
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
File: Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft (raw, json)
Hash identifier: QYvtOU7OAdkDGl6aTfAAfYeutJB3LcxmB7J+t1UfsR8=
Subject key identifier: CA:F2:5E:D6:6C:BE:19:85:ED:9E:BF:8E:FC:69:B3:64:88:9F:5D:4B
Authority key identifier: 36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
Certificate issuer: /CN=A9110B36/serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
Manifest number: 35
Signing time: Thu 23 Jul 2026 10:38:56 +0000
Manifest this update: Thu 23 Jul 2026 10:38:56 +0000
Manifest next update: Thu 30 Jul 2026 10:38:56 +0000
Files and hashes: 1: Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl (hash: 5XmzlV3TxehwMlO/WmkNOcZuORNAqACZztv34ghWGD4=)
2: 49C3A0F43AAD11F18ABD7390C4833773.roa (hash: M3Bb6K66672mLJWoFirlzgaQZknuy9ibLFZWuZIc970=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110B36, serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Validity
Not Before: Jul 23 10:38:56 2026 GMT
Not After : Jul 30 10:38:56 2026 GMT
Subject: CN=6a61ef40-ebb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:aa:e1:38:ca:02:a5:df:5b:fc:7a:44:d7:
a9:e0:bd:aa:f0:26:dc:7f:02:f8:69:6b:15:23:d6:
b4:53:84:8a:70:6a:d5:f8:c8:54:b8:3b:53:41:70:
77:03:5d:9e:f8:76:24:6f:1a:0b:22:d8:1e:e4:94:
6b:64:39:5c:31:77:73:38:4c:04:25:71:56:af:53:
d1:94:37:1e:ad:d0:85:c5:97:db:bd:ee:ea:40:31:
92:50:66:79:16:90:7c:c1:b6:e7:0e:09:93:0b:03:
7c:e2:a3:56:0f:43:bb:8b:60:3d:8b:ea:58:13:9d:
d5:be:46:18:2f:70:ba:f0:10:7c:93:53:9f:53:af:
22:dd:61:17:b6:a3:40:1c:26:eb:04:7d:d7:29:12:
08:ca:6d:de:d1:77:0c:03:96:2b:a0:28:a0:0b:36:
3a:7b:e7:75:69:6a:3b:73:1e:7b:2e:45:6c:8c:c5:
7c:51:f0:b7:cb:36:77:9e:df:8f:d9:8d:c7:3d:e5:
f2:6e:4f:0b:bf:bf:97:bc:f0:70:21:32:0e:d8:51:
dc:ee:3a:e9:10:84:c4:85:7d:3f:47:93:f4:ea:54:
50:1a:5d:27:ed:72:ba:a4:81:eb:40:10:d3:d8:d1:
31:6a:b8:5e:6f:4f:df:c7:d1:e1:e1:f4:f9:86:09:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:5E:D6:6C:BE:19:85:ED:9E:BF:8E:FC:69:B3:64:88:9F:5D:4B
X509v3 Authority Key Identifier:
keyid:36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:54:f5:d9:92:69:52:80:5e:74:78:4d:31:65:af:6a:5a:96:
3d:78:47:4c:1b:72:56:43:f6:2e:cf:c4:19:77:19:af:84:e1:
16:9f:d5:ca:43:2d:06:d7:49:45:8d:94:ea:e9:db:25:00:4b:
52:9f:fe:8d:88:f5:85:c2:fe:5e:4c:58:da:28:53:ec:e1:c6:
b4:d3:90:6f:3e:c6:cc:5c:6c:3b:b1:73:e0:90:4e:b6:d6:00:
35:78:fe:6f:99:ed:ba:64:c1:be:a2:d2:d2:c7:ea:81:bc:5c:
0f:ff:0f:36:23:3a:d4:5c:37:d0:76:95:ca:59:fe:9b:61:23:
ec:89:72:8f:6d:f7:05:e4:56:f7:86:b4:87:fa:ef:8c:6c:40:
81:54:d8:12:b4:ad:dc:d5:96:8a:f9:0e:6a:47:ce:75:df:6b:
c5:cb:a3:26:e9:da:3c:f5:42:31:a0:f0:76:b2:8e:27:6d:56:
25:0b:3d:67:b9:ee:39:49:83:0d:fc:3f:cc:0e:b5:a3:02:a7:
c8:c7:57:27:db:87:67:4c:f3:0e:64:f2:ef:5c:2f:32:5e:67:
a0:20:46:61:ed:a9:c2:d3:a7:42:40:82:08:b3:5e:b0:92:f0:
1d:25:d4:53:71:b0:c5:53:d9:ff:93:9d:e8:d1:bd:eb:95:23:
54:96:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:19 2026 by rpki-client