
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
File: NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json)
Hash identifier: IBYZfFfVg4hmrU51N3ObJz5zFCuXQ2un4VqBqC0NHeg=
Subject key identifier: E8:97:BA:67:63:C8:91:88:07:59:EA:05:A0:56:73:18:3C:D6:70:2D
Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B
Certificate issuer: /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
Manifest number: 012E
Signing time: Sat 03 Oct 2026 06:20:24 +0000
Manifest this update: Sat 03 Oct 2026 06:20:23 +0000
Manifest next update: Sat 10 Oct 2026 06:20:23 +0000
Files and hashes: 1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: z88SEcpzTwQuRcW5YCJ3eyEAUnjTHGNlBSs5djwLABk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl
rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B
Validity
Not Before: Oct 3 06:20:23 2026 GMT
Not After : Oct 10 06:20:23 2026 GMT
Subject: CN=6ac09ea8-bb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:13:1b:ba:ed:aa:ca:c1:ab:43:ed:de:b9:
6d:be:d3:d0:bc:68:4e:3c:de:34:f1:67:71:1a:46:
22:45:39:dc:5b:7f:7d:d0:25:6a:e3:87:7c:1d:17:
54:3e:53:ac:9c:d8:f4:26:7f:b2:f5:ff:f4:59:4b:
95:a9:53:5b:28:1c:91:8d:e7:72:c4:bf:88:45:3d:
0e:14:c8:88:ff:48:f1:41:3a:d3:28:5b:e9:df:47:
7e:ba:15:84:d8:62:48:b1:36:bb:ed:c9:21:ca:0e:
80:3d:c7:27:37:65:0a:c7:69:6f:d0:3e:a6:a2:e3:
5e:52:e1:ac:9e:d7:bd:ab:49:8b:90:b3:71:d1:cd:
cf:89:2f:f5:ba:23:04:24:7d:3a:c5:a1:b1:ad:fb:
b5:38:b9:6d:33:81:be:f3:de:e3:aa:f3:cd:c8:ca:
b2:81:54:98:c0:70:dc:af:ae:a7:7f:21:eb:f7:17:
87:26:29:1b:71:49:df:c9:b2:dc:23:2b:5e:ee:17:
1a:68:09:33:85:ec:87:a7:dc:b1:f0:b1:09:2e:73:
ca:f2:77:c3:38:e8:2f:32:57:fb:6a:51:18:d5:70:
cd:d6:e7:b4:79:6e:fb:2f:ab:70:09:14:35:c7:7c:
9c:98:64:ce:4f:c7:ac:22:12:ac:7c:99:42:c2:bd:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:97:BA:67:63:C8:91:88:07:59:EA:05:A0:56:73:18:3C:D6:70:2D
X509v3 Authority Key Identifier:
keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:12:aa:7d:80:6c:2a:44:cc:81:88:80:2d:e4:ce:94:53:41:
66:a2:4d:83:77:be:44:af:32:8a:db:7e:d8:0d:f2:92:0b:c2:
38:79:c2:96:12:1c:87:da:02:01:6f:60:9e:83:ee:b1:19:4d:
f6:b2:dd:c5:a8:c4:2a:ee:25:22:c1:d1:89:8f:99:f6:03:12:
c6:52:04:d9:12:41:0f:51:df:83:ba:5d:9d:33:6d:20:f0:aa:
0b:b2:65:e0:33:34:56:93:64:a7:13:b8:9d:f8:a6:76:5e:58:
a4:74:96:2a:8c:4b:a5:56:51:0d:04:44:6b:18:2c:9b:40:02:
c8:17:b5:04:9e:b1:0a:54:1e:b8:55:4e:0d:ce:e1:c4:58:d6:
e7:4d:c2:33:2d:0e:fa:62:49:96:86:d8:99:2b:03:a7:d4:d1:
3d:3a:04:bb:0d:23:53:25:a5:4a:3c:da:22:6d:2b:f9:50:8b:
17:98:9e:1c:a8:c3:e2:26:1d:94:13:61:d6:d1:66:a6:16:64:
4e:3a:70:c2:47:24:7d:28:da:ee:f2:04:f7:67:f0:cd:ab:fa:
73:1d:bd:a4:b7:c5:d6:c8:28:02:40:f6:81:37:67:13:f4:d8:
e4:e4:3a:a3:c2:19:ea:b5:df:7d:29:77:d7:64:63:ad:07:42:
ff:ee:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:37:04 2026 by rpki-client