
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier: YHZ7BzJZ+nuJz5ZXu4COtswJj3rGVBw2ZgH1ZpQmZCQ=
Subject key identifier: 2F:FF:9B:33:27:95:99:BF:C6:F0:85:0B:6C:FC:DC:D0:51:6F:45:EC
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial: 06F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number: 06EF
Signing time: Tue 12 May 2026 22:14:32 +0000
Manifest this update: Tue 12 May 2026 22:14:31 +0000
Manifest next update: Tue 19 May 2026 22:14:31 +0000
Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: PAXIoXPlXWyCt38XwOU3ITmxjGqMo1R4pQ/5eoprNAE=)
2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Validity
Not Before: May 12 22:14:31 2026 GMT
Not After : May 19 22:14:31 2026 GMT
Subject: CN=6a03a647-0916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:40:b7:a5:a0:37:2f:39:d6:3d:37:bf:ad:
86:5f:28:c6:39:54:d3:52:67:8b:4b:e9:1e:e0:e6:
a9:32:23:17:7e:66:3d:6e:3b:39:17:f7:87:50:c4:
75:9e:ec:c3:8a:22:bc:e0:73:a8:17:bb:2c:8f:a7:
90:ea:ba:e4:f4:0c:44:1e:f9:6e:16:15:35:dc:b9:
1b:30:f4:79:71:05:dd:a7:16:31:be:4d:cd:87:ca:
b0:56:cb:9a:2a:25:f0:ce:7f:d9:62:80:b1:0c:7e:
71:51:0c:0f:2d:27:d3:9b:0f:44:3d:54:2d:c9:d6:
8c:8b:06:56:8b:f6:fb:99:27:62:3d:f8:ef:b6:55:
33:62:06:d4:66:94:50:9a:23:5b:29:99:bd:6d:07:
67:f6:7c:8b:78:4c:d0:1b:fd:88:56:ec:bc:b3:97:
61:70:e4:1a:7b:0b:72:0b:86:09:8e:af:ad:89:a1:
23:3f:8e:95:d0:d7:35:98:0f:e9:63:86:6b:25:e8:
80:b9:0c:fd:f0:3e:b0:4f:9a:78:49:f2:64:62:e3:
b8:60:b4:da:3c:c6:41:11:93:86:f5:c1:fe:93:e9:
f2:93:0a:e7:2c:e4:fb:e6:7b:09:69:a2:d2:b4:2b:
0a:fd:1b:fc:f3:d7:9b:c7:0f:f1:07:73:b5:12:99:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FF:9B:33:27:95:99:BF:C6:F0:85:0B:6C:FC:DC:D0:51:6F:45:EC
X509v3 Authority Key Identifier:
keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:24:98:07:1b:71:e1:74:6b:2b:df:8e:37:af:47:06:59:7e:
05:3d:21:a4:50:21:00:fa:19:51:9b:ec:f4:77:d9:42:ac:e4:
12:83:27:97:d0:b2:32:f7:09:3c:5b:08:47:ce:0a:9f:9f:f0:
ce:29:89:a1:14:33:cd:18:e9:3b:43:44:c1:97:a1:0c:4f:9d:
ce:9d:62:2e:39:7e:d6:63:a9:32:14:b2:43:e3:dc:0e:e9:43:
48:29:b2:52:86:d6:a1:21:bd:43:5d:d2:2d:5f:1b:6b:69:d6:
41:62:2a:31:3e:62:b8:a9:9b:fc:ef:bb:6e:9c:6f:55:84:b9:
93:df:2b:34:95:68:a2:5a:bb:7d:e0:76:b3:cc:b0:10:b5:04:
40:e9:a5:3b:c7:3b:b1:f0:78:6f:b3:fd:52:93:c0:67:f6:2f:
23:79:17:17:45:31:1c:a1:99:4b:8e:b6:2d:39:22:d0:0d:9d:
d3:b1:92:d5:4c:d4:46:4c:5a:76:02:b4:1c:5e:a4:6e:c0:39:
b4:9f:65:5a:89:58:18:d8:36:a8:b4:3b:53:c3:c5:4f:cc:73:
c4:b9:a8:62:96:3a:f4:43:8b:06:d5:38:a6:c7:b9:e1:57:1d:
39:0e:7b:3f:3a:4a:ae:73:6a:c6:7a:18:13:ae:29:26:b5:12:
d1:0e:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:49:30 2026 by rpki-client