
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier: W6TuKUR3NJYWSuY3CjlspT1ga+Gc0RUVgYip6t6esSo=
Subject key identifier: A4:6D:5C:8C:4E:B8:71:D8:E7:D8:D9:51:42:1F:60:49:7D:F6:6B:C0
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial: 0CCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number: 0CAD
Signing time: Wed 22 Jul 2026 18:49:24 +0000
Manifest this update: Wed 22 Jul 2026 18:49:23 +0000
Manifest next update: Wed 29 Jul 2026 18:49:23 +0000
Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: YwlOI/ccmwM7v4nJcDv5iK9c56LvznZnr9Mp63vkoWw=)
2: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: pg9SsLOxgtqV7eWyJNRqBhktus5MyHYQ/fTT/Weq75Y=)
3: 627B1438281211EA881CC32DC4F9AE02.roa (hash: hEcH8ZRuZadu9VcKHGuJsHI1HxqcK9oTlGT1pOjaHQo=)
4: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: MVjgqlWP2+PxzhdlAammG4g4jdGVj5m8klqnIWeyc0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Validity
Not Before: Jul 22 18:49:23 2026 GMT
Not After : Jul 29 18:49:23 2026 GMT
Subject: CN=6a6110b4-b1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:ee:99:4f:55:85:ca:78:37:a4:50:d1:e8:
6b:88:cd:1c:79:c0:b8:fb:6d:81:e5:66:45:58:18:
4f:5d:99:e9:a3:09:45:44:73:e2:6c:9b:b3:64:23:
85:fb:07:60:ec:97:de:47:63:ce:28:8f:0a:39:75:
e6:a9:34:bd:3b:f2:3e:1a:fb:69:e3:40:55:40:3b:
c2:3a:06:e5:c4:a3:7b:25:a8:22:c6:81:2d:1c:ee:
02:be:a5:eb:f0:0d:d9:2e:e0:1c:3b:74:c6:2e:cd:
24:67:70:e9:b1:4c:34:5b:13:eb:be:c8:59:26:05:
79:5f:93:e6:3b:2b:6c:b3:50:1c:dd:2f:d8:b1:af:
82:0a:af:83:27:71:e2:cd:e5:cb:da:04:ee:70:17:
be:65:0e:44:9d:94:50:39:2b:09:7a:3b:99:c1:9f:
e0:32:47:0b:b8:89:cf:90:a7:b2:3d:0c:46:b4:e6:
b5:6d:63:8f:b7:c3:fb:51:99:d8:07:c5:31:6d:52:
c8:73:2f:48:6c:03:4a:23:17:a6:a2:14:cd:8f:d6:
41:85:d3:0c:d4:3d:dc:8c:8e:67:8f:be:77:02:c7:
a6:33:fe:ae:f3:63:53:8f:1a:07:43:21:ff:be:40:
4d:00:97:f7:a8:b4:1e:2c:e3:cf:d6:30:8b:82:4a:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:5C:8C:4E:B8:71:D8:E7:D8:D9:51:42:1F:60:49:7D:F6:6B:C0
X509v3 Authority Key Identifier:
keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7b:dc:00:31:4a:88:7f:9a:05:98:66:47:09:e9:68:a6:65:
ea:54:78:43:82:6d:3c:ba:05:e6:26:1f:2d:95:bd:43:40:11:
47:e7:98:72:a2:6e:a2:61:eb:51:48:d8:63:81:fd:63:70:65:
8c:72:d8:14:d7:e3:55:cb:47:52:af:c0:0b:aa:3d:02:c2:ce:
3f:5e:6f:7a:9a:ec:04:1e:2c:b6:84:80:3b:49:ea:ff:7b:a0:
26:b8:5b:6c:d5:38:aa:51:b6:b2:60:1e:7f:ee:a1:02:08:29:
dc:2e:f5:b0:39:f7:a5:80:a0:22:7d:43:56:87:84:4e:11:34:
81:9f:25:32:cb:7b:8f:8b:7b:4a:fe:75:71:5a:d5:b4:6f:6b:
94:66:39:cd:1e:07:55:3b:64:64:dd:4b:c9:16:87:1b:e0:ca:
81:12:f7:ea:bb:20:93:25:e2:45:2a:d0:79:35:60:3c:c2:41:
77:c0:02:46:19:8c:41:c1:c3:c1:94:fe:66:ec:e5:b8:be:4a:
9e:c1:0e:a8:d2:9c:4d:e1:b3:39:cf:b0:0c:2c:23:a4:fc:6b:
82:df:d1:14:54:de:3e:e9:e4:ea:9f:b7:6f:87:f8:34:88:0c:
1c:27:2e:eb:6a:98:13:b4:d2:c3:f6:ae:50:de:12:bc:71:8d:
1e:d5:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:28 2026 by rpki-client