
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json)
Hash identifier: L35H/ZKDEsO4zzCZ4GWpVb6JgU5Y5v5l32fu5DyMwz8=
Subject key identifier: A0:A3:CE:64:F8:73:18:C9:D1:56:65:D3:93:5B:8D:B6:5F:48:10:60
Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Certificate serial: 0A97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
Manifest number: 0A8E
Signing time: Tue 12 May 2026 20:24:16 +0000
Manifest this update: Tue 12 May 2026 20:24:16 +0000
Manifest next update: Tue 19 May 2026 20:24:16 +0000
Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: MXdh0wnb11PvWjH9I9jBYu+nLoBahnozFWZagv3WguE=)
2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: fTC3RP5UwYJo/xgaymTCOGYfDdh0ORjauT4dKfVe+3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Validity
Not Before: May 12 20:24:16 2026 GMT
Not After : May 19 20:24:16 2026 GMT
Subject: CN=6a038c70-28e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:e6:c2:5d:f7:62:38:19:a2:81:66:e6:67:
22:a1:f1:18:bb:55:c1:db:72:d7:8b:e3:3d:1e:54:
77:bf:a2:f3:33:d9:93:3b:0f:ce:a8:f2:e7:e2:d6:
8c:0f:06:a9:48:8b:02:0b:3b:93:1b:37:b5:97:b2:
7b:71:93:38:92:7c:29:d5:8e:02:c4:29:1c:ac:c8:
af:88:45:7b:86:e4:73:bf:41:89:d8:aa:d1:c5:9e:
df:52:cd:2d:a9:e4:8a:28:a4:f0:60:d7:3a:5f:4f:
57:08:24:6f:d6:80:66:ae:04:7f:eb:ea:76:80:4c:
d4:a4:ac:c7:ca:98:3b:36:89:7d:bc:12:44:00:eb:
8d:dd:bd:9b:88:bf:52:c2:a6:4f:93:87:b8:dd:55:
7d:70:c5:33:99:58:c4:60:d7:44:56:cf:60:ff:72:
63:c2:23:48:af:64:e8:46:09:7e:4d:25:f0:8b:07:
40:28:bd:74:f7:3b:d9:7d:57:46:69:44:74:cb:88:
7f:e1:a7:50:1a:43:c8:47:dc:a7:ce:67:d9:4f:54:
5b:2d:54:f9:bc:25:d1:32:bd:e1:6c:8a:34:7a:6d:
9f:9d:6f:3c:1a:e2:0e:a0:9e:e9:03:7f:a6:63:48:
40:56:32:2a:24:00:96:0e:68:e4:e4:32:fc:33:70:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:CE:64:F8:73:18:C9:D1:56:65:D3:93:5B:8D:B6:5F:48:10:60
X509v3 Authority Key Identifier:
keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:24:24:82:18:d6:3c:ec:f7:c2:45:cc:e9:44:99:28:9c:24:
3a:1a:81:51:8d:57:fd:ef:6f:25:eb:15:a5:cf:fc:c1:c2:0e:
6a:29:00:12:c7:84:09:48:fb:e5:12:c9:d9:cc:42:d3:aa:0c:
76:85:21:07:b7:3d:13:2c:0c:f5:1d:36:e7:76:fc:ba:3f:30:
9f:e7:4f:df:5e:8e:9a:4f:bd:58:e7:69:16:37:4a:d1:42:86:
d0:4c:aa:20:4b:df:b7:0d:de:29:1d:86:8b:65:43:c6:fb:4f:
46:74:fd:4f:52:13:80:ae:b1:66:03:6b:bd:b2:3e:1c:6c:1b:
3c:a2:6f:9f:6e:39:52:de:b0:80:b3:59:b6:d8:14:99:e2:2c:
9a:a5:da:f6:b0:b9:13:be:dc:7d:07:3d:75:5c:36:33:c7:7d:
6e:3f:1e:a6:2d:90:02:54:b4:e6:6c:c6:db:19:a9:0e:2a:f9:
b9:d4:e6:7f:5e:7b:20:fc:3c:5d:f6:42:48:45:0d:9b:ba:71:
ce:6c:47:6b:50:c2:44:71:10:80:2f:af:06:72:dd:1c:50:c8:
fe:d0:d1:16:d7:00:60:89:41:fa:22:59:34:5e:05:54:6d:04:
df:64:4d:ef:09:bf:25:9b:cc:ab:60:9c:de:d8:76:61:db:66:
df:4b:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:42 2026 by rpki-client