
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json)
Hash identifier: H4W8c8SPsBWZkbbgwhx8p+qDQ2q70Dz8gZ87tdTAPW4=
Subject key identifier: 0F:2D:2F:E1:0B:DE:D9:1B:C5:33:94:FC:89:1F:61:31:F8:A0:4F:5F
Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Certificate serial: 028E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
Manifest number: 0282
Signing time: Wed 23 Sep 2026 01:43:22 +0000
Manifest this update: Wed 23 Sep 2026 01:43:22 +0000
Manifest next update: Wed 30 Sep 2026 01:43:22 +0000
Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: PsGiAT1a7m4wSo2FCuMq8n6476ky9XQEJdCsHCK8YVA=)
2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=)
3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: fdMdK5Sd7Plh2Ippunexfav/xQdX66KfuslWneo0vak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Validity
Not Before: Sep 23 01:43:22 2026 GMT
Not After : Sep 30 01:43:22 2026 GMT
Subject: CN=6ab32eba-b12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:91:15:a1:08:09:be:1b:fd:1d:13:0a:06:d7:
e6:bc:e5:ce:69:81:0e:b0:65:f7:a9:b8:41:19:0d:
70:be:b7:26:af:cd:92:28:e2:ec:47:19:45:4c:b7:
81:16:fd:5b:a3:cc:e9:ed:4c:e2:89:34:39:74:1e:
5f:0b:3c:57:33:10:83:43:7c:c3:b7:52:80:97:d0:
98:05:fc:92:7b:80:d5:8e:ea:18:14:3a:0a:bd:f8:
2f:e6:e2:3b:3d:28:ce:ba:b3:a9:8b:7e:ee:4b:5b:
7e:76:ec:e3:e6:a8:64:24:15:6d:2f:9c:41:99:88:
4c:0e:c3:8d:bc:ec:3c:f0:af:0f:29:eb:79:b3:45:
0c:20:fb:56:e3:73:6c:e3:6d:2a:25:26:2d:47:3f:
11:e2:c8:d9:a9:38:b9:09:fe:41:5a:57:f3:01:c1:
3c:2e:34:bb:37:5a:c2:8e:72:c6:d7:c9:e3:90:9b:
d9:71:21:7d:e0:eb:ba:f3:68:20:2d:be:5d:09:01:
58:e6:59:c0:6d:3d:39:36:e3:fe:2f:65:5e:dd:e1:
66:99:52:90:75:a8:fb:b7:88:6e:ab:c3:c0:e5:03:
b1:2e:91:f4:a4:88:26:e5:6b:c5:7b:84:e4:87:c7:
ed:4d:98:8a:26:df:b7:aa:77:3c:0a:de:33:48:96:
75:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2D:2F:E1:0B:DE:D9:1B:C5:33:94:FC:89:1F:61:31:F8:A0:4F:5F
X509v3 Authority Key Identifier:
keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a9:54:63:dd:6e:c7:06:85:08:e7:78:e4:9f:09:d4:29:6c:
c8:6f:3c:d7:7f:86:26:a4:d2:01:0d:7c:53:89:43:42:62:91:
61:b9:a6:25:ea:5e:94:82:f2:9c:6f:b4:06:5e:91:15:3e:fd:
6d:ba:f7:1f:5c:3c:7c:73:34:67:61:e4:17:9a:50:f8:38:a2:
8d:a6:85:0d:6b:c7:39:8c:ff:31:64:45:04:a4:81:32:a5:bb:
f5:96:6f:31:c2:f6:62:95:8a:e4:47:84:8d:7f:a4:10:db:d6:
ec:9b:88:56:82:a3:85:bc:34:1d:bc:14:7b:82:b4:8c:a4:fa:
88:53:d9:e9:3d:14:64:62:22:69:bb:49:4a:9a:c0:76:9e:87:
4a:87:cd:bc:e2:9c:83:c8:e2:94:59:44:f6:8b:87:c3:61:16:
0e:2c:7c:00:19:07:bf:ab:57:9a:ca:3b:4f:6c:10:b1:f7:a9:
d4:cd:fc:8c:b4:dc:80:d3:0e:4e:ed:73:ca:ad:a7:54:25:0b:
f6:dd:7b:1c:68:2c:ac:64:f3:fa:38:43:ac:f4:85:5f:88:95:
87:04:7d:88:88:33:8b:c9:cf:c1:2d:5d:c9:7f:1e:61:97:e2:
a7:15:d9:16:7f:61:fb:71:0c:71:49:fd:73:01:b0:c3:84:6c:
20:1f:f5:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz
REQ2MDczMEIwHhcNMjYwOTIzMDE0MzIyWhcNMjYwOTMwMDE0MzIyWjAYMRYwFAYD
VQQDEw02YWIzMmViYS1iMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6JEVoQgJvhv9HRMKBtfmvOXOaYEOsGX3qbhBGQ1wvrcmr82SKOLsRxlFTLeB
Fv1bo8zp7UziiTQ5dB5fCzxXMxCDQ3zDt1KAl9CYBfySe4DVjuoYFDoKvfgv5uI7
PSjOurOpi37uS1t+duzj5qhkJBVtL5xBmYhMDsONvOw88K8PKet5s0UMIPtW43Ns
420qJSYtRz8R4sjZqTi5Cf5BWlfzAcE8LjS7N1rCjnLG18njkJvZcSF94Ou682gg
Lb5dCQFY5lnAbT05NuP+L2Ve3eFmmVKQdaj7t4huq8PA5QOxLpH0pIgm5WvFe4Tk
h8ftTZiKJt+3qnc8Ct4zSJZ11wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8tL+EL
3tkbxTOU/IkfYTH4oE9fMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF
MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts
TTF6SlFNeUlLTFk5MWdjd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiqlUY91uxwaFCOd45J8J1ClsyG8813+GJqTSAQ18U4lDQmKRYbmmJepelILy
nG+0Bl6RFT79bbr3H1w8fHM0Z2HkF5pQ+DiijaaFDWvHOYz/MWRFBKSBMqW79ZZv
McL2YpWK5EeEjX+kENvW7JuIVoKjhbw0HbwUe4K0jKT6iFPZ6T0UZGIiabtJSprA
dp6HSofNvOKcg8jilFlE9ouHw2EWDix8ABkHv6tXmso7T2wQsfep1M38jLTcgNMO
Tu1zyq2nVCUL9t17HGgsrGTz+jhDrPSFX4iVhwR9iIgzi8nPwS1dyX8eYZfipxXZ
Fn9h+3EMcUn9cwGww4RsIB/1aA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:04:06 2026 by rpki-client