
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
File: NItUz_eZZeIbLbq5nyEB4xpWDps.mft (raw, json)
Hash identifier: xpMFWftTc+PJNRYXv7Ozbr1jrOBo9dtMoHxG250ozmI=
Subject key identifier: 19:CB:53:F3:F8:97:61:8D:90:9C:BB:DA:1B:CF:DD:50:84:EB:AA:C0
Authority key identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B
Certificate issuer: /CN=A9145E01/serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
Manifest number: 79
Signing time: Thu 23 Jul 2026 09:42:02 +0000
Manifest this update: Thu 23 Jul 2026 09:42:01 +0000
Manifest next update: Thu 30 Jul 2026 09:42:01 +0000
Files and hashes: 1: NItUz_eZZeIbLbq5nyEB4xpWDps.crl (hash: E529kOLIjdbTLTEkxaKd+x23A3n/oXhAZwWKf5wR63Y=)
2: 03B7FB8CCF5A11F09B61EF16C4F9AE02.roa (hash: zPwsBxrk2TWYKMwX9feT4glmgUpbLrsFWyQ2jB0oPio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl
rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E01, serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B
Validity
Not Before: Jul 23 09:42:01 2026 GMT
Not After : Jul 30 09:42:01 2026 GMT
Subject: CN=6a61e1ea-60f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:8f:e9:98:6d:5b:db:64:aa:06:2a:1e:0e:
6e:32:08:56:56:ba:9e:ce:7a:a6:02:89:b4:27:3a:
c5:cd:45:62:ac:6d:b8:b8:96:f0:69:61:5b:09:1c:
93:e8:db:20:cf:f3:e3:e8:84:24:f4:9d:01:aa:09:
28:c3:61:09:16:a1:d7:55:14:bf:04:e3:0a:28:e1:
cf:f1:e9:1d:54:31:87:41:56:50:23:d2:06:14:5d:
9d:d8:6b:27:62:1d:5f:cf:5a:96:fd:3d:0a:3b:51:
1d:0d:5e:f0:f4:7b:fd:ac:d7:85:e7:9c:8a:b5:84:
16:81:92:fc:c4:f3:56:0d:f1:0e:57:c5:31:3e:bb:
0b:93:55:51:56:3d:a0:f8:78:d8:27:09:5f:94:6a:
9d:9d:fc:77:e7:95:c0:6d:76:c2:ac:74:14:4e:2a:
79:3d:ed:9b:af:4f:31:5a:17:55:df:31:9f:20:9d:
ac:31:5f:ee:0b:57:66:10:1e:26:38:cf:5e:b9:63:
be:51:07:ca:1b:85:0c:60:2f:7f:17:88:f1:5c:75:
07:50:5b:fc:cd:62:e2:bc:5b:d4:1a:0d:dd:e8:ed:
1b:70:ba:93:b2:0b:aa:bb:72:6a:c6:ee:d7:8f:e8:
22:17:41:62:7d:a8:88:9b:49:9d:86:5f:09:e7:03:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CB:53:F3:F8:97:61:8D:90:9C:BB:DA:1B:CF:DD:50:84:EB:AA:C0
X509v3 Authority Key Identifier:
keyid:34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:88:44:ca:bf:25:a0:e2:70:8b:e3:24:96:d7:8a:56:f3:4b:
ae:78:38:5a:9a:d5:59:cf:c9:95:62:70:02:ba:b7:b0:7d:98:
2a:64:b8:a8:cd:5f:0c:3f:ab:bb:c0:c4:82:13:bf:2d:5e:87:
f4:c3:e1:b3:cb:6f:5b:03:76:93:52:4c:02:37:70:bd:78:10:
05:5c:ab:c0:16:2b:03:c0:c0:f3:f8:31:ce:68:ab:0e:3c:01:
22:df:06:34:b8:e1:14:78:a4:63:3c:9d:4e:0d:4a:c9:98:de:
7b:eb:49:b6:eb:2c:ec:f3:9c:4f:86:40:fc:9d:09:a9:17:64:
8a:83:d2:54:c8:1f:63:0e:e1:2a:84:c3:86:b1:ac:cd:8f:40:
88:2a:d1:8e:c9:f5:a3:a4:aa:a1:5e:37:41:b2:51:e8:47:98:
9d:5e:bd:3c:fc:2f:53:a6:a9:e3:03:9f:df:9a:0d:b3:26:52:
3a:01:83:fe:91:a6:09:f3:b7:0e:de:1a:8a:5f:23:0e:cd:fe:
87:fa:15:a2:c3:0f:2a:a0:24:44:98:c0:d8:43:47:5b:53:bb:
cf:be:27:86:72:31:e6:92:cf:4b:7e:1f:5c:e4:87:e0:4e:4d:
62:a4:b6:be:5a:a6:49:16:4c:a2:6a:5e:bb:b8:1c:39:9f:b7:
ee:e1:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:50 2026 by rpki-client