
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier: 0utw9gf6NiQN2ne53nVKCySEaECP9BMxCQ1ojvuX7v4=
Subject key identifier: 41:07:46:E8:59:E6:85:37:DC:DD:9E:24:2A:FD:F0:B5:2A:78:67:57
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial: 0685
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number: 0673
Signing time: Tue 12 May 2026 22:43:05 +0000
Manifest this update: Tue 12 May 2026 22:43:05 +0000
Manifest next update: Tue 19 May 2026 22:43:05 +0000
Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: TWVmmgb17jUpvkaVJlLTEsMuT9N56f9ijgHT9rDYQyk=)
2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: 6cK1WB9mwOOoOwp+cGbSDlz8j71ro5RXPTbIMXDPpjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
Validity
Not Before: May 12 22:43:05 2026 GMT
Not After : May 19 22:43:05 2026 GMT
Subject: CN=6a03acf9-5336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:f7:11:25:55:99:4f:0f:d1:4d:aa:83:99:
67:88:3b:21:42:a4:f4:e8:4e:7a:31:ce:c1:18:c3:
e4:cd:cd:2b:91:90:d6:27:61:bd:b6:27:73:7b:8c:
9f:a6:b2:fb:b9:9d:4a:da:27:ac:bc:a0:ae:c3:2e:
e1:03:25:85:c8:29:77:d7:af:8c:86:5e:fc:2d:1f:
66:a4:7d:7c:a0:31:5c:b7:18:0a:40:1a:0f:27:24:
9a:82:59:cf:a3:07:c0:ce:bd:74:bf:49:e0:da:a1:
a6:dd:f6:e1:59:a6:e3:ae:30:4f:ed:eb:92:b4:0b:
e1:ae:43:5a:c2:82:cc:de:d4:b4:a2:09:4a:35:84:
4c:00:6d:55:46:0c:f9:b8:a5:d7:aa:89:31:25:f1:
3d:95:6c:8f:fc:f9:75:52:84:44:c4:1d:a9:88:bc:
a9:af:16:10:b6:07:d9:df:9f:ff:57:3d:1a:bd:b4:
12:32:7a:fe:c3:d3:58:73:ea:94:f9:b1:e7:3b:43:
21:24:62:d6:4a:96:a1:49:80:38:3b:e7:ee:a4:2b:
19:ed:b4:4e:33:62:5c:ed:00:43:c0:90:68:9b:38:
7f:74:bf:8e:e2:3a:19:99:15:75:42:96:c8:a9:09:
9c:93:5a:82:d7:7c:f3:3f:16:a4:b9:a0:94:cf:0c:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:07:46:E8:59:E6:85:37:DC:DD:9E:24:2A:FD:F0:B5:2A:78:67:57
X509v3 Authority Key Identifier:
keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:db:a2:fc:d0:43:ce:f9:91:a8:93:a5:2a:0f:e4:cf:9c:af:
f0:3f:f0:d7:ab:b5:1a:34:d9:da:21:25:b7:c2:a3:c0:30:81:
8a:db:dd:d0:30:40:9f:32:91:73:2a:10:c7:b6:0e:4b:28:5b:
ca:f2:a0:62:5b:87:5b:3b:62:bb:78:e6:9e:09:b0:ef:c7:37:
70:76:e0:73:f2:7f:21:33:62:6a:1d:1e:bd:0a:44:18:8b:a6:
c3:5d:cb:31:b6:34:1d:10:a0:a0:fb:cf:92:6d:50:c6:62:f1:
6d:9a:da:44:27:db:61:a0:c1:b2:27:4a:6b:2a:8c:a3:88:77:
2c:da:8f:1f:08:a0:ce:8b:97:ef:1e:78:e2:61:ea:33:f0:9b:
49:02:e0:4b:e9:10:88:0e:1f:50:99:20:3e:9a:12:f6:60:61:
77:44:5a:8c:9b:54:82:88:f7:20:e5:74:95:9f:ec:c8:8d:e2:
5b:bd:e4:87:f0:80:f0:45:57:c2:de:f1:61:dc:03:8a:ab:4d:
ab:1c:f7:06:fc:c8:46:51:6d:58:d8:9d:71:a2:e0:e9:1b:a6:
f0:21:ba:7c:73:28:de:b3:bc:4a:e1:bf:4e:f5:45:b3:65:6c:
90:92:52:3c:67:fc:4b:93:88:95:4f:2d:b5:b0:74:3e:e0:5e:
80:42:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:39 2026 by rpki-client