
$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
File: nzVmCVwLDAIx0LuWkl4DidHCbFc.mft (raw, json)
Hash identifier: 9aX05lU6H/KW8Vf0+4flT1lG7NJT+nnBH9dKfYRW3tI=
Subject key identifier: E0:B6:E2:23:70:89:A9:49:02:47:CF:C5:EE:F5:8D:CF:4E:1D:BA:6B
Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
Certificate issuer: /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Certificate serial: 04E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
Manifest number: 04E0
Signing time: Sun 10 May 2026 23:52:09 +0000
Manifest this update: Sun 10 May 2026 23:52:08 +0000
Manifest next update: Sun 17 May 2026 23:52:08 +0000
Files and hashes: 1: nzVmCVwLDAIx0LuWkl4DidHCbFc.crl (hash: BFpDS2Gj5Wp40wtdBDiidJWnYAJZdTyfCOa6ED5C58c=)
2: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (hash: tWz/6xO64zB/1Qqhs2Ax95uvHFJIaUVINpHba9CIrQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl
rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 23:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911403B, serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Validity
Not Before: May 10 23:52:08 2026 GMT
Not After : May 17 23:52:08 2026 GMT
Subject: CN=6a011a28-483c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:92:22:25:f6:11:5c:6d:8b:52:61:b6:6a:
a6:d2:5e:43:4f:52:3c:28:97:81:d6:c1:d2:80:8a:
2c:92:94:f7:14:e1:93:ba:05:9c:03:58:af:6e:cf:
2f:62:7e:ad:57:0b:20:78:67:82:45:01:41:59:ec:
fc:c5:c4:17:6e:f5:e3:4f:d0:b5:98:35:74:28:d1:
33:35:0b:09:8f:97:81:92:cd:1b:f3:f6:d0:e5:2c:
56:3c:bb:b4:4d:4d:36:70:6f:90:80:f7:ca:2c:d7:
81:2e:35:55:83:1e:89:34:bb:12:92:e8:84:6a:d2:
9f:9a:b1:5e:99:ba:5b:21:59:0a:3d:0c:63:32:57:
a5:4e:07:8a:b7:28:a9:18:a4:67:4e:ee:41:98:5e:
64:9e:ee:d5:b3:70:54:12:f4:15:44:dc:7c:d0:d3:
f0:a6:39:7b:8a:bc:19:cb:9d:6a:d8:7f:7a:34:4b:
d4:df:71:56:5c:a0:5a:59:6c:1b:3f:34:eb:77:7d:
de:1b:94:f1:d6:54:22:d7:1d:53:8d:12:ff:3d:ab:
d2:9a:83:68:a0:55:3f:20:f8:61:16:69:b1:eb:78:
08:9c:f3:9f:22:8c:42:3e:48:da:63:fa:a1:5c:33:
d8:73:e7:6d:c2:d0:99:38:3b:6f:80:c9:59:b3:de:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B6:E2:23:70:89:A9:49:02:47:CF:C5:EE:F5:8D:CF:4E:1D:BA:6B
X509v3 Authority Key Identifier:
keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:4d:4f:30:ed:3d:ba:f8:23:ed:44:d0:08:73:41:ef:70:05:
79:eb:d5:de:04:e9:f0:b8:f2:1c:08:ca:18:31:29:2f:14:18:
ec:4c:f7:d7:1c:c4:23:21:99:5e:3b:f9:f8:c0:61:f9:d0:99:
b2:3f:16:05:ff:6b:4f:1c:5d:72:6b:a0:04:8a:36:6e:23:6d:
e1:ff:b3:67:78:f7:3b:fc:0b:d1:e3:bc:20:64:a2:07:d6:7d:
e5:c7:98:ff:0c:8a:09:7f:ee:cb:d7:9e:ad:aa:21:29:ae:b2:
16:52:8b:19:06:8f:16:30:23:93:11:92:e0:38:60:94:32:ea:
49:4a:89:c0:76:4b:e7:78:f0:21:c7:c5:e2:07:c9:99:71:35:
66:dc:ee:cf:9d:87:d7:4d:65:43:91:ed:32:b1:dd:0c:5a:44:
81:d6:cd:aa:33:7e:67:df:88:8e:7f:57:fa:5a:a1:ba:e0:3a:
7e:7e:95:78:e9:41:af:22:56:85:2a:22:9d:4b:4c:96:2a:9b:
49:b7:a6:01:65:05:03:f5:cd:df:04:32:13:54:ef:49:1e:e7:
a6:87:bc:e9:cd:13:5b:0a:06:7a:a6:e6:13:76:76:da:d2:25:
b5:50:10:d8:fc:45:31:09:03:ba:3a:42:9c:f2:91:85:06:3e:
21:c7:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:42 2026 by rpki-client