
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json)
Hash identifier: kyuAMh4Zuuwv6pkLA7GfS99Q//84WDkvuU8Vfm22SdY=
Subject key identifier: 39:64:DC:D4:3E:0D:8D:A0:6A:4F:0C:F7:86:DE:4F:BF:D1:93:2E:C4
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
Manifest number: 017B
Signing time: Wed 13 May 2026 04:40:33 +0000
Manifest this update: Wed 13 May 2026 04:40:32 +0000
Manifest next update: Wed 20 May 2026 04:40:32 +0000
Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: Sw+4BE41QaIo4bvEkYYrZzY/yHpb0NArqYcNt9CRB0g=)
2: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: rXEcC70BHU9BGaTrOUEVMio2SeHlBdWNjj8ucac2NAM=)
3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: wmNPnDvvzaXNcEvPjVuLtrgnnHPLzw2rLFktnj5ROwE=)
4: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: UjpEnJbWEEameT5NyA6GTtZ6l6bxgo6wSQmSr5ohGUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Validity
Not Before: May 13 04:40:32 2026 GMT
Not After : May 20 04:40:32 2026 GMT
Subject: CN=6a0400c0-a9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:bd:4c:9c:92:99:bf:18:1c:07:01:b3:bf:
4e:e1:fa:c1:63:01:c4:ac:b5:34:86:ab:e8:24:9f:
86:e0:3f:69:86:4a:f4:6a:8a:d9:e5:9d:3f:7f:82:
60:e4:ae:85:7c:99:77:84:fe:36:13:26:cb:b4:9b:
c7:1e:05:da:f1:3b:94:60:94:1b:f2:ae:25:20:33:
ca:ed:26:fd:f7:01:ff:49:75:ef:5b:ef:2d:94:44:
8a:0a:81:f6:b6:46:60:3e:14:2c:fe:50:62:a7:79:
4b:b2:11:7e:16:cf:f1:a9:8e:18:56:3d:09:c3:2f:
9a:ba:ef:36:98:89:b1:e0:bf:2e:e4:72:d2:8e:16:
4a:72:c6:d5:dc:43:84:0a:7f:5d:36:9e:8c:20:1d:
fc:fd:28:1d:cc:86:dd:55:88:1c:81:86:f7:05:62:
d9:cb:3c:06:39:b5:c0:dc:65:7f:25:5c:eb:87:f1:
be:6b:48:cd:2a:c0:f8:28:55:68:93:d3:1d:99:8d:
69:6d:d8:62:53:db:f7:59:21:f2:12:e8:a4:10:61:
e3:fa:40:61:4f:02:a5:05:57:fe:11:96:b0:69:a4:
ba:f1:5a:9b:bf:6f:e2:fc:3c:83:92:cc:a6:b7:49:
31:a9:2f:b7:1b:65:f0:6a:dc:48:43:c5:39:f6:ac:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:DC:D4:3E:0D:8D:A0:6A:4F:0C:F7:86:DE:4F:BF:D1:93:2E:C4
X509v3 Authority Key Identifier:
keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9c:a3:73:00:b1:73:83:1f:6d:ab:80:7d:a6:de:40:24:8a:
a5:1b:75:be:1c:39:b9:1f:56:95:55:ee:60:ec:80:87:4e:25:
0f:56:0b:8c:ae:e7:50:0e:ab:5f:10:86:1a:6e:6c:47:22:5d:
99:18:3e:8c:30:fa:b1:31:75:ef:44:3d:4f:b8:76:81:af:de:
f6:4e:54:9b:e8:0b:d3:a3:28:e2:e0:2d:92:be:f4:16:df:c7:
91:4c:fc:78:12:62:96:6b:8a:6b:d8:27:f0:84:be:79:95:b1:
28:84:d9:51:c7:bc:e3:a5:c5:14:bc:6a:bd:6f:f3:3a:48:05:
26:19:cc:a0:54:7e:6f:a9:c0:9b:65:03:74:29:c9:79:30:35:
f7:75:a5:26:ef:a9:1a:10:2f:15:6f:98:13:94:ee:60:6e:bd:
b4:7e:f3:3b:19:23:90:de:9f:c7:fa:5c:14:29:e5:81:1b:43:
93:6c:d1:f0:fc:f3:a1:fa:ae:ae:2b:eb:55:b5:46:0f:6d:b0:
51:4d:a4:a1:64:9f:d8:8d:b0:ee:0f:6b:39:6c:9d:b3:ae:42:
52:1d:bb:0e:8a:28:2b:aa:32:e4:7d:92:34:40:0d:74:4e:1f:
60:3b:70:ef:4e:6b:9b:a5:52:0b:00:b3:5a:b0:cf:b0:8f:70:
d7:14:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:58 2026 by rpki-client