
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier: hEgZl/N7NtHib2UphwJsVLJrsU53vMQA2m5MlILHPME=
Subject key identifier: EB:EE:EF:37:14:44:16:9B:CE:34:B8:1D:2A:44:AA:ED:02:A8:90:D2
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial: 0970
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number: 0944
Signing time: Tue 12 May 2026 20:15:30 +0000
Manifest this update: Tue 12 May 2026 20:15:30 +0000
Manifest next update: Tue 19 May 2026 20:15:30 +0000
Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: hD3HciSieQo3RBjeSosLfmfv9DfgwzqdXpU9Xx6d0no=)
2: F814A546C01411EA912AC365C4F9AE02.roa (hash: 2YifR6mo0XxyvefgvbrrBcwPF0iO1qzlQeVmu5FFRlM=)
3: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: Bj8A4NZrddWzPk++1ddD9UKj9zRvtbRXj5gzO8ZrsdM=)
4: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: bQMzJivgeDG/wNPjtddFIl5YfZWO1LwIp1brxtXdfws=)
5: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: QLo9uos2f56X5X/VrcuB/MS45CAXbYbUhX5+j5oSmU4=)
6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: aTjLSFkQ3QZR9juw9jwKuB+0VR1mCGyj1CN0RBmT8pw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2416 (0x970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Validity
Not Before: May 12 20:15:30 2026 GMT
Not After : May 19 20:15:30 2026 GMT
Subject: CN=6a038a62-5695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b5:6d:7f:8d:33:e4:32:c4:19:d4:92:12:19:
79:69:c1:01:28:23:46:d4:55:5b:1c:b8:d5:02:47:
62:20:de:74:2d:28:bb:f4:9d:f9:87:0f:d0:83:48:
1c:b4:ba:d4:24:11:9e:42:ad:67:5f:16:21:1a:71:
d3:54:0a:31:86:29:04:1a:bc:9d:c0:d7:f8:78:ae:
a1:38:57:8a:2c:bb:64:34:9a:28:8b:d2:90:0b:c6:
7c:c1:ba:2b:28:26:6d:10:3a:08:9b:32:4c:dc:a8:
52:86:fe:8e:20:d0:f4:ba:54:d6:92:88:67:64:f8:
35:35:01:de:83:91:db:ac:8d:62:70:34:d4:6e:8b:
61:26:30:41:b0:61:c3:b0:44:d4:99:79:e4:55:a9:
39:e0:17:19:08:8e:87:58:ce:11:6e:a5:43:c0:2c:
c3:14:d2:20:0a:16:db:e7:97:6f:76:5b:9c:47:88:
3d:5e:27:13:12:6f:45:59:30:a3:37:f3:7a:d1:6e:
f5:6c:64:17:3e:99:78:59:5b:a1:11:8c:b9:54:7f:
a7:3a:86:5c:fd:f3:97:d6:ba:9b:07:b8:5f:97:06:
31:a3:b5:24:28:70:56:e9:90:ad:ba:98:38:25:18:
76:ca:a3:e5:8b:ed:a1:b7:a3:d4:51:c8:58:5c:82:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:EF:37:14:44:16:9B:CE:34:B8:1D:2A:44:AA:ED:02:A8:90:D2
X509v3 Authority Key Identifier:
keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:7e:a8:b1:79:20:45:93:70:f5:5b:cc:ab:ae:22:04:9d:5a:
cb:92:55:d0:f7:03:73:5d:2e:ac:3f:c9:69:38:76:5f:79:53:
b6:5a:5a:92:6d:16:c1:1b:90:c1:cf:b7:7b:0c:9f:24:5e:70:
99:86:45:fd:a4:af:4d:d6:40:27:a5:a4:67:ee:8e:94:c9:76:
76:cd:3d:90:26:d1:ca:37:39:1b:92:19:18:0a:75:69:a5:03:
32:e5:e1:56:6b:3e:6e:85:8d:4f:2d:8d:0f:09:6a:55:13:eb:
f7:7d:d4:4c:39:a4:61:f9:2a:a1:4c:d7:4a:b4:8d:87:ea:3e:
6a:e5:94:b8:cb:cd:a6:05:f8:42:d5:99:7a:65:9c:96:31:56:
d1:cb:1e:68:46:d3:1e:36:5e:8f:5e:31:9e:72:12:e9:14:78:
34:9e:07:a5:54:37:f5:49:b4:70:89:73:db:e6:a3:19:7e:d8:
2b:bb:3e:d1:0a:9e:45:05:12:b2:04:af:f6:3a:aa:e1:a2:4b:
e5:b5:2c:8c:b0:f4:e1:40:6a:3e:5e:16:1e:84:ac:7a:3d:8a:
51:b5:d7:6f:70:eb:3d:0d:89:e8:c7:a1:60:5e:29:11:8f:6d:
22:1f:17:ff:7c:63:84:6a:b8:4a:6a:d1:55:2d:30:11:08:d1:
34:75:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:28 2026 by rpki-client