
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json)
Hash identifier: t9tptfD2mTA9gF5vlXEGqUvrrRbMY1ai7jK3Uu+YXAU=
Subject key identifier: 65:B5:E2:7C:BC:A1:A9:18:3C:63:B3:8B:E2:E0:AD:18:FA:21:77:5A
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
Manifest number: 7F
Signing time: Thu 24 Sep 2026 16:19:44 +0000
Manifest this update: Thu 24 Sep 2026 16:19:43 +0000
Manifest next update: Thu 01 Oct 2026 16:19:43 +0000
Files and hashes: 1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: 04/Cjbt0Xlgd2ShMebXjC1uah6/+mL75K6+fsGFU9wI=)
2: DBFD5AE29AC911F198A92D964911F970.roa (hash: w+n0GytCz1tL+nta12xN55dLplLzBUMuXjHXBaFBmg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Validity
Not Before: Sep 24 16:19:43 2026 GMT
Not After : Oct 1 16:19:43 2026 GMT
Subject: CN=6ab54da0-0c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:1a:36:a4:93:4c:ff:ef:70:38:ba:51:5a:
3b:47:24:cd:36:a4:9e:ca:50:c2:bb:fb:0a:99:fa:
ba:f3:e9:32:04:d9:2c:ad:84:5c:0e:c4:3c:c0:a2:
d3:c0:bd:50:ee:9e:9c:f9:29:f5:31:31:2f:11:09:
40:38:d4:c1:92:bd:8b:be:2b:43:19:f9:cb:cb:6c:
17:be:4e:7a:e6:3a:1b:33:a1:7e:d5:7d:c3:c1:e3:
97:8a:a0:0b:8f:8a:3c:29:dc:d6:e4:9c:0b:c2:e4:
51:4f:76:bc:df:7a:fd:c9:26:84:d8:c2:54:1a:4e:
93:58:50:17:a4:99:fd:54:a8:ad:d0:d1:43:89:b8:
bb:14:8c:4a:b4:05:e2:4e:42:b7:61:a6:eb:f2:64:
86:13:b1:a2:b0:e5:d9:5f:bd:c3:39:fa:35:38:4d:
ea:b4:9b:58:f9:d3:07:0d:e8:85:25:82:1e:87:90:
7e:71:fe:8a:45:fc:51:e0:95:a3:7d:41:d5:18:95:
4a:79:1c:8b:8e:de:6b:92:0f:9d:ea:09:c2:e0:19:
77:4f:ee:82:6c:47:e7:28:0a:aa:dc:a4:83:0e:9d:
6d:4f:a0:2b:48:20:c1:16:7e:68:b9:cc:43:3c:03:
44:2a:7b:41:61:68:3d:1d:e6:6e:e8:0e:88:15:70:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B5:E2:7C:BC:A1:A9:18:3C:63:B3:8B:E2:E0:AD:18:FA:21:77:5A
X509v3 Authority Key Identifier:
keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0d:63:0a:69:ef:76:3a:cf:1d:da:a3:92:fb:b6:d2:0e:b0:
84:cf:24:88:fd:77:bd:d6:fb:62:ef:97:d1:3a:c7:45:ff:9c:
4f:b2:dd:58:f1:ce:ba:de:7d:a0:56:c7:01:52:75:d4:85:33:
6c:83:8b:89:8d:41:43:98:16:15:a5:d6:07:e4:2d:0b:9f:06:
53:e0:0d:94:28:61:42:1c:6c:b8:bb:31:f9:7c:31:5a:7c:c9:
55:c1:95:65:cc:f7:e6:69:fe:df:5f:98:5c:d5:63:2b:76:76:
84:a6:2e:a7:af:64:07:26:34:57:67:af:7c:da:2f:f0:4f:0f:
bb:4c:92:54:35:d2:53:6d:0e:43:50:f5:64:b1:b0:a7:7d:b7:
d7:99:e6:94:60:cd:b0:55:f7:85:4a:41:99:55:dc:f4:08:1b:
a2:b0:12:3e:09:d3:32:95:58:d0:b2:88:7c:b8:1a:c3:e0:0b:
55:f0:88:fa:05:2e:48:11:a7:38:e8:91:ce:55:a8:f2:a2:2d:
f1:ce:8f:e4:09:79:ff:51:7b:35:ab:92:0a:c9:0c:96:ce:5c:
d6:27:22:fc:12:fd:4a:43:05:d8:34:63:7c:8a:b6:2b:c0:9a:
0c:7c:bc:1c:b2:4c:1b:3e:ee:ad:98:c4:8d:d5:52:3f:58:de:
0f:6b:11:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:02:08 2026 by rpki-client