
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier: +qeIvW3ogwuVax1amhiMZqJPgTjwgw+hdOBq0A/V8/0=
Subject key identifier: 5E:E3:65:DD:A4:42:63:2D:34:9D:14:71:72:32:E9:89:4C:5B:D4:20
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial: 0BD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number: 138A
Signing time: Wed 22 Jul 2026 19:18:12 +0000
Manifest this update: Wed 22 Jul 2026 19:18:12 +0000
Manifest next update: Wed 29 Jul 2026 19:18:12 +0000
Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: VnsE87y9McJgmPgg95wADWlTGWH2YY5l8iHVT+Ns37Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3028 (0xbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Validity
Not Before: Jul 22 19:18:12 2026 GMT
Not After : Jul 29 19:18:12 2026 GMT
Subject: CN=6a611774-3ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:63:09:55:c4:6e:49:6c:2e:f8:9f:b2:05:
d4:e6:da:b7:38:8c:98:ba:4c:01:30:8f:d2:fb:96:
6e:f6:f9:69:dd:91:67:63:b0:02:e8:ee:07:78:91:
65:2f:2a:e1:7e:81:b5:25:20:74:22:57:86:1f:10:
15:10:a9:c1:b4:73:97:b6:3c:b7:bd:f7:4a:07:a4:
27:ef:e4:ab:9a:fa:8c:f7:f9:5c:9b:7b:c2:b7:76:
55:27:d1:3c:bd:15:44:d8:d2:d0:08:6d:30:b1:dc:
60:a1:26:e9:86:31:57:0a:68:53:68:af:3e:2d:1e:
fc:01:b8:65:6c:44:4e:c0:d9:47:62:1a:5e:a2:45:
a3:ca:2c:e7:c9:13:33:7b:66:90:8c:0f:c0:65:b8:
94:23:e1:39:2f:d9:39:c1:43:69:32:d0:90:57:9e:
7a:fe:06:a6:21:39:97:59:6f:8e:63:9b:78:2d:08:
d9:38:c3:3f:72:ef:fd:2a:42:69:a9:3d:cd:39:8c:
8c:4b:17:8c:dc:9c:34:25:c8:e6:65:e3:40:96:44:
b3:3d:6e:54:d0:c1:6c:44:28:2b:ed:23:d7:5b:7d:
2f:65:f5:95:e4:33:6c:32:ce:74:af:e0:7b:16:0d:
f5:b7:40:10:cb:09:fc:42:a1:de:71:49:17:e9:e7:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E3:65:DD:A4:42:63:2D:34:9D:14:71:72:32:E9:89:4C:5B:D4:20
X509v3 Authority Key Identifier:
keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c2:a3:54:7f:a9:1a:d3:a8:f2:95:82:e5:98:de:e7:12:de:
2f:1b:76:43:90:68:65:41:e3:32:a6:0e:55:14:53:88:9d:4a:
a1:60:25:61:a7:68:b4:ae:e8:84:59:88:03:78:6e:7d:2f:1f:
a2:42:70:52:cc:73:e8:df:ab:c6:34:2b:0e:78:04:12:c3:1a:
31:22:9f:b4:d9:e3:cf:a7:65:22:94:ca:3b:b1:70:f3:3d:09:
47:f7:eb:eb:c0:63:a2:03:e9:56:6d:09:b9:fe:6e:1d:87:15:
62:2e:43:2e:e3:52:f5:62:1f:ad:2d:6f:5d:4f:a2:68:46:2c:
25:db:29:5a:47:b6:32:ce:af:01:5e:69:0b:b2:25:e8:cb:79:
82:2e:b8:89:5a:bc:da:c8:77:7a:ac:75:d7:cc:a6:e5:cf:47:
3a:40:6c:d7:87:ad:2a:4c:2e:70:c7:7e:e4:be:69:15:69:82:
ea:75:df:4e:74:4b:88:d1:2c:1b:d3:de:f6:b0:ee:cd:45:d8:
7d:fb:76:47:f1:94:af:39:28:b1:de:98:26:7f:1e:76:e4:74:
3a:e4:6b:fa:53:cd:bd:8d:6f:b7:8b:fd:6f:66:45:71:c3:42:
24:ed:1b:b0:7d:bc:aa:9e:d1:a3:dd:e5:9b:42:11:a0:ed:59:
25:21:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:51:51 2026 by rpki-client