
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
File: NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft (raw, json)
Hash identifier: D4dmPihi6w7HNqvCXK3SQWhQ3t4a7CvCeneVar7+vsc=
Subject key identifier: 63:3E:C3:B9:8D:59:D9:C8:8D:88:70:63:5F:1F:97:32:9E:E2:08:3D
Authority key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
Certificate issuer: /CN=A915BC71/serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
Manifest number: 2E
Signing time: Thu 23 Jul 2026 10:45:08 +0000
Manifest this update: Thu 23 Jul 2026 10:45:07 +0000
Manifest next update: Thu 30 Jul 2026 10:45:07 +0000
Files and hashes: 1: NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl (hash: OFChXs49a1tnMzNK+CFM8fwbdh1PlAdLZGY6LP8cuJ0=)
2: 045117A63F0611F1B36B08F4C9833773.roa (hash: yc41YsNACmYj/Sr/DAPgp/0vliNwQTb4cuVsDR9CDfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl
rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
Validity
Not Before: Jul 23 10:45:07 2026 GMT
Not After : Jul 30 10:45:07 2026 GMT
Subject: CN=6a61f0b4-6e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:6d:06:a6:df:92:a4:dd:db:95:38:f5:5c:
fd:13:0d:78:5e:30:d3:a9:fc:d6:19:02:4b:91:05:
5b:9b:cc:8d:20:00:9e:a5:e2:33:32:a3:de:ed:1d:
01:de:6b:1b:02:6c:ce:4b:3d:ab:07:63:b2:df:9f:
ae:39:3d:42:79:65:33:c8:a7:17:af:5b:e8:8a:c3:
cb:23:04:d8:4a:e3:3b:99:f0:68:b6:60:72:e3:75:
1f:87:ef:f3:89:13:28:42:a1:79:af:4a:fb:33:84:
74:e5:63:b1:44:08:4f:01:8a:58:c3:7a:c9:7a:e8:
78:d3:13:ac:4c:12:33:45:e8:e1:c5:cc:fa:c1:69:
3f:b4:95:84:c7:d9:59:b7:38:7f:5f:75:e0:76:5e:
fb:a6:8b:dc:1b:e8:4e:3b:15:9f:9b:ab:22:09:6d:
7a:79:07:9a:b1:02:08:88:ac:31:35:1b:b0:55:41:
85:14:f1:50:98:55:d5:0e:34:12:c5:e1:d2:06:eb:
76:39:4b:9c:7e:fb:9a:7f:d2:48:f3:d6:0b:21:9e:
59:ad:09:f4:5f:82:a3:e5:15:78:91:da:9a:49:17:
e7:b3:4a:5f:e9:bd:5e:a4:a1:e8:62:a0:b9:47:0f:
9d:c6:69:70:eb:83:57:08:ac:43:d3:84:48:be:6e:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3E:C3:B9:8D:59:D9:C8:8D:88:70:63:5F:1F:97:32:9E:E2:08:3D
X509v3 Authority Key Identifier:
keyid:35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:aa:2f:53:49:9a:05:85:64:8e:17:a0:ad:74:86:09:6b:d5:
d8:d1:ac:42:87:4c:83:cd:b9:fc:d3:35:51:e2:87:9b:0c:39:
d5:b1:81:ce:27:be:81:f1:4b:c0:63:8d:f3:44:27:de:47:a6:
71:1d:8f:b4:2a:6e:a3:bd:f4:e5:a2:03:b9:5f:75:b7:bf:62:
00:80:85:4d:94:c7:ae:7f:b6:41:95:11:de:89:4f:eb:d2:e8:
7b:2f:3f:97:1e:7a:9d:a2:7d:91:a0:ee:d0:d2:0d:b3:8a:11:
f1:3b:f5:f1:36:49:9d:9a:af:fb:e5:16:43:ea:16:0a:ff:e2:
60:7a:0f:36:39:98:5f:73:9e:e3:40:b9:b0:62:61:ef:6b:f0:
46:53:68:e4:9b:d7:5c:f4:4d:71:ed:e0:aa:1b:26:1a:30:b2:
5c:df:54:2b:8b:2c:3b:72:0a:a8:5b:6c:34:76:85:2c:0e:5a:
37:31:ce:58:1c:4a:39:a1:ac:6f:c1:05:74:35:bb:b4:c3:16:
49:e5:e3:e4:92:0b:a7:46:46:d2:9f:64:d8:dd:64:d2:af:4a:
c0:4f:3a:91:fc:69:cf:b3:90:61:01:37:c0:68:27:03:89:b5:
a5:11:9d:90:0c:d7:5f:25:21:ed:41:7e:a4:f8:0c:6a:61:00:
3e:11:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:50 2026 by rpki-client