
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier: NzYHmfZpHybgJyfhrUVntez+uQuRXdoZs5CPlUgYw/U=
Subject key identifier: 10:6C:55:D2:1F:41:98:A7:8C:B8:F4:CB:A0:DF:EB:73:09:F3:B4:B9
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial: 0BF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number: 13D0
Signing time: Sat 26 Sep 2026 19:00:05 +0000
Manifest this update: Sat 26 Sep 2026 19:00:04 +0000
Manifest next update: Sat 03 Oct 2026 19:00:04 +0000
Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: dGNT0zrraCcIbFp6k+D/Bfe8mTUhboT7YZjzBmRpSbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Validity
Not Before: Sep 26 19:00:04 2026 GMT
Not After : Oct 3 19:00:04 2026 GMT
Subject: CN=6ab81635-b3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:89:84:d0:3e:10:87:de:be:3e:8a:b4:58:
3b:2f:94:94:5f:47:c1:b4:1f:73:e6:4f:6c:a4:ca:
4f:e1:6d:6e:74:70:15:81:4d:3b:89:81:03:4c:9e:
61:a8:05:86:ab:83:87:d2:ff:c1:7b:e2:ef:5d:83:
ea:1a:cd:f9:3d:bc:50:e7:51:d8:97:69:01:a8:d4:
ee:4c:1b:26:85:a6:6b:92:29:19:0f:fc:84:12:32:
44:a9:17:eb:0b:69:17:2b:7a:2b:d3:b2:35:27:4c:
0c:fe:b8:cd:06:49:2a:ed:db:26:10:24:20:17:2f:
3f:10:61:4d:6f:4b:46:69:37:5e:73:a3:e2:82:b2:
47:29:28:45:2c:4d:37:fe:74:7f:3e:53:ef:a4:2e:
11:d9:bc:3a:4a:cc:6f:ba:db:85:c0:43:18:df:2f:
e7:2a:7c:f6:dd:3e:86:f2:6a:a4:7c:25:b0:c7:10:
75:53:90:b7:04:37:6c:9c:20:73:fa:5a:6d:eb:86:
7f:2f:4b:71:0c:86:2d:f2:82:ee:01:c4:57:68:22:
b7:aa:6d:2f:af:bd:b6:40:d6:6e:54:41:6c:ce:42:
a6:ae:ae:cc:b8:f7:53:ed:7a:75:ab:16:a7:4c:80:
77:12:e4:68:40:83:2f:ac:31:94:c0:0b:f5:2d:f3:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6C:55:D2:1F:41:98:A7:8C:B8:F4:CB:A0:DF:EB:73:09:F3:B4:B9
X509v3 Authority Key Identifier:
keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b8:ff:dd:e1:dc:88:3b:a1:3b:3c:3b:a2:a3:7a:9f:d8:b2:
50:ba:f0:2b:91:b2:ec:f3:40:83:51:8d:69:bb:85:f9:6a:85:
eb:3c:50:67:1c:9b:84:09:27:2d:c6:7d:e5:f6:95:ce:24:db:
ff:51:29:99:7b:2f:c0:1a:3c:e4:e8:af:0f:9b:04:f5:f8:02:
a5:ef:bb:36:85:dd:65:d5:92:87:cd:11:da:1e:64:8f:24:08:
6f:ff:df:8d:3b:b3:4e:db:78:2c:c3:db:04:bc:73:be:0b:f6:
f4:37:b0:1d:08:4e:d0:19:8c:c7:a1:d4:e6:fb:e8:a7:a7:ef:
f9:97:3a:6e:47:23:e8:b3:cc:2a:3d:5f:42:7b:b9:73:31:4f:
05:41:a2:d7:d0:df:ef:96:4a:c5:cc:f5:53:9e:e9:e0:39:31:
09:6c:70:14:0e:1f:6c:da:6d:31:cb:c7:4c:b1:13:e1:30:e4:
7f:37:90:ea:bb:ea:f1:54:62:a5:65:ad:ac:e7:42:1d:74:03:
a1:10:54:a4:92:1c:24:5f:5d:94:f3:ef:b2:a5:59:aa:2d:d4:
24:bb:c4:29:d5:20:2d:a2:bb:0d:d6:f4:46:32:f4:85:78:b3:
55:70:87:24:ae:c9:14:0c:81:e4:dc:1a:cd:c3:cd:98:64:64:
ee:7a:5a:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3
NjRERUQwRkUwHhcNMjYwOTI2MTkwMDA0WhcNMjYxMDAzMTkwMDA0WjAYMRYwFAYD
VQQDEw02YWI4MTYzNS1iM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmOeJhNA+EIfevj6KtFg7L5SUX0fBtB9z5k9spMpP4W1udHAVgU07iYEDTJ5h
qAWGq4OH0v/Be+LvXYPqGs35PbxQ51HYl2kBqNTuTBsmhaZrkikZD/yEEjJEqRfr
C2kXK3or07I1J0wM/rjNBkkq7dsmECQgFy8/EGFNb0tGaTdec6PigrJHKShFLE03
/nR/PlPvpC4R2bw6SsxvutuFwEMY3y/nKnz23T6G8mqkfCWwxxB1U5C3BDdsnCBz
+lpt64Z/L0txDIYt8oLuAcRXaCK3qm0vr722QNZuVEFszkKmrq7MuPdT7Xp1qxan
TIB3EuRoQIMvrDGUwAv1LfMc0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBsVdIf
QZinjLj0y6Df63MJ87S5MB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0
NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245
TzdUTGlPUFE3UngyVGUwUDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfbj/3eHciDuhOzw7oqN6n9iyULrwK5Gy7PNAg1GNabuF+WqF6zxQZxybhAkn
LcZ95faVziTb/1EpmXsvwBo85OivD5sE9fgCpe+7NoXdZdWSh80R2h5kjyQIb//f
jTuzTtt4LMPbBLxzvgv29DewHQhO0BmMx6HU5vvop6fv+Zc6bkcj6LPMKj1fQnu5
czFPBUGi19Df75ZKxcz1U57p4DkxCWxwFA4fbNptMcvHTLET4TDkfzeQ6rvq8VRi
pWWtrOdCHXQDoRBUpJIcJF9dlPPvsqVZqi3UJLvEKdUgLaK7Ddb0RjL0hXizVXCH
JK7JFAyB5NwazcPNmGRk7npa2Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:59:52 2026 by rpki-client