
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json)
Hash identifier: gROypaPsMgUY6CLs7EEA/jFqTPS2NfrDljwPII+sauo=
Subject key identifier: 4F:0A:71:DC:9C:87:4F:E4:44:47:0D:2A:F4:1D:CF:DC:0E:30:5E:1C
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial: 0F00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
Manifest number: 0ECD
Signing time: Thu 24 Sep 2026 17:39:13 +0000
Manifest this update: Thu 24 Sep 2026 17:39:12 +0000
Manifest next update: Thu 01 Oct 2026 17:39:12 +0000
Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: ujOuJ5BX0rZCaMPOPUXdOeTKmHnkYXVAVwXfn7mafDM=)
2: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: 618LqzTl8LQhJtXSV7A+T4nSgtmL+eUdYuuSmJB8P+A=)
3: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: 8rNs0gdQKATTtaV4qHkPv78bMS5t2h1ASUQBEQU8So0=)
4: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: k+9XCl9+aXReTnmVjtn9Atb7JQmlEuxt5sdI8xbLjQo=)
5: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: XtIYLVIsFd92F+p6CIOS0j9rYdWtMLDPAZSaa/r7k1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3840 (0xf00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Validity
Not Before: Sep 24 17:39:12 2026 GMT
Not After : Oct 1 17:39:12 2026 GMT
Subject: CN=6ab56041-9327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:c4:6f:86:f5:8e:9b:86:91:fa:12:89:ca:
a0:50:dc:5e:40:24:74:61:9b:b1:dc:e3:20:2b:70:
f5:c6:53:81:f9:ed:e2:dd:ba:dc:72:0d:79:0c:40:
54:60:da:6a:c1:4c:7c:17:08:74:74:f9:21:5d:c4:
f6:27:6e:dd:83:63:59:84:23:dc:ff:f7:6e:f2:72:
ac:36:9a:72:13:0a:78:d2:c3:2b:0b:76:be:3f:c0:
eb:a2:7c:2c:61:04:dc:28:c8:f8:a3:14:cf:1f:21:
6e:e7:81:45:67:c5:15:09:93:18:7d:c8:5f:64:85:
c6:8d:bf:1f:c9:16:03:09:9a:f9:52:86:e6:2b:d8:
24:66:65:5c:e1:fb:37:02:cb:c1:55:7a:07:ed:36:
57:74:6d:7b:1d:f0:d2:28:e0:ec:79:96:02:97:ec:
39:1c:54:e8:39:86:d4:e2:22:a0:2d:e8:2e:fa:0c:
f8:c2:f9:f1:df:59:aa:5f:7d:51:d3:df:3c:23:17:
2e:6e:97:ce:ed:78:7d:bb:74:cf:3d:18:30:1e:6c:
1f:5c:56:86:f8:31:e2:43:15:9a:5b:21:26:50:af:
ab:3e:56:8b:f5:b8:f3:9f:aa:a4:41:6b:cf:78:a4:
d9:63:6a:26:79:6b:14:ec:23:e7:5b:e8:8a:9e:be:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0A:71:DC:9C:87:4F:E4:44:47:0D:2A:F4:1D:CF:DC:0E:30:5E:1C
X509v3 Authority Key Identifier:
keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:89:08:31:41:32:71:6a:48:e7:0b:ec:24:d1:38:2d:08:dd:
fa:34:c3:b3:f1:b8:51:fd:10:ec:03:80:e3:51:05:eb:29:03:
a3:37:e3:bb:00:9c:79:1f:f9:da:28:f6:20:30:54:ba:0f:40:
74:8e:f2:eb:32:0b:8a:a0:b4:08:53:18:8b:b3:d4:2a:e1:74:
0c:ce:1e:11:55:cf:d4:6c:2f:ab:61:f1:08:33:40:c1:fb:87:
52:6c:7c:dc:d8:bd:1f:6d:2b:e2:03:48:23:78:a9:57:dd:38:
66:9a:eb:0e:4e:4d:16:5c:14:f0:33:8a:4b:dd:c1:27:39:1f:
f6:79:23:32:4c:70:a6:7f:9f:78:21:db:85:71:75:bb:72:73:
23:e2:f9:17:b1:23:07:00:0b:cf:da:8c:74:44:08:1c:96:fd:
2c:6f:8f:25:eb:5e:b5:8d:42:48:3b:4e:60:2f:10:c4:5a:b7:
64:23:86:ec:b6:d8:48:ce:f2:ee:27:b4:b8:6d:b7:e2:96:90:
dd:f9:bb:30:1e:4e:e0:27:20:db:d0:44:cd:7b:91:98:19:68:
32:f3:5b:c0:30:80:8e:8a:3c:b6:d8:c4:19:04:0a:aa:17:36:
ec:cd:11:0d:ab:25:6a:b9:dd:eb:a9:02:7f:f6:0f:5c:f5:99:
e9:cd:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:14:51 2026 by rpki-client