
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json)
Hash identifier: UrX3lKutDgirEbPsMbYON9qvQF1luRjGxkGXvzgWOH8=
Subject key identifier: 1E:20:75:FB:C7:6F:C1:75:41:EE:B0:DF:08:A5:D9:35:09:3D:04:5E
Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9
Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
Manifest number: 013C
Signing time: Wed 25 Mar 2026 04:33:09 +0000
Manifest this update: Wed 25 Mar 2026 04:33:08 +0000
Manifest next update: Wed 01 Apr 2026 04:33:08 +0000
Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: 2YSBtFz1wvSg7uv7zFrybuxrsbMNY5LxIZ4Onqi3Jo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl
rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9
Validity
Not Before: Mar 25 04:33:08 2026 GMT
Not After : Apr 1 04:33:08 2026 GMT
Subject: CN=69c36584-cdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:dc:71:bf:ba:44:59:02:7e:90:11:79:cc:
06:71:c6:ef:20:88:79:bf:53:93:67:95:dc:a1:d2:
0c:da:3b:f2:01:9d:54:65:ae:6e:9b:31:50:6e:ec:
94:b9:70:31:4c:f9:d5:84:21:78:cb:c5:6b:7b:f2:
c0:9e:40:62:cc:16:ec:81:4c:df:b8:65:33:00:26:
bc:8e:2a:2a:f7:7d:37:e1:71:e3:a7:96:6b:98:c1:
c3:59:fb:8a:33:7e:2b:69:b9:90:88:f1:ac:11:e1:
db:67:ed:7d:01:ba:a9:5b:bb:dc:67:f7:e5:79:f2:
5f:55:63:fa:e6:86:8e:0f:2c:0f:9d:d9:bb:f7:de:
8d:28:cc:db:fb:1c:df:8d:a7:14:06:69:30:f1:51:
6d:9b:5f:f6:14:20:fc:d2:36:bb:11:c3:d2:5e:72:
6c:34:17:75:ea:b2:f4:7e:7d:e5:4b:87:3c:89:fd:
69:9e:1d:56:1c:20:11:ca:dc:a9:7c:d2:95:88:2d:
2e:f5:15:36:59:bd:de:8f:c2:39:88:b5:61:b0:3f:
e3:26:5a:a6:7d:07:8a:ad:26:cd:03:6e:81:4a:1b:
ce:74:7c:42:23:4e:75:cc:30:c1:bd:e8:2e:71:0d:
dc:12:af:1b:3f:ef:bf:2b:f8:65:ed:0c:6c:db:a1:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:20:75:FB:C7:6F:C1:75:41:EE:B0:DF:08:A5:D9:35:09:3D:04:5E
X509v3 Authority Key Identifier:
keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:f3:21:42:ff:ae:f3:4a:78:30:4a:76:f8:af:bb:24:57:07:
ca:ba:bf:08:5f:c4:36:c1:37:e4:6b:fd:db:a2:4b:8b:bd:5d:
52:fb:ec:91:c7:fd:56:fd:f0:02:36:b4:16:e5:d1:2b:0e:26:
a1:f2:48:21:1e:7c:23:45:b3:4a:53:ea:b6:c3:e0:db:d2:df:
e3:ce:c6:35:b7:21:b6:ed:66:68:06:74:c0:67:0d:26:3a:a7:
b7:79:bc:b4:a2:f8:08:ff:df:9b:64:82:f2:1b:a5:65:ca:62:
19:52:04:73:03:a3:3a:6e:e9:34:b8:ff:62:b3:1e:6c:6c:77:
90:2e:b0:55:11:2a:24:da:6b:22:ba:e3:a4:34:ba:ab:4b:30:
d1:f1:e3:3d:21:48:d2:f9:62:da:b9:6c:a0:67:4b:41:85:2d:
3d:b8:19:ac:54:b9:7b:c5:9c:03:e7:86:db:df:96:c8:65:da:
02:a3:da:ea:cd:c2:9f:3a:ec:f2:ea:df:8b:c7:1f:24:d2:a2:
37:15:71:be:40:ee:e4:36:55:fa:27:05:38:fd:b8:d9:4a:39:
7c:ad:af:82:7f:2c:28:f1:c4:23:77:a7:9b:b2:90:6f:37:c8:
ee:ed:5a:13:70:ba:e4:bd:c4:ac:ac:85:16:9d:27:a5:df:ef:
38:c7:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:21 2026 by rpki-client