
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
File: NQgZehD-pGpxhGMxT-upOUS2JIs.mft (raw, json)
Hash identifier: 7xQ4T0IgDEBt42eLTbY6QTKh+taQcyTcUzdtwYLsXPA=
Subject key identifier: 77:21:26:99:4A:98:8F:F4:2F:A6:DB:61:EE:10:DC:44:97:E2:3C:EC
Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
Certificate issuer: /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
Manifest number: 84
Signing time: Thu 23 Jul 2026 09:37:48 +0000
Manifest this update: Thu 23 Jul 2026 09:37:48 +0000
Manifest next update: Thu 30 Jul 2026 09:37:48 +0000
Files and hashes: 1: NQgZehD-pGpxhGMxT-upOUS2JIs.crl (hash: LXWAMwvB0QkLXddfrTX+C3kYJO6DyQaCtApXdf83sMU=)
2: F084D9AADF1B11F0BDFBE1B1616F56BC.roa (hash: CpQzWFpl+Gw/RBNLdgsUn2ZniQcwnVLZoguxqXTYKyI=)
3: 86227722C92A11F0872AB883C4F9AE02.roa (hash: OntMkkZwdIbl5SrNRK1u5UfChSdJYJCs+EVkHCslByQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Validity
Not Before: Jul 23 09:37:48 2026 GMT
Not After : Jul 30 09:37:48 2026 GMT
Subject: CN=6a61e0ec-6046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:a2:31:ff:34:72:fd:4f:27:f3:3b:2b:09:
3a:3d:55:02:68:dd:db:ae:17:c5:b5:8b:bf:6f:f2:
e0:40:ff:4a:41:a7:10:81:02:20:55:b8:1f:3f:47:
c4:cc:ae:0d:bf:6a:bc:81:40:7f:ff:47:90:98:04:
ad:e1:4b:de:2f:22:fb:fe:03:45:35:e8:93:44:50:
47:d3:a9:9b:3c:8b:da:36:15:f0:15:3e:98:9e:fa:
88:d6:16:bc:85:98:a8:06:0c:a7:90:5f:e7:af:a3:
95:5a:69:0d:8a:41:19:4e:08:7a:b9:22:e1:2e:6c:
1d:3e:3c:cc:b1:ac:07:ed:3a:08:66:2e:10:cf:a1:
ff:f3:95:a7:4e:f3:49:b1:0b:a6:ea:35:2f:f5:77:
5d:19:07:0d:b3:07:96:2c:c0:d0:d2:fd:e4:8c:e6:
26:b4:72:2d:92:e2:af:f1:5c:40:05:1a:97:1d:00:
5e:cb:79:43:56:65:ed:a9:56:31:d7:08:2d:a6:d2:
f9:06:b8:4c:58:4d:c3:6a:30:43:c2:44:90:48:ff:
11:b3:76:1c:74:57:e3:75:87:40:7d:b3:ec:0d:a6:
10:06:d3:0b:bc:a3:ba:75:6b:72:79:d1:5e:cd:78:
42:91:43:c8:b8:7a:c7:b4:3d:23:38:f0:c0:da:98:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:21:26:99:4A:98:8F:F4:2F:A6:DB:61:EE:10:DC:44:97:E2:3C:EC
X509v3 Authority Key Identifier:
keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:e8:20:16:68:71:94:2b:02:83:c9:1e:bc:d2:83:fb:53:83:
90:fe:b7:a8:34:00:3f:2c:6d:81:8b:a6:93:73:f6:de:16:39:
9e:75:1d:f7:c7:a4:ab:05:22:8f:56:74:70:93:60:50:ca:38:
c0:86:0b:97:1e:a0:99:19:49:bc:85:c7:91:a2:1a:be:e2:16:
1e:cd:5e:89:22:5e:c7:2d:bf:de:20:a4:71:0f:e4:6b:62:5b:
b1:5b:28:05:e4:2f:55:5d:3f:bc:14:a6:f8:75:4b:12:2e:3e:
a4:7d:9c:a7:fa:9b:17:e0:3a:f1:a2:38:9c:af:64:1a:e2:7f:
22:f5:b1:6e:43:66:d9:6c:6e:2a:74:48:8a:87:1e:7d:49:05:
32:e8:fe:38:1f:66:ad:8c:78:bf:4b:a7:a1:9a:6a:e8:7e:03:
6d:0c:a2:7c:0a:d1:83:95:2a:a8:e2:9f:5e:c6:ae:5e:aa:e1:
b7:1a:4d:72:c8:50:96:74:d5:92:e9:b5:a0:10:dc:8c:4c:9a:
f5:d6:f0:f8:db:1d:79:73:61:13:bb:dc:e3:65:e2:56:50:6d:
1b:7c:7e:59:32:50:bb:c0:c1:c9:83:c4:3e:6c:72:89:10:b3:
d5:e2:f1:47:62:a4:78:eb:5f:10:ef:2b:64:a6:39:fc:88:1c:
5e:94:9f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:05 2026 by rpki-client