
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json)
Hash identifier: V6ZeepfX5TRZ85xPF7NENqt6FavEDnoKP5cu92v+iD4=
Subject key identifier: F6:91:F1:DE:06:7F:6F:30:59:04:11:BF:2E:D8:3E:74:A2:09:4F:86
Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Certificate serial: 0D62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
Manifest number: 0CF5
Signing time: Wed 22 Jul 2026 18:52:11 +0000
Manifest this update: Wed 22 Jul 2026 18:52:10 +0000
Manifest next update: Wed 29 Jul 2026 18:52:10 +0000
Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: 1bTn+4FUd1QBqOZFoi6W/G3cK5XcNo24soRL4g0AG3E=)
2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: L+a99ChcdYXTUdlI8SMcM9q/gOf4xiAhNQHMn9pOfHo=)
3: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: jHZOhX6pXVCKVGuRMu6/Qtj0jZWQ/dR7y5jR6VsJLH0=)
4: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: 0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=)
5: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: L+FaF76EyXNSiJ+Q7nrC2JCd2vG+h02tFut904bOGvU=)
6: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: CtJAvelVbQFW8W7TSlpCNzjF7SjJYzPxCZMSyJhTE1Y=)
7: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: VoajrZr9XoIP/DZVh5lUYcb6S5Xwe4fZEZ0B0TI/qz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3426 (0xd62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Validity
Not Before: Jul 22 18:52:10 2026 GMT
Not After : Jul 29 18:52:10 2026 GMT
Subject: CN=6a61115b-d0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:bc:64:e3:cd:dd:46:e0:a0:7a:f7:d8:b5:
96:06:51:f5:7f:46:1d:f0:64:5c:36:dd:52:51:2c:
b3:5e:7f:91:50:66:4d:b5:82:cb:31:ad:1b:c0:52:
fc:d3:87:06:6e:3d:e0:3f:f3:3d:16:42:26:d4:d1:
87:1a:60:89:b8:3e:d3:67:9a:c7:f2:45:84:09:b6:
1d:d8:a7:c5:f6:e2:92:a4:70:cb:8b:10:81:b7:9a:
12:c2:fa:e8:60:1b:b8:65:4d:59:9b:a5:13:60:bb:
af:30:52:73:15:30:a6:01:f6:7f:d4:6a:d9:ff:60:
73:3e:53:03:22:e3:c1:fc:e4:9f:10:f6:9f:8f:90:
bc:49:91:da:4d:07:8c:f1:5e:b6:b8:f4:9e:97:47:
e0:0f:65:82:ed:e9:1e:57:e2:ff:90:fb:63:11:d9:
c8:7a:63:46:a6:a4:19:e6:57:c5:b4:9f:0c:5b:54:
2e:ac:f9:a5:30:53:46:dd:5c:74:8b:41:8b:81:09:
56:37:21:df:4f:f7:17:6b:64:ce:5d:2a:8e:2c:a8:
3a:f2:9e:28:bd:77:aa:77:c1:1b:13:c4:89:c7:f0:
e3:83:b1:1b:b2:98:ee:0e:d3:ff:2d:57:a4:80:13:
58:b1:53:1e:d6:0e:20:09:aa:6f:db:93:ee:38:2d:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:91:F1:DE:06:7F:6F:30:59:04:11:BF:2E:D8:3E:74:A2:09:4F:86
X509v3 Authority Key Identifier:
keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:b9:0c:b1:5f:59:91:cd:f2:52:b5:b8:b9:e8:ca:ee:f6:cf:
ef:32:97:2b:bb:13:7f:32:a0:87:19:27:6c:23:bb:34:97:e2:
b3:b5:de:61:8a:8e:fc:66:0b:58:ec:e9:6f:59:18:3d:dc:3c:
7d:68:30:a3:42:80:81:7b:ca:5a:d5:16:24:60:b8:94:d3:b7:
63:a4:de:57:d9:bf:99:c8:db:8e:04:09:8c:11:e3:7e:85:12:
a4:fd:cc:00:c9:e7:0b:4e:6d:70:d0:da:55:2e:81:2c:dc:52:
91:8d:57:e9:29:f3:8b:c0:61:96:fc:ba:31:d8:49:3a:29:da:
9a:a6:28:ed:b0:e7:09:0f:26:69:b5:89:38:3f:d9:0e:82:a2:
87:aa:b7:7d:f4:7d:7a:c0:18:59:96:f9:8b:e9:a7:f8:3c:49:
f1:a8:b1:05:ab:54:0c:20:df:40:01:cf:3d:a0:c9:31:31:50:
fe:f1:4a:7b:d2:9f:5e:7c:ae:97:0c:a0:5d:c7:4a:a4:1d:4c:
b5:24:c0:89:38:fb:35:d9:31:d1:d2:55:d7:f0:50:89:d8:d7:
c0:b3:54:f1:06:44:0f:27:77:98:28:7f:38:dc:96:b8:8c:dd:
a6:d3:1d:0a:14:48:d4:c6:7b:70:d0:b4:ff:0d:1e:eb:34:dc:
a7:25:e8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:30 2026 by rpki-client