
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier: W/YAXZHaggVzQCYjWmwFL4S089gATdNaQp9WhG1T2j4=
Subject key identifier: A1:BF:0A:96:A8:64:C2:92:75:7F:36:FC:63:E8:41:F6:94:69:E2:B8
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial: 0B5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number: 0B53
Signing time: Tue 24 Mar 2026 19:00:26 +0000
Manifest this update: Tue 24 Mar 2026 19:00:25 +0000
Manifest next update: Tue 31 Mar 2026 19:00:25 +0000
Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: DQDrHeQlEqlREc9fiLMZVKVfd2d1V/7e5XgV2V8z07U=)
2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: sh5UH2ZBn9wBTa697FDn0y/l7y45xFGnVGbIE4BxV4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
Validity
Not Before: Mar 24 19:00:25 2026 GMT
Not After : Mar 31 19:00:25 2026 GMT
Subject: CN=69c2df4a-8268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:0c:de:57:4c:f0:3c:0e:0a:6d:52:ea:56:
19:40:2c:6d:95:d4:87:41:dc:19:68:25:3d:22:95:
ea:51:89:2f:f3:c0:02:68:84:54:80:70:14:ce:da:
19:b7:4f:f4:4f:54:13:fe:90:e6:39:68:aa:99:10:
54:3b:e1:02:d5:f8:f9:e2:41:04:21:19:1b:a2:08:
cb:61:45:bf:32:e3:37:7e:28:af:3f:01:73:d0:f6:
5f:22:7d:70:f5:1b:e2:a0:c7:cf:dc:8e:44:63:6c:
62:b3:71:fb:44:e9:1e:1f:24:6c:87:77:5c:f7:74:
ec:f0:de:a5:c8:3c:2a:cd:19:50:4a:82:60:63:e0:
17:a4:58:b6:9b:fa:5b:b1:98:f1:76:df:d9:65:35:
0c:a9:00:da:fd:48:77:4d:3c:68:87:6a:bb:3a:9a:
3a:35:47:6e:12:63:78:3f:8b:49:1a:d7:d0:b6:44:
3a:e1:8b:31:7e:cf:96:21:bc:b3:94:e1:68:1b:bd:
fe:e5:9f:23:58:ec:00:91:10:46:33:80:31:4b:34:
4c:b5:7f:aa:27:4d:5b:27:85:bc:e1:e9:89:68:4f:
b7:bd:ef:67:39:3a:3d:8e:9e:85:87:3c:62:99:8a:
5f:b5:72:f2:41:70:64:a3:35:71:d6:4c:16:76:85:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:0A:96:A8:64:C2:92:75:7F:36:FC:63:E8:41:F6:94:69:E2:B8
X509v3 Authority Key Identifier:
keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:15:46:38:fe:05:89:73:cc:a0:ba:19:05:b7:ae:76:98:5d:
86:67:c1:78:73:43:89:3d:b9:f2:c7:9e:25:43:58:85:01:3c:
76:21:2e:80:ba:5e:76:0b:d4:73:cd:7a:cd:54:04:db:84:55:
ba:d0:2f:48:d3:a0:eb:49:35:26:6c:f6:1a:64:ac:c4:84:00:
ac:a0:7b:b6:49:23:4e:d7:1d:30:82:dd:dc:ee:a1:ec:d4:06:
91:9b:36:16:39:37:46:95:84:4e:29:6b:ea:6f:3a:a5:95:4e:
e6:28:d2:12:1a:68:c3:76:93:43:09:58:f5:d2:34:ec:df:4c:
98:3c:73:7f:ba:23:26:f5:90:c9:18:a9:45:89:b0:b2:4c:76:
9c:45:bc:77:c3:b9:4c:5d:ff:3b:d5:a0:2e:dd:94:61:3d:21:
15:f6:4a:6c:86:8e:c0:95:27:a8:86:1e:dd:3f:49:99:a6:cb:
e7:19:39:9c:70:38:8d:e3:2f:48:36:ed:9f:d8:21:b0:88:e9:
f6:e5:82:dc:9e:c9:2c:d6:6d:db:30:cf:9c:02:a6:7a:00:c9:
78:eb:ea:41:ef:8d:b4:45:82:c6:84:94:81:a0:5b:1a:7c:2f:
fd:58:97:83:3f:39:f3:b8:cb:c3:6b:39:42:83:21:63:20:d7:
75:e5:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:34 2026 by rpki-client