1d2-765d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:bf:ed:e2:76:02:0d:d2:d1:ea:e1:b2:03:
96:e9:b8:6d:27:9f:b8:be:1e:af:c5:19:a0:f5:c7:
3e:51:bb:dd:28:4b:f4:b8:d0:d9:7f:36:4f:db:73:
82:fb:3b:b2:09:e8:ef:7c:9d:d3:e5:c9:1f:6f:65:
a1:9c:42:3d:15:52:83:c9:28:14:29:8a:6a:50:14:
22:d6:d8:5a:96:57:69:35:c7:78:9c:b2:73:b1:31:
c6:8d:c0:fd:0d:ed:87:5b:3f:68:71:5e:c5:93:64:
88:58:0e:1c:bf:de:ae:54:84:2a:d3:46:39:57:06:
21:92:55:c2:03:d4:b2:54:a2:e3:ca:f3:c7:48:4f:
21:e2:b3:b8:3f:67:c1:a7:08:ac:9a:ef:6d:c2:6c:
0f:d6:fb:63:2a:a6:b9:70:91:56:07:da:f6:a3:13:
f2:c9:29:26:74:1f:69:07:c8:8b:c9:4a:4b:0c:ee:
33:7d:ea:bc:f3:2a:47:c2:21:4d:27:c7:38:ca:e6:
c4:64:47:11:2a:9c:17:fe:c0:6b:60:10:e0:eb:35:
13:94:25:a8:5b:a3:81:38:2f:43:fd:b7:4c:b7:27:
b5:b3:88:b6:3c:5b:a7:3c:4b:2e:1d:c6:3e:b4:e2:
07:75:24:09:66:45:25:aa:0f:d2:b3:fb:09:af:65:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8A:72:C9:EF:B8:71:0A:E0:37:26:5C:9B:20:E4:44:69:3D:4A:94
X509v3 Authority Key Identifier:
keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a9:56:11:43:f2:ef:71:bb:12:c5:91:d4:a5:59:81:fa:9f:
2c:59:7e:6b:f2:aa:33:e8:db:20:1b:ed:11:cf:a0:70:eb:3b:
27:84:b8:d5:63:55:c0:a0:0e:25:f4:7e:0d:a6:1b:a8:d3:20:
29:2a:4f:6e:ec:3f:9b:71:fb:4f:c7:a6:c0:5e:7b:6d:80:e1:
6b:e9:9d:cd:71:a0:6c:7d:b7:38:8a:62:ea:8b:aa:6f:0f:3c:
ef:44:6d:2f:4d:a5:85:e3:64:07:a3:6e:ac:4b:51:e0:bf:9e:
1f:25:7c:e4:ab:6e:d0:d5:40:ed:fa:30:bf:86:c1:81:97:ed:
44:c6:30:73:3b:65:3d:38:24:97:13:0f:f3:be:3c:75:8f:63:
93:c2:a4:e2:b2:15:dc:88:d9:b6:8c:d7:94:ef:b9:82:36:41:
39:f6:59:7b:4f:1e:a0:cd:2f:97:0f:92:04:83:65:ae:cf:4e:
91:1c:01:df:98:65:74:5f:15:2a:48:ea:be:c9:ff:3e:70:0f:
da:1d:a9:67:78:c7:30:41:6e:51:01:6d:23:2c:52:a7:c3:66:
01:43:c7:92:9c:4f:bc:83:31:04:3c:a6:69:2a:88:02:d6:5b:
3b:17:ac:51:ef:55:02:a3:0a:0f:48:62:b3:c0:ea:13:40:50:
44:56:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:27:10 2026 by rpki-client