
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier: oKmlHoeO8+GS9DwIqj1LEB63YYlFcjdr8WWV7qQsvSE=
Subject key identifier: D0:1A:7C:BE:83:7A:10:A5:0E:D4:B0:E1:0E:6B:3F:C5:3F:F5:FA:41
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer: /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial: 092B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number: 090E
Signing time: Wed 22 Jul 2026 20:46:12 +0000
Manifest this update: Wed 22 Jul 2026 20:46:12 +0000
Manifest next update: Wed 29 Jul 2026 20:46:12 +0000
Files and hashes: 1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: VhcGpkdXS+uV1tptkArOOPZXVt5v3O69ixVrhwpp7Vo=)
2: 56AD05C0D8F711F09DAB56B975D3641D.roa (hash: 6GOomTQthZ+KrQw+RXFQOYpc/6H0zxAQ+hBCBHNginE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2347 (0x92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Validity
Not Before: Jul 22 20:46:12 2026 GMT
Not After : Jul 29 20:46:12 2026 GMT
Subject: CN=6a612c14-2bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:d8:0f:28:15:01:31:cb:e2:f0:4b:58:50:
82:a0:5d:22:d3:59:6e:6d:3d:b7:0a:ce:57:83:5b:
1d:4c:b9:2c:52:10:80:22:d6:97:e6:d1:1c:ad:88:
71:6c:98:38:cf:ba:85:ad:23:83:7e:55:83:84:35:
a6:74:31:9a:ad:32:3e:14:f8:f4:c7:19:1d:81:97:
6e:ad:c3:69:ab:40:31:1e:41:53:de:8f:e2:2e:1b:
5c:c0:ea:76:34:1f:74:98:b1:90:eb:01:4e:47:aa:
89:6e:a4:bd:62:dd:c4:f4:4e:74:47:6d:00:ca:23:
88:1e:ae:61:51:84:1e:d5:00:79:f1:9b:bc:f8:83:
b4:3f:f7:e5:29:3a:71:22:de:20:28:71:02:8d:28:
a2:95:10:45:48:92:f1:7d:bc:37:e3:7c:fa:c7:62:
e3:d2:97:1c:e0:29:78:60:75:a5:9e:1c:39:f1:36:
1b:28:fd:1f:ea:16:90:1e:c1:5a:45:50:58:ad:82:
21:2f:16:f3:56:db:36:29:cf:a1:e5:df:1f:0a:fd:
ca:33:bb:e4:af:e1:08:7f:67:f6:88:a9:49:86:ea:
be:ff:6c:ba:7e:01:ba:70:5b:24:34:2e:11:82:b7:
23:aa:9e:6e:b2:18:52:58:a6:a0:6e:d5:53:b0:48:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1A:7C:BE:83:7A:10:A5:0E:D4:B0:E1:0E:6B:3F:C5:3F:F5:FA:41
X509v3 Authority Key Identifier:
keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3b:e7:61:95:c0:2a:9e:fc:9e:e9:13:19:05:cb:b5:24:7f:
83:66:4d:03:b1:24:3c:fe:48:dc:1f:07:5b:5b:20:a1:1d:ea:
26:be:f5:eb:3f:98:76:57:d6:11:0b:94:9d:df:2b:6a:44:39:
66:d7:06:f0:e7:67:ca:aa:fd:1d:95:e8:ca:f4:84:5d:80:fc:
56:10:6e:4e:9b:f4:71:af:58:31:7c:a0:ed:c0:39:42:54:5f:
9e:41:e4:f3:f8:95:45:fb:60:98:94:9e:df:ce:c4:5d:1d:f6:
67:32:f9:bb:ce:f3:09:24:d0:46:87:41:4f:d1:32:69:80:fe:
cb:af:f0:3f:45:35:66:d0:99:d5:df:ae:46:1e:94:f3:07:9c:
b1:d5:c9:a1:92:ca:7d:f4:37:c7:04:fe:f3:10:36:57:3d:af:
e7:10:e6:71:76:fe:45:b1:cf:8c:8d:44:36:cd:bd:e1:3b:c9:
12:81:64:d8:4c:3b:f5:db:07:21:9e:c7:0d:1f:33:a3:1a:f1:
2f:62:09:72:78:d1:8d:96:8c:e2:19:ed:5c:fb:a4:f8:53:6a:
62:e0:58:79:22:ef:41:3a:52:57:b8:3e:a8:89:f4:31:9f:34:
fd:eb:cf:b5:5b:73:e2:30:8a:f3:3c:f5:6c:81:ee:f3:21:72:
30:ba:fb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:55 2026 by rpki-client