
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier: tjYELDPq3QoUXOYqscotk+81fsonwwQ7WHmvhSMgPfU=
Subject key identifier: 91:0F:92:B7:AE:F1:6E:FF:29:31:2F:64:7B:A0:F4:E4:38:AE:EB:13
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number: 0246
Signing time: Thu 23 Jul 2026 03:41:13 +0000
Manifest this update: Thu 23 Jul 2026 03:41:12 +0000
Manifest next update: Thu 30 Jul 2026 03:41:12 +0000
Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: L5BCLLDFTPBg8CGqrZ9u1N6ZpAhDFegBrWOrAuvhLF8=)
2: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: /zH5NCxaOe44lNiOZuL2x1qIFvtAXXk9k531YTZP3Dw=)
3: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: qnvrSMl0yQyYkmnyhwN0g0h+sOgggPn26d38v0T1z/c=)
4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: WH/ILcSrKq9+xG39/9dwHQTlGi9rnQp31CFmoa5QIUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Validity
Not Before: Jul 23 03:41:12 2026 GMT
Not After : Jul 30 03:41:12 2026 GMT
Subject: CN=6a618d59-5b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:6b:9b:9c:5f:e3:6a:a4:12:4f:93:c3:33:
bf:57:b1:e2:a8:8a:7d:5e:a5:31:28:62:19:3e:d3:
94:52:d0:3b:7e:f3:29:e8:53:46:b3:d0:da:8d:67:
54:e4:be:89:53:c4:a5:92:de:88:3d:23:09:17:7e:
e8:9d:de:d4:69:23:9c:28:e1:13:a2:68:99:d5:66:
4b:39:ac:e3:0d:84:a8:90:30:c9:6d:64:a5:7d:17:
01:f7:6a:41:ba:e0:72:66:3b:95:27:7f:34:74:8e:
42:60:cd:20:be:9f:8d:16:f1:00:41:0e:29:f9:58:
cc:42:f1:d0:d2:be:4f:69:23:07:c1:9c:f3:5f:d8:
50:28:8d:6a:6b:76:f8:61:d6:ea:42:ea:73:ad:58:
ee:af:ae:ad:be:46:07:3c:83:d3:9f:f4:2c:8d:27:
b4:2d:5c:fe:94:f0:f9:df:c1:c8:f6:c1:50:a6:df:
71:1e:ac:9a:66:b7:08:cf:55:b7:f6:25:e2:cc:03:
75:10:65:6f:16:ce:2e:f9:3c:b7:8c:38:50:27:ea:
0b:e1:57:c7:27:97:e2:9e:85:fb:04:3f:a3:fb:52:
47:b6:c0:32:5c:cd:58:d7:77:79:51:e0:cd:54:8b:
c3:5c:0d:02:8c:05:3e:46:e5:87:8a:bd:dd:a0:18:
3a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0F:92:B7:AE:F1:6E:FF:29:31:2F:64:7B:A0:F4:E4:38:AE:EB:13
X509v3 Authority Key Identifier:
keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:aa:76:a7:02:f3:a0:24:af:d8:e2:5f:6a:53:b6:3f:97:78:
86:73:c2:8e:2c:02:6c:7a:b4:e3:cd:8f:98:f1:03:3a:4a:3c:
25:55:ff:10:7a:8c:8c:c6:fa:b0:f9:b3:9d:64:28:af:ce:2a:
93:d8:d2:65:1c:98:84:ff:48:0f:1b:55:27:1b:75:51:1a:6e:
fb:48:62:76:00:65:a2:a7:4c:1b:83:7d:84:64:4c:b1:f2:2e:
95:1f:5c:07:cc:29:42:33:f4:e7:32:45:9e:ca:06:91:af:29:
28:5e:1f:53:00:b4:0a:3c:19:9f:89:7f:6d:53:a2:d8:57:ce:
36:a0:a4:54:38:18:a8:81:fe:12:15:f8:47:2c:64:5c:9f:2c:
a9:39:e9:1f:77:cb:4f:fc:74:47:ca:27:0e:36:10:94:e3:68:
1c:6b:af:66:56:37:8d:a7:37:fb:94:e7:39:de:0c:22:41:2e:
3a:40:bb:06:6b:74:27:91:92:d2:c5:04:21:c8:da:6c:ab:84:
8f:59:0c:59:b7:67:36:5c:ab:9e:a6:e2:8c:ce:73:bc:fa:ee:
f9:a0:81:a7:33:7c:27:2c:55:b5:ab:d8:d3:46:91:c3:6e:7e:
82:d0:f1:d8:5a:0d:a5:8a:6c:b1:6a:b3:7c:a7:15:30:67:1a:
eb:c7:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:18 2026 by rpki-client