
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
File: NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json)
Hash identifier: ys9Mw6vJTE1QfziTxJGuH+ZASmKanhvlbs2VyncAGMo=
Subject key identifier: B3:13:CD:29:2B:86:F9:89:F9:86:39:63:16:74:18:1B:69:D9:F7:AE
Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
Certificate issuer: /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
Manifest number: 0166
Signing time: Sun 11 Oct 2026 05:34:11 +0000
Manifest this update: Sun 11 Oct 2026 05:34:11 +0000
Manifest next update: Sun 18 Oct 2026 05:34:11 +0000
Files and hashes: 1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: CYw8S5Y3xD5ksbRV82VQzAPQGl9g7TArwb1EoBT1VUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 05:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Validity
Not Before: Oct 11 05:34:11 2026 GMT
Not After : Oct 18 05:34:11 2026 GMT
Subject: CN=6acb1fd3-58a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:fc:dc:ff:64:90:0d:0b:d1:7c:67:00:79:
5d:fa:87:a6:8c:51:4f:d2:06:5b:ff:fb:b2:4b:28:
8a:cd:12:c7:99:51:3b:08:25:99:5a:86:3b:54:24:
a2:3c:6b:ce:52:30:d9:05:45:51:da:93:76:f2:35:
5d:dc:9b:63:95:e6:28:4c:bb:22:52:da:bc:8e:24:
cc:f9:e0:a2:f5:a8:d6:88:61:ef:e0:58:31:b6:d4:
35:e7:80:d1:b1:53:8e:7d:92:3c:e9:37:3c:4d:ad:
5e:12:da:14:d4:6a:85:ab:d6:d4:1b:0e:19:8b:c6:
62:ed:4c:18:a9:fb:46:cb:24:f0:88:e8:22:f6:da:
46:5e:cc:92:5e:7a:37:f2:86:b3:c1:7a:ec:f2:4f:
a9:5d:01:bf:c4:a5:33:8d:9f:44:b6:31:3c:d4:ef:
05:fd:8d:50:a2:51:7e:f2:db:80:a4:b4:07:60:a1:
6f:0f:9b:30:7c:0b:ce:01:d2:06:f1:fe:02:f2:0c:
55:9b:27:1e:b2:bd:ed:a7:83:0f:77:a7:ed:04:7d:
b9:0d:38:aa:b8:59:dd:a9:71:ad:83:56:b0:da:fa:
de:02:cc:6d:4a:2b:95:8d:15:b6:78:b2:b3:4c:45:
08:d5:a7:30:fe:bc:95:31:fd:f8:ce:77:f8:98:e0:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:13:CD:29:2B:86:F9:89:F9:86:39:63:16:74:18:1B:69:D9:F7:AE
X509v3 Authority Key Identifier:
keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:da:dc:3e:1e:d0:b1:7d:93:a5:ad:56:6b:26:16:20:35:03:
ce:90:08:eb:c0:f6:d5:d4:6a:af:0d:a1:ef:05:24:75:42:ab:
e7:a3:11:4d:ff:7c:6b:46:7b:23:34:77:8c:c3:4d:cf:c7:24:
af:9e:b5:70:3e:b3:13:e9:8f:8c:0f:5c:68:29:6a:1b:03:c8:
13:5b:98:be:a0:75:47:bf:ee:c7:a5:53:48:cf:10:87:c6:32:
59:fc:b6:91:8d:ce:4f:83:92:eb:80:62:5b:03:eb:2c:1e:3c:
87:89:95:3f:10:2c:37:38:78:40:f0:f6:cf:fd:1b:d2:1e:8a:
c3:81:f7:1f:09:e5:f3:31:01:bf:87:a1:76:35:62:f4:4f:b3:
50:bb:71:fe:ac:6e:35:99:d6:66:53:82:cf:26:9c:3f:99:bb:
ca:86:bc:5c:db:d7:76:ff:96:d3:c9:00:eb:1f:4a:ca:13:eb:
38:d3:42:f8:12:54:d0:4d:33:0a:28:f8:93:23:5a:3b:dd:f3:
fd:e4:74:3e:d1:20:cb:15:fa:2b:54:53:75:c4:c5:64:54:08:
e3:6d:59:b1:65:c0:83:37:9c:78:ca:be:3f:4c:46:0d:44:e1:
c7:df:89:38:e8:04:75:74:3e:1a:a9:38:81:97:f7:4e:00:10:
83:89:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:49:11 2026 by rpki-client