
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
File: nxlDAU2jmDwfXHj3bM8tpWpKNro.mft (raw, json)
Hash identifier: cnODtIjykimZUSu53FYsRj7QBt76AXZJZ2gHdUDudMU=
Subject key identifier: 1A:89:3C:B9:0A:25:76:F4:8B:34:AF:A3:9A:28:72:8A:8D:A5:9F:7F
Authority key identifier: 9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA
Certificate issuer: /CN=A912E3B6/serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
Manifest number: 44
Signing time: Thu 23 Jul 2026 10:26:42 +0000
Manifest this update: Thu 23 Jul 2026 10:26:42 +0000
Manifest next update: Thu 30 Jul 2026 10:26:42 +0000
Files and hashes: 1: nxlDAU2jmDwfXHj3bM8tpWpKNro.crl (hash: /DO4qsYvnmIfHroWSEDz4KUiAC/7mnq0Va0LgJznsMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl
rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3B6, serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA
Validity
Not Before: Jul 23 10:26:42 2026 GMT
Not After : Jul 30 10:26:42 2026 GMT
Subject: CN=6a61ec62-af54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:d4:0a:1b:a3:9a:97:87:d5:28:36:12:20:
2e:af:2a:a8:a8:f1:5f:77:99:9b:f1:0a:1a:4f:3a:
a6:e4:3e:b4:4c:53:4b:d3:0a:66:f3:e0:2f:50:82:
98:40:11:44:c1:fb:87:a1:a2:2f:5a:09:7c:47:87:
63:32:3e:5b:8b:32:ef:7a:93:0c:8b:f0:32:67:9a:
f4:6e:6e:7a:25:b0:62:82:13:68:4c:73:e6:20:90:
83:09:8e:fe:9f:9f:4a:1f:28:6b:ec:f8:57:f7:4b:
61:b1:16:e6:af:62:9f:8f:90:ce:01:2c:7d:c6:9f:
1c:39:c4:47:88:9c:e4:27:f1:30:ff:b7:bb:c7:ae:
29:3c:0b:18:fe:3a:f3:83:db:4a:f7:5d:f3:a2:36:
0a:14:1d:ca:9d:d3:48:da:fe:0a:13:9a:1f:7f:41:
73:8c:ed:d7:92:0f:b0:9f:49:3e:4a:5e:df:9f:97:
1d:14:b6:8d:f7:6c:6c:f3:01:0e:86:52:cc:82:4a:
72:4a:06:24:c6:52:8f:02:17:eb:e3:41:76:48:81:
77:3d:26:de:91:98:72:ac:aa:00:e9:b4:cf:d7:7f:
6e:65:8e:1e:52:57:71:f7:3a:65:38:e1:9e:c8:41:
70:94:47:d5:b3:3b:da:03:65:89:f6:70:22:40:50:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:3C:B9:0A:25:76:F4:8B:34:AF:A3:9A:28:72:8A:8D:A5:9F:7F
X509v3 Authority Key Identifier:
keyid:9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a9:b1:6d:9c:25:c0:28:58:5d:d2:c5:64:23:cb:6a:d9:13:
64:0a:25:96:a8:e3:9f:5b:43:c1:41:66:d0:04:33:26:1c:4d:
df:a5:97:7a:28:44:0c:8f:0c:bd:6f:7d:b6:17:be:5c:9d:99:
07:00:84:e5:56:16:27:c2:83:17:a4:ee:9c:46:78:20:bb:85:
f2:38:b2:98:fc:ce:08:26:d3:ce:77:f8:ed:1f:42:ba:24:62:
1b:d6:78:0c:1e:c0:49:44:d1:57:58:dd:ca:f3:05:78:4a:aa:
83:84:9a:d1:62:fd:ee:48:3a:15:0f:0a:cb:62:cc:cd:d5:04:
8f:ba:63:94:ea:21:b6:54:57:d8:fe:23:57:41:ef:ca:00:9d:
1a:b4:9d:64:bf:88:21:51:32:5d:b8:c7:61:cf:f0:5b:bf:a7:
67:c5:42:d3:e5:1c:35:0c:9d:6e:19:9d:7e:62:0e:72:25:c2:
7b:21:46:7f:98:11:54:79:38:20:4e:2a:88:d8:f6:d4:bf:8c:
32:e7:2b:34:2d:d2:3b:ed:37:2f:f3:87:2f:97:97:b2:52:2d:
29:5a:3a:33:42:6b:c9:49:ac:ed:fe:d0:a1:42:da:29:17:52:
52:94:d0:2d:d8:5b:18:59:29:d0:62:7f:21:a4:39:c7:8a:89:
4c:31:d9:0f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
RTNCNjExMC8GA1UEBRMoOUYxOTQzMDE0REEzOTgzQzFGNUM3OEY3NkNDRjJEQTU2
QTRBMzZCQTAeFw0yNjA3MjMxMDI2NDJaFw0yNjA3MzAxMDI2NDJaMBgxFjAUBgNV
BAMTDTZhNjFlYzYyLWFmNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsMdQKG6Oal4fVKDYSIC6vKqio8V93mZvxChpPOqbkPrRMU0vTCmbz4C9QgphA
EUTB+4ehoi9aCXxHh2MyPluLMu96kwyL8DJnmvRubnolsGKCE2hMc+YgkIMJjv6f
n0ofKGvs+Ff3S2GxFuavYp+PkM4BLH3Gnxw5xEeInOQn8TD/t7vHrik8Cxj+OvOD
20r3XfOiNgoUHcqd00ja/goTmh9/QXOM7deSD7CfST5KXt+flx0Uto33bGzzAQ6G
UsyCSnJKBiTGUo8CF+vjQXZIgXc9Jt6RmHKsqgDptM/Xf25ljh5SV3H3OmU44Z7I
QXCUR9WzO9oDZYn2cCJAUAe3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGok8uQol
dvSLNK+jmihyio2ln38wHwYDVR0jBBgwFoAUnxlDAU2jmDwfXHj3bM8tpWpKNrow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0I2L0MxNDc2OTk2MUVD
MjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3ZlhIajNiTTh0cFdwS05y
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvbnhsREFVMmptRHdmWEhqM2JNOHRwV3BLTnJvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF
M0I2L0MxNDc2OTk2MUVDMjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3
ZlhIajNiTTh0cFdwS05yby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB5qbFtnCXAKFhd0sVkI8tq2RNkCiWWqOOfW0PBQWbQBDMmHE3fpZd6KEQMjwy9
b322F75cnZkHAITlVhYnwoMXpO6cRnggu4XyOLKY/M4IJtPOd/jtH0K6JGIb1ngM
HsBJRNFXWN3K8wV4SqqDhJrRYv3uSDoVDwrLYszN1QSPumOU6iG2VFfY/iNXQe/K
AJ0atJ1kv4ghUTJduMdhz/Bbv6dnxULT5Rw1DJ1uGZ1+Yg5yJcJ7IUZ/mBFUeTgg
TiqI2PbUv4wy5ys0LdI77Tcv84cvl5eyUi0pWjozQmvJSazt/tChQtopF1JSlNAt
2FsYWSnQYn8hpDnHiolMMdkP
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:01 2026 by rpki-client