
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json)
Hash identifier: V1Z3c28vc82JFjH43Iu/xqEEluY+euA1aHrbd4ikH0k=
Subject key identifier: 3E:DB:2F:D5:0E:3D:C2:51:B8:FE:6C:9E:7D:FD:BA:46:35:D7:E1:64
Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9
Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
Manifest number: 0199
Signing time: Wed 23 Sep 2026 04:05:52 +0000
Manifest this update: Wed 23 Sep 2026 04:05:51 +0000
Manifest next update: Wed 30 Sep 2026 04:05:51 +0000
Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: VzA0Zck3dZrGB8ULPDSTuPw0MIFEptGkOwGXJ+F+gSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl
rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9
Validity
Not Before: Sep 23 04:05:51 2026 GMT
Not After : Sep 30 04:05:51 2026 GMT
Subject: CN=6ab35020-6fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:3f:d0:32:ab:83:cf:bb:85:be:f1:f6:12:
f1:1c:cb:51:58:8c:54:52:37:1c:86:37:f8:3f:f4:
fd:1f:c2:a4:43:65:a9:cb:36:b0:7c:10:3a:4b:2b:
03:02:9c:8b:fd:52:bd:1f:47:1d:c2:54:3a:4e:f0:
61:f3:77:df:0a:c0:b0:b6:f0:02:75:1a:68:91:1d:
8f:cf:ff:88:b7:e9:81:38:fd:6b:76:84:d8:fb:74:
bf:ee:65:7f:a8:49:dc:25:7f:24:3a:9f:d5:2d:d2:
56:57:c6:4e:35:99:b5:23:63:8b:43:19:a1:3f:1b:
03:cc:17:88:30:c9:a2:69:e9:ce:48:3e:23:40:2f:
d9:38:39:fa:ab:aa:ab:59:a5:08:53:5f:6d:40:9f:
71:34:51:23:52:fd:32:63:29:d0:58:0d:09:73:81:
5d:1f:7a:93:09:d3:c5:e2:5d:86:e2:78:01:c6:8c:
cd:8f:ce:fe:ed:87:c4:3d:8f:43:8c:a0:02:6c:70:
c4:c4:54:86:20:7d:b2:7b:7d:e3:f8:39:c0:aa:57:
4b:d0:9f:f6:37:31:ca:8b:82:40:a0:77:10:f3:9a:
9c:2c:fe:24:2c:f7:41:68:af:37:3a:56:b0:e8:10:
7f:6c:9a:51:64:96:24:50:30:64:58:48:ef:aa:17:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DB:2F:D5:0E:3D:C2:51:B8:FE:6C:9E:7D:FD:BA:46:35:D7:E1:64
X509v3 Authority Key Identifier:
keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b0:d6:58:6f:46:8a:f1:76:76:d1:b9:ae:cd:c9:9b:80:4f:
d0:ba:2c:ca:34:12:ca:56:e3:34:d5:54:89:a5:bd:b9:58:d0:
8d:5e:68:39:55:44:09:69:5f:f7:3e:c0:78:ee:0a:8a:63:22:
d0:e2:32:20:cd:d9:82:a9:13:02:36:29:25:97:b7:6f:c5:fa:
62:3c:06:d0:1a:01:61:c1:49:87:41:22:ad:ae:da:73:29:1b:
57:f2:bd:cd:6d:57:03:02:7f:d5:b9:82:d5:49:ad:4f:4c:71:
cc:23:e3:74:73:00:1d:a3:c5:b3:bd:1c:94:f9:2b:01:73:b4:
3c:b0:1e:d6:8b:6a:34:e5:47:b2:da:da:62:90:b2:b8:1b:ba:
a6:9f:cc:0d:a2:98:09:01:6f:cb:f3:6d:8d:33:24:3e:fd:2b:
74:99:7b:85:f2:5e:7b:53:ea:be:4d:58:a5:3f:db:7a:7f:1c:
4e:99:7c:98:d0:31:d5:7c:53:05:6e:88:e6:3a:c7:d8:a5:9e:
19:4e:0d:e9:cc:1e:79:3a:14:40:a4:69:c6:76:02:cc:db:7e:
75:cc:03:8b:65:c2:05:71:d5:2a:b8:08:68:a2:4b:79:4d:9f:
e9:a3:5a:6d:48:5d:f9:be:93:0e:b5:26:46:8b:78:3b:61:41:
82:5a:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:53:25 2026 by rpki-client