
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json)
Hash identifier: b/ZtytcrIoQB39KyDlA0r7gJMMkrFo93lJC9gDqhPCQ=
Subject key identifier: 45:23:6B:DF:5C:85:74:02:8A:B5:62:51:38:7F:63:95:79:8F:06:21
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
Manifest number: 57
Signing time: Wed 22 Jul 2026 16:27:09 +0000
Manifest this update: Wed 22 Jul 2026 16:27:08 +0000
Manifest next update: Wed 29 Jul 2026 16:27:08 +0000
Files and hashes: 1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: pOIEpVW2nky0vh8QWKoIeptUQOM1EVhZZI+ppfOES7E=)
2: 2D89A3B4139A11F182E65A043E3D8C67.roa (hash: 6rniMe/YVWGY7c5EcQQMPJgDsNhBjwIFHtLtGoYlhn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Validity
Not Before: Jul 22 16:27:08 2026 GMT
Not After : Jul 29 16:27:08 2026 GMT
Subject: CN=6a60ef5d-d66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:9f:75:9f:ca:9f:e6:a2:e1:88:55:77:a7:
a1:55:d3:f1:ad:de:b6:33:78:64:c0:cb:de:03:12:
c3:d5:0d:69:11:81:05:6e:08:93:86:ec:c5:d8:11:
bd:af:ac:c3:9e:d4:08:56:a2:27:f6:07:6c:8a:58:
55:bc:a0:76:ec:bb:74:75:0f:cb:c8:df:3d:ab:56:
df:6e:76:e2:4f:7d:1e:0b:9f:4e:e4:2c:8e:d4:72:
fe:21:1b:a7:ed:84:4f:68:01:83:bb:88:bb:b0:21:
47:73:8a:92:da:76:69:24:e7:d4:8c:74:23:3c:52:
0a:03:c7:10:73:ae:91:00:07:43:23:83:b8:0c:31:
d0:61:f1:ac:ec:e0:c2:68:c6:86:c3:46:da:5a:7e:
ad:d5:0b:8b:f1:90:9d:a6:60:49:1f:37:f2:05:38:
8f:11:2f:9a:01:1a:b8:69:62:ef:94:4f:7a:0d:fb:
02:f2:80:3e:81:e5:d4:97:dc:21:de:c2:9b:a8:b0:
6a:a8:1c:bb:8c:3e:99:3d:54:0b:7d:28:cd:2f:19:
8c:4a:46:51:a5:5e:25:7e:a5:6c:e4:94:ff:ec:78:
89:9b:8c:7e:f1:ae:ef:17:27:7a:90:22:8a:ea:a2:
1a:43:ae:c6:20:cc:2a:2b:22:09:e3:39:8d:9f:a0:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:23:6B:DF:5C:85:74:02:8A:B5:62:51:38:7F:63:95:79:8F:06:21
X509v3 Authority Key Identifier:
keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:80:f1:99:6d:68:9d:67:bd:bd:32:18:19:97:2d:44:dd:b7:
4f:e4:27:45:86:03:c4:16:20:b2:23:7b:2d:c7:a0:97:63:7a:
32:53:01:00:14:d7:56:aa:af:a7:c2:35:60:e7:f9:12:f8:8c:
db:0c:14:68:c5:4b:c6:af:cc:bd:20:ee:48:e7:0e:2c:33:2c:
43:fc:01:dc:40:11:42:46:f7:5c:e0:59:bb:58:c8:59:b3:5d:
88:34:86:f8:7a:2f:06:f1:5a:91:de:49:d2:6a:09:ea:af:94:
33:e4:36:fd:d7:22:65:38:16:4d:6d:da:86:67:ce:5d:4b:77:
92:5e:8d:3a:c2:9b:12:b3:7e:95:b6:d1:ea:66:e4:8d:4c:1b:
92:e0:0b:b2:58:36:1e:8b:43:91:c9:a9:34:26:2d:0e:32:2c:
7e:b7:6b:d7:87:02:e1:50:e8:2f:1b:7c:7d:c5:6e:c7:8d:95:
10:f5:0a:19:7c:12:f3:0a:2c:9a:25:1d:75:29:c5:9e:01:6c:
76:3e:9e:fd:eb:e3:c7:6e:25:57:ef:6e:c6:02:41:fd:f3:c6:
31:d1:66:c7:07:d5:97:40:87:4d:d5:1e:70:26:c8:d5:8c:2e:
09:96:46:6e:d6:2d:61:6c:b5:72:68:71:d9:50:c6:fc:83:0f:
a1:ee:3b:ca
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QzcyNTExMC8GA1UEBRMoMzQ4MThCQ0YwRDg0RTE1OTlCRDk5ODE3OTk1RTVFQzM5
QjFCMDE0QjAeFw0yNjA3MjIxNjI3MDhaFw0yNjA3MjkxNjI3MDhaMBgxFjAUBgNV
BAMTDTZhNjBlZjVkLWQ2NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrep91n8qf5qLhiFV3p6FV0/Gt3rYzeGTAy94DEsPVDWkRgQVuCJOG7MXYEb2v
rMOe1AhWoif2B2yKWFW8oHbsu3R1D8vI3z2rVt9uduJPfR4Ln07kLI7Ucv4hG6ft
hE9oAYO7iLuwIUdzipLadmkk59SMdCM8UgoDxxBzrpEAB0Mjg7gMMdBh8azs4MJo
xobDRtpafq3VC4vxkJ2mYEkfN/IFOI8RL5oBGrhpYu+UT3oN+wLygD6B5dSX3CHe
wpuosGqoHLuMPpk9VAt9KM0vGYxKRlGlXiV+pWzklP/seImbjH7xru8XJ3qQIorq
ohpDrsYgzCorIgnjOY2foBwpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURSNr31yF
dAKKtWJROH9jlXmPBiEwHwYDVR0jBBgwFoAUNIGLzw2E4Vmb2ZgXmV5ew5sbAUsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNzI1L0FDNkNEMTVDMTM5
OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZtYjJaZ1htVjVldzVzYkFV
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTklHTHp3MkU0Vm1iMlpnWG1WNWV3NXNiQVVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD
NzI1L0FDNkNEMTVDMTM5OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZt
YjJaZ1htVjVldzVzYkFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAkgPGZbWidZ729MhgZly1E3bdP5CdFhgPEFiCyI3stx6CXY3oyUwEAFNdWqq+n
wjVg5/kS+IzbDBRoxUvGr8y9IO5I5w4sMyxD/AHcQBFCRvdc4Fm7WMhZs12INIb4
ei8G8VqR3knSagnqr5Qz5Db91yJlOBZNbdqGZ85dS3eSXo06wpsSs36VttHqZuSN
TBuS4AuyWDYei0ORyak0Ji0OMix+t2vXhwLhUOgvG3x9xW7HjZUQ9QoZfBLzCiya
JR11KcWeAWx2Pp796+PHbiVX727GAkH988Yx0WbHB9WXQIdN1R5wJsjVjC4JlkZu
1i1hbLVyaHHZUMb8gw+h7jvK
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:47 2026 by rpki-client