
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json)
Hash identifier: 5+O2jBSdb5+zK4mWvTuvxaXW0NSjh96rzw9jAfLdyEg=
Subject key identifier: CA:B2:13:27:26:2E:FE:90:30:4C:BB:D1:FB:21:EE:CE:91:B6:3F:5E
Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
Manifest number: 0102
Signing time: Mon 11 May 2026 06:12:43 +0000
Manifest this update: Mon 11 May 2026 06:12:43 +0000
Manifest next update: Mon 18 May 2026 06:12:43 +0000
Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: J+uV48zDjZpfScCr2L921tlCXtMGWTxw+NO9P1bycYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Validity
Not Before: May 11 06:12:43 2026 GMT
Not After : May 18 06:12:43 2026 GMT
Subject: CN=6a01735b-6c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:fd:5f:6e:2f:e2:fb:18:c3:11:d0:a0:c9:
1c:e0:ea:65:03:d2:dd:59:5b:38:47:0f:94:1f:4b:
e0:4e:9d:11:3d:b5:4a:12:b5:d5:56:0e:0e:53:4e:
50:45:a0:e1:57:71:e4:87:5e:62:c7:ba:55:0f:86:
83:75:b0:5d:74:27:ce:d2:d8:7c:9b:df:65:b0:bf:
78:23:a6:c5:fd:3d:6c:e8:05:bd:67:d1:f1:39:3f:
c2:d0:db:91:b1:51:60:65:71:28:b8:d5:f3:a8:b8:
b2:f6:87:5a:71:5e:cf:52:68:45:a9:40:7b:39:a7:
71:d3:1d:be:71:b2:ef:91:c4:6e:ca:d2:3b:91:8d:
1b:84:62:70:23:f3:7b:f4:95:a3:c0:5f:83:53:9e:
00:2d:27:87:8e:ff:7e:39:e9:e0:c3:78:59:a2:73:
b1:94:f0:51:a7:95:bc:4c:1f:40:39:85:d0:99:04:
43:cf:69:f4:fe:0f:6d:49:7d:08:b7:80:2b:2e:da:
d6:6c:a8:17:60:6f:11:1e:83:62:95:14:c6:bc:4e:
1b:0a:8e:f7:3f:94:ac:75:21:b2:22:d1:68:ce:de:
d5:df:d7:46:a1:41:77:57:18:7a:30:91:eb:40:93:
f8:b5:94:66:61:a9:f4:64:5e:ec:01:34:e1:5b:d0:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B2:13:27:26:2E:FE:90:30:4C:BB:D1:FB:21:EE:CE:91:B6:3F:5E
X509v3 Authority Key Identifier:
keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:36:6e:e0:ce:88:88:0a:28:79:f1:a1:35:93:1c:38:3b:75:
63:94:3d:b1:d8:22:45:f9:8d:d2:7d:cf:aa:a8:30:db:66:75:
57:97:1b:9e:e7:9d:ad:b8:f3:a0:ba:c1:13:24:69:b4:13:3c:
04:81:7f:d6:b5:5b:3e:e0:31:6c:d3:b5:e7:56:a5:a3:d5:92:
50:83:6d:30:1f:f9:2f:ac:cf:10:6d:e0:49:73:b8:ea:8e:03:
f4:47:7e:f9:e2:e3:f4:10:7b:92:3f:e3:dd:36:e2:2e:c4:e2:
fc:fa:19:81:81:26:3a:d9:98:12:2a:98:a7:34:d1:73:cb:90:
2b:2b:e9:b5:ec:ac:46:a4:c1:92:4d:73:60:ed:63:7f:b3:74:
59:b2:da:a6:2f:b3:25:37:94:1e:65:70:06:7f:ad:6a:9a:b1:
ee:81:d0:e9:85:d0:49:17:fd:e2:8f:70:82:89:0a:04:87:46:
97:f9:13:56:89:d2:5d:96:04:6b:b9:a8:dd:54:d3:93:3b:9a:
60:e0:43:d2:96:58:e8:4e:49:6f:1d:18:99:3a:d7:a7:e3:92:
8a:0d:31:04:23:f4:b5:aa:c9:c1:95:a6:86:09:62:7d:14:60:
60:a6:a0:a5:48:ea:8e:f9:10:10:51:d2:31:37:0d:5e:f4:05:
7c:be:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:23 2026 by rpki-client