
$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json)
Hash identifier: aZQzdkkfIWIou4MEYj5pxUTZXJmtBMeYXelgU/PMiPs=
Subject key identifier: F3:08:B6:C3:8C:ED:F3:59:49:CA:96:5B:B8:E8:1A:E1:86:1A:1C:0F
Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Certificate serial: 1843
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
Manifest number: 182B
Signing time: Tue 24 Mar 2026 16:26:22 +0000
Manifest this update: Tue 24 Mar 2026 16:26:21 +0000
Manifest next update: Tue 31 Mar 2026 16:26:21 +0000
Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: jPo6GtmZ4FSOEua6ApTVVfn6TR3xq1ADn/kjFFJVXMY=)
2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: vMFDHmT3Cr0URSEHVxnjw0fdQ9sbaEgQ2dVomCT14d0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl
rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6211 (0x1843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Validity
Not Before: Mar 24 16:26:21 2026 GMT
Not After : Mar 31 16:26:21 2026 GMT
Subject: CN=69c2bb2d-c413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:1a:fc:38:67:e2:cc:a1:9b:d6:de:cd:16:
e6:72:f3:2a:a9:e7:6e:0e:b7:3c:32:9d:84:30:70:
0a:6c:c3:84:e2:f5:38:68:59:5b:14:4d:2d:6c:5c:
7b:2e:91:17:3c:91:9b:2d:88:54:dd:cb:08:c3:d9:
6d:cd:c7:f6:d7:9c:7c:e2:c1:20:d5:21:1a:6e:65:
3d:11:d6:e2:21:eb:a4:5c:17:06:f8:59:94:b2:99:
59:1f:86:9c:2e:37:1e:d1:2f:fa:65:fa:42:35:2a:
42:59:b5:d2:5d:bf:ab:70:82:4e:d2:b1:dd:4b:62:
73:02:69:58:ee:22:10:e0:fc:8b:18:bd:bb:72:44:
df:d7:ab:fc:dd:03:57:02:46:f1:3b:15:24:d5:20:
01:a7:98:d1:b1:0b:48:b7:34:89:d5:02:b6:11:19:
44:d5:e2:89:a9:01:d2:f3:cb:0d:b4:82:31:33:9d:
eb:b6:bb:df:ab:ae:27:96:48:11:c3:2a:51:b8:97:
a6:f0:67:9f:7a:16:6a:8f:73:df:c2:96:03:e8:f2:
4b:ec:28:94:33:33:0a:05:d3:0a:54:9d:16:67:91:
54:3a:4f:9b:f7:94:11:25:73:6f:48:dc:e0:f8:13:
0f:a9:06:aa:38:ef:47:b0:d2:51:bc:cc:92:f2:32:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:08:B6:C3:8C:ED:F3:59:49:CA:96:5B:B8:E8:1A:E1:86:1A:1C:0F
X509v3 Authority Key Identifier:
keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4e:c1:51:8b:68:21:d7:2d:e5:44:1e:3c:53:d1:23:20:0a:
71:83:0b:4c:7e:56:27:fb:2f:d7:7d:70:ec:95:da:e6:76:6e:
87:85:d1:94:81:7b:34:50:11:5b:44:cf:ed:3c:1a:32:10:76:
c3:bd:f4:f6:3c:c1:ae:a5:c9:e7:21:8c:33:60:83:1a:28:d8:
48:dd:89:91:b9:3b:a4:4a:e4:20:25:b3:0c:02:b0:ac:ac:af:
82:10:fa:3d:0f:13:82:c4:38:0a:eb:6e:fe:b9:10:16:4b:91:
61:8b:9f:45:69:bf:fe:81:4b:55:ed:c2:31:48:75:1c:da:cb:
f7:d2:dc:f0:54:89:c6:60:77:c0:4b:78:ce:bd:7d:43:ab:ba:
17:04:66:c4:85:f0:80:71:68:b2:4e:d6:c1:af:58:f6:ec:36:
81:25:82:69:82:60:73:f7:b4:1b:33:62:4a:15:ae:2b:4d:f6:
e4:8b:99:db:b6:da:cd:18:e3:13:ba:ae:75:86:51:71:ad:f8:
ff:32:57:f7:6a:29:f7:41:52:1f:14:fc:3b:d2:f3:59:5f:32:
3a:73:c1:c8:aa:71:8d:4b:a9:38:74:8f:97:50:0a:48:5d:30:
0f:23:50:f9:a4:0c:0b:00:f6:ff:f9:60:88:cb:d6:1a:93:35:
78:f5:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:19 2026 by rpki-client