
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json)
Hash identifier: dAc6CSaJ25dzEDyDvdOIKtWwnAqWI1VpTlGjen8fYa4=
Subject key identifier: 35:1B:AB:8B:6B:6C:F4:DB:77:9B:0B:08:E4:74:6F:F2:33:85:EB:D4
Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Certificate serial: 09F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
Manifest number: 0A93
Signing time: Tue 22 Sep 2026 19:39:23 +0000
Manifest this update: Tue 22 Sep 2026 19:39:23 +0000
Manifest next update: Tue 29 Sep 2026 19:39:23 +0000
Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: 83M3dby9Kszo+PisKKOUJWN/lHClYgPRCOTeApgQz38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2548 (0x9f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Validity
Not Before: Sep 22 19:39:23 2026 GMT
Not After : Sep 29 19:39:23 2026 GMT
Subject: CN=6ab2d96b-9e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:2f:a6:37:81:a1:20:95:e4:f5:60:82:41:
c1:69:ca:94:17:8c:16:9a:db:21:5d:bd:23:10:5b:
43:12:45:4b:a6:7b:99:ac:fd:d2:03:9c:54:73:18:
5d:18:f6:75:24:1a:bc:a9:74:ba:7c:32:56:4a:04:
81:c6:d3:05:96:5b:ea:4d:8a:45:12:9a:26:11:96:
6d:80:a6:a9:ba:6c:0b:0c:d6:63:fe:ba:63:fe:22:
3b:b6:44:68:e0:b6:1f:64:38:76:a6:46:e1:9c:0e:
eb:fe:f0:08:b6:a7:e2:87:1c:5c:65:08:d9:2e:6d:
d0:61:ec:74:bc:e4:b2:3b:5a:ec:bf:95:24:c7:ba:
e7:3c:bb:50:c4:8e:33:c7:8e:3b:67:0b:4c:6d:d3:
22:78:ea:93:5a:85:fa:85:0a:54:d3:0e:2a:24:de:
f9:de:c3:53:53:12:22:90:0f:c5:d4:da:e4:49:eb:
2d:9c:58:36:e5:86:23:b3:eb:33:fd:ca:62:8e:1f:
df:0c:7c:d1:58:cc:14:12:f9:84:57:8a:63:77:b9:
16:a5:1e:57:41:ba:f5:95:6f:9f:55:93:a0:32:73:
2a:af:fe:ab:63:ec:5d:80:16:29:4f:52:fe:2e:a3:
2c:94:5d:dd:52:73:2e:7c:b8:31:92:78:05:75:04:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1B:AB:8B:6B:6C:F4:DB:77:9B:0B:08:E4:74:6F:F2:33:85:EB:D4
X509v3 Authority Key Identifier:
keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:31:46:9e:39:c0:de:9c:fe:3d:ba:9e:1c:12:d5:47:20:a2:
c3:20:17:7f:01:88:2e:67:1d:fc:a8:05:be:d2:7f:ac:58:92:
ca:f5:5e:c0:52:4f:79:a3:d7:3e:92:fe:7e:b0:4d:11:2f:2b:
2e:d4:bc:fc:3c:b6:e9:c4:18:42:88:37:06:53:dc:5e:7f:a6:
80:ec:e5:a6:47:ef:61:0e:8f:17:d3:b6:32:7c:7e:97:cf:7d:
af:9f:d5:b8:43:e1:bc:22:61:40:cd:b9:73:ae:99:31:51:0e:
a2:11:d6:03:59:6d:bc:44:66:d9:db:63:10:90:ed:55:7e:10:
f0:20:23:c9:64:a6:d0:17:1f:5a:2d:99:f7:1b:9c:0c:b8:61:
e9:ff:4a:4d:72:dc:3d:3e:8a:37:4d:7c:02:d7:8a:8d:d5:9c:
37:a9:33:8b:87:6d:04:c6:e5:31:09:82:86:b4:84:ba:de:fc:
45:73:e0:5c:2d:27:01:4d:48:b8:29:57:e0:3b:e7:c9:57:4e:
3b:82:98:72:64:b7:f3:d0:a2:e4:b2:03:b3:37:f9:ea:8a:6f:
79:c3:5b:57:00:b6:60:73:23:90:95:b9:80:79:12:d0:66:50:
d1:f2:ba:14:ba:af:99:20:3b:09:2a:3d:36:15:9d:9c:02:7c:
aa:19:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:15 2026 by rpki-client