
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json)
Hash identifier: gfddzsOZXY5wOJJH6mou+yuyaeExV9JJwbpFgQfLcgs=
Subject key identifier: BA:81:D8:83:05:F8:D2:46:DC:3E:D4:EB:42:2B:5E:7F:28:57:D6:3D
Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Certificate serial: 015F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
Manifest number: 0156
Signing time: Fri 25 Sep 2026 05:16:05 +0000
Manifest this update: Fri 25 Sep 2026 05:16:04 +0000
Manifest next update: Fri 02 Oct 2026 05:16:04 +0000
Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: nIamb3qcI5OxoEwRZdLAqADlWWKmin/oYTVz9US0Ei8=)
2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: v5s1QxIIpULAPj0sszFm1uj5Kywffv0SxSN9l4noDFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Validity
Not Before: Sep 25 05:16:04 2026 GMT
Not After : Oct 2 05:16:04 2026 GMT
Subject: CN=6ab60394-ae2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:8c:9a:22:ff:7d:d5:ac:3a:d3:89:65:a0:
c8:7d:7b:eb:f6:b0:8b:25:70:ea:fb:24:f6:f5:c2:
69:a0:17:d9:a6:ce:5f:d3:09:58:01:61:0d:a5:92:
a0:4e:22:d0:43:9d:b1:1b:c2:e2:c5:2e:2f:a0:bc:
4f:5b:22:ac:3c:10:b0:00:1c:04:0e:e7:50:ae:bf:
99:5a:f0:e5:6c:ed:bf:da:31:18:52:4c:79:4c:dc:
13:53:7a:bd:66:e6:8f:3f:f5:d5:ab:36:5a:43:ec:
a4:51:b5:7f:40:59:bb:aa:3b:e9:af:4a:50:3d:ab:
16:a6:0c:41:29:01:5d:8a:56:6c:a1:c8:d0:28:d1:
b0:14:a2:f3:eb:ca:8a:47:a5:a2:a7:a7:ba:27:94:
5b:48:f5:a2:c8:fa:45:a9:cc:ea:86:ad:64:73:4b:
a4:da:c9:e6:3a:4a:09:f4:a7:01:2c:dc:88:1d:dd:
9c:c0:e3:9b:3d:f8:e5:be:dc:fb:3b:67:75:4d:95:
cb:95:56:2c:a3:86:a2:b9:2b:11:e5:8b:b4:9a:ba:
2b:64:13:53:f8:f9:b0:18:f7:f8:cc:47:ed:ca:ce:
37:76:55:08:5e:c3:8a:ef:ba:a6:01:c5:27:7f:14:
2b:51:f1:6a:5f:5a:31:0d:23:9c:1a:15:fe:3d:96:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:81:D8:83:05:F8:D2:46:DC:3E:D4:EB:42:2B:5E:7F:28:57:D6:3D
X509v3 Authority Key Identifier:
keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:70:90:d9:ee:94:85:74:56:a8:fe:cf:e2:6a:1d:1c:0d:a3:
1c:98:75:9e:9f:4e:1b:59:71:ae:d1:e0:12:60:3e:f0:f1:fd:
2e:8f:43:79:1d:37:eb:c6:7b:9d:33:bc:8a:69:96:a1:c9:8e:
25:5b:0e:80:09:cd:2a:c6:5f:3a:63:0e:53:ae:91:f1:31:ad:
df:46:da:12:d0:6e:88:d7:59:ad:f4:6c:43:44:74:53:2e:59:
54:39:b2:66:d3:8f:78:cc:17:17:c3:b7:22:cd:a8:27:3e:a5:
e2:89:b1:55:b2:e0:05:c6:7d:6f:26:bb:f0:39:22:98:3a:de:
2c:3b:58:75:63:ac:56:e0:d6:84:2e:05:52:c6:c3:66:8d:7c:
d2:c1:ef:56:b4:2a:e0:fc:17:fd:81:5a:62:77:c4:0e:6f:23:
ec:02:ea:be:2c:17:e4:36:ac:1b:a3:31:75:b9:bf:36:bd:17:
84:78:84:21:6b:6e:48:89:79:9e:76:0a:b7:6f:64:e2:5d:bd:
81:62:c2:e5:bb:fb:56:97:11:8e:ca:ff:9a:45:0e:ab:0b:2b:
ca:83:ca:0e:f8:62:06:99:21:be:0f:2d:5e:83:3e:1e:9c:92:
19:63:a4:1c:82:35:1d:25:1b:d1:6b:5a:67:2e:40:b0:d5:58:
fb:a8:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:51:00 2026 by rpki-client