
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
File: NjEWXebubQcy5I-6Klzn3KjUA3w.mft (raw, json)
Hash identifier: GQ05RYZioe1lZdrvoa8HXw6mzjxA/xOunzzWtQDlegs=
Subject key identifier: 18:B0:C8:24:B0:2F:3C:A9:CE:76:C9:B2:B5:F7:75:1A:D5:FE:10:10
Authority key identifier: 36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C
Certificate issuer: /CN=A913BBCF/serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
Manifest number: 28
Signing time: Sun 27 Sep 2026 09:22:35 +0000
Manifest this update: Sun 27 Sep 2026 09:22:35 +0000
Manifest next update: Sun 04 Oct 2026 09:22:35 +0000
Files and hashes: 1: NjEWXebubQcy5I-6Klzn3KjUA3w.crl (hash: 8AcUeP8pW7q0Ut84Ddqnk4M8aGj7JVtfM2CLI+3j2rk=)
2: A8386F1880BA11F199241D7E93A30FBC.roa (hash: X3b6yFfF3a4hrZ2AmVdCmz6pbLFnZ96Z+2HaXzQujlk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.crl
rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BBCF, serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
Validity
Not Before: Sep 27 09:22:35 2026 GMT
Not After : Oct 4 09:22:35 2026 GMT
Subject: CN=6ab8e05b-62a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:a8:77:a5:36:5f:19:1e:d4:8f:0b:aa:e5:
bf:37:25:51:4e:c4:57:7c:4a:7c:d9:64:e0:3a:a9:
87:a0:e8:e6:d1:14:61:35:5f:59:c9:83:f9:bb:7b:
65:e7:42:8c:fa:0a:25:e0:69:13:66:93:6d:d2:58:
18:fb:0e:8e:27:7a:e6:7d:7c:80:0f:28:25:35:a4:
f0:a8:4b:bd:c6:61:97:4e:10:fc:c9:1e:30:8f:92:
95:95:ce:27:22:3f:6c:84:21:2b:f5:10:dc:11:94:
f8:13:2a:ff:3b:b2:c2:b4:46:4b:04:ea:ec:e1:50:
d8:e7:7b:70:a3:24:a9:98:13:46:cd:9e:13:9b:6d:
7d:07:9d:a8:b6:ad:b8:eb:5e:a4:69:ec:32:1a:b6:
6d:57:83:80:6a:9f:ac:44:55:21:2c:6a:a3:64:8d:
25:dd:01:06:cc:1f:64:c8:f5:c2:b1:08:57:17:6b:
9d:72:0d:38:60:48:1c:ac:cb:80:a5:79:99:1e:3b:
14:e3:f0:c7:18:df:12:f1:49:2f:b4:cd:a5:42:d0:
57:3e:e7:e5:78:bd:38:c3:12:03:7b:c8:f4:58:fb:
95:4f:62:50:88:e6:e8:59:66:c5:92:8e:c7:a2:82:
4a:73:09:0b:cd:d6:d2:a0:0c:63:71:84:55:ef:3f:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:C8:24:B0:2F:3C:A9:CE:76:C9:B2:B5:F7:75:1A:D5:FE:10:10
X509v3 Authority Key Identifier:
keyid:36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:03:18:f8:38:d2:d9:65:e5:5d:81:f6:d2:29:c8:86:69:ba:
f7:76:da:00:1e:3a:f4:62:cd:33:2b:1a:a5:a0:05:fb:9f:0a:
d4:e2:41:14:e0:f5:73:e2:8f:80:4c:ca:5c:fe:e3:8e:75:c0:
63:bf:30:17:7d:26:a1:fa:2e:fa:fa:8e:d6:6a:e0:0e:13:f7:
46:a2:cd:2a:82:9f:8d:10:b7:30:fa:63:c2:2d:de:39:f6:77:
7d:7c:77:4a:45:17:28:1a:14:c8:31:a2:2b:6e:73:24:c4:35:
98:4c:56:b9:f3:43:21:04:ea:2b:45:53:a3:85:0a:0f:fd:b4:
91:87:8e:44:96:5e:c2:12:4e:98:a4:52:a0:ae:46:90:1e:5d:
31:07:d0:8a:41:e2:64:cd:dc:60:6d:e7:f7:09:8a:94:43:aa:
d2:89:42:f0:83:8e:7a:12:a9:0b:f1:de:fc:cd:d3:a1:8f:c6:
59:04:fb:78:d9:0c:4a:4a:89:45:da:4a:ed:c0:c1:81:2a:49:
a5:4e:64:32:83:65:b6:06:54:27:93:1f:98:0e:ab:a8:59:c3:
f3:d4:de:f5:f4:1d:a1:0a:fe:4c:d7:3d:19:ee:fa:30:04:62:
92:1f:dc:6c:05:c7:4c:79:8a:68:a0:75:47:cc:d1:07:5e:20:
d7:77:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:44:58 2026 by rpki-client