
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json)
Hash identifier: 74GnwTtYZwX58Q4VNuV0lShb8kFOL3A57U4DbVpLLLE=
Subject key identifier: 06:E0:FC:BD:31:60:93:09:22:87:06:7E:2A:A4:50:F8:B8:FD:FD:12
Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Certificate serial: 0310
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
Manifest number: 0300
Signing time: Wed 13 May 2026 01:23:36 +0000
Manifest this update: Wed 13 May 2026 01:23:36 +0000
Manifest next update: Wed 20 May 2026 01:23:36 +0000
Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: 1gAaHsmQpP4nVLqYI+e+tYbvjxmxiwFbBu5+S1lJZXY=)
2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: attv9ecZrF5kZRZeQ+lyJkiW+JXwe94b0M/AiRCsF3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl
rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 784 (0x310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Validity
Not Before: May 13 01:23:36 2026 GMT
Not After : May 20 01:23:36 2026 GMT
Subject: CN=6a03d298-2409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:cb:79:1f:32:1d:4f:6b:d4:b8:9e:df:d2:
a6:a6:01:60:2d:0b:ae:61:46:7a:e6:fb:36:44:84:
9e:7f:6b:e5:84:26:ff:23:ef:d8:8a:3a:b2:20:f2:
c4:a6:a0:a3:15:c2:76:e0:1d:67:c3:e1:c0:07:74:
07:43:17:9a:2b:f7:2d:8a:6f:e5:56:da:03:bf:cb:
1e:9d:6e:9d:66:e8:84:56:8f:00:53:a1:3e:74:60:
29:32:0a:0e:6e:f2:24:20:e3:f7:e0:37:a1:e1:90:
93:99:01:df:80:f0:54:73:ef:c6:f3:bc:0e:04:fd:
f4:c5:ae:4a:0b:b3:b4:44:91:80:17:29:be:86:d6:
0c:ad:96:e3:92:56:df:65:43:43:41:3c:7c:19:d5:
11:c5:6e:00:f1:92:88:a8:03:30:ca:44:03:db:c7:
49:dd:55:8f:a1:ae:31:5d:b8:55:a9:e9:0c:6b:73:
fe:77:cc:34:38:5a:84:0f:15:ba:00:ea:ca:a2:f5:
8d:8b:5a:11:c3:c1:11:44:eb:76:ef:74:f2:40:3f:
90:cf:5c:29:b0:35:88:c5:a2:83:6a:fe:27:03:b6:
39:d9:30:b8:ce:d2:29:5d:4f:07:fe:e7:8a:2e:35:
ca:c0:8e:ad:76:c3:60:2a:26:c7:d4:08:9c:f6:c2:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:FC:BD:31:60:93:09:22:87:06:7E:2A:A4:50:F8:B8:FD:FD:12
X509v3 Authority Key Identifier:
keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:99:99:a8:37:d4:eb:d0:50:5d:e1:b8:7c:c7:6a:8e:a2:03:
8a:bc:ee:94:1b:64:4c:9f:d3:58:23:30:a1:eb:e7:24:eb:9a:
eb:73:b4:11:2b:1f:03:69:3c:b5:42:c1:0f:b4:67:26:21:a4:
cd:e9:d9:9c:cd:2a:b8:67:ae:c0:81:a5:d4:2d:19:ca:d5:e6:
3b:f9:14:c5:3e:1d:5b:9a:28:5f:72:83:27:cd:df:9f:b3:9c:
94:51:aa:86:de:ac:11:50:19:82:be:b1:5c:ff:91:2e:b6:51:
3b:d1:31:68:1a:ff:30:c6:fd:6d:f3:b5:8d:a8:61:af:e6:ba:
2b:73:cd:68:78:40:5a:0d:40:f4:5a:ea:c7:24:7e:6d:58:5b:
5c:97:31:bf:b0:dd:25:92:fe:1e:20:8f:60:11:6b:70:51:45:
80:0b:d1:94:a1:bc:b6:1d:d1:40:2d:58:b3:fd:46:04:4c:cb:
7a:f0:a9:ad:8e:b3:1d:39:3c:fa:03:13:bb:48:8a:3a:ec:e2:
17:11:a6:75:38:c0:49:8a:2c:7e:06:23:32:1d:f5:c5:0a:ca:
43:80:70:be:13:8b:e1:b8:8c:15:32:7d:d8:d1:fb:20:15:fd:
cd:36:c2:00:7b:1c:49:22:61:26:3a:43:37:ee:25:00:e8:26:
58:c3:8c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:53:09 2026 by rpki-client