
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json)
Hash identifier: 79BWMV3wnEPnA9eMTiece0SJdqVbJki85SmNM0rn8p8=
Subject key identifier: 2B:B9:94:A6:3E:1D:4B:23:DB:D8:F9:6F:F0:81:C3:B2:29:CD:C2:1D
Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Certificate serial: 08BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
Manifest number: 0894
Signing time: Tue 06 Oct 2026 20:55:25 +0000
Manifest this update: Tue 06 Oct 2026 20:55:24 +0000
Manifest next update: Tue 13 Oct 2026 20:55:24 +0000
Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: JP60/6aeS2EIdG3MAuLxqZa4JtPj/Os39DWSh4J+D5o=)
2: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: c6LJhskoptnL62vsB9jLZiT/hEUllVG1aUqGIGkiID8=)
3: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: /CMhnqrhdVYNSUaizVq/uPj8VXgZqAfmKsDyp7bdTWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Validity
Not Before: Oct 6 20:55:24 2026 GMT
Not After : Oct 13 20:55:24 2026 GMT
Subject: CN=6ac5603d-0a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:22:60:6a:b5:b0:62:e2:c8:42:5d:2f:79:
3b:39:c1:1a:a8:7b:c0:02:e8:0b:f4:af:58:de:c9:
28:f1:d6:c1:4f:b1:bf:4a:db:47:de:09:59:b1:1a:
ed:c8:05:59:8f:28:b7:26:05:90:97:45:e4:43:c8:
5d:f9:9e:04:9b:db:e1:19:59:a5:b5:c7:c4:67:bd:
88:d8:80:89:5c:8a:73:60:83:84:4a:ea:f4:a7:29:
ba:6c:01:19:35:bc:a8:ab:5c:8c:95:d4:b4:f1:95:
b2:2a:5f:ec:f3:8b:4a:61:23:6f:e7:85:88:31:1b:
a9:72:9e:4b:da:c8:a1:12:b5:88:40:88:82:9b:b1:
d3:5b:55:b0:60:36:37:be:3d:7c:35:53:5c:b7:ee:
14:75:6e:de:94:68:97:bb:b0:6f:1e:c8:f5:3f:03:
a5:eb:29:2f:63:fd:01:99:4a:b4:c4:ca:40:e5:4c:
11:b2:a6:c2:6d:57:cb:53:b1:35:90:67:9a:44:a1:
2e:bb:92:d2:e6:ee:a5:09:81:d5:97:d1:34:5a:5f:
14:4a:e2:ab:87:6f:01:ef:ba:47:a8:13:f3:60:0d:
e7:4d:af:18:22:c5:32:37:07:57:ea:f6:aa:2f:c7:
aa:45:76:f8:3b:05:f2:77:42:fa:92:8c:02:a9:84:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:94:A6:3E:1D:4B:23:DB:D8:F9:6F:F0:81:C3:B2:29:CD:C2:1D
X509v3 Authority Key Identifier:
keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:ca:ae:14:29:3b:ea:15:41:21:4a:f8:01:85:7e:a7:d5:61:
39:13:4a:8b:2d:de:eb:70:30:2a:e3:e0:b6:36:eb:41:62:10:
86:e3:b4:5f:5c:ec:f1:d2:29:59:7e:26:b5:ac:16:d2:3d:6a:
47:13:1f:28:25:08:a3:04:62:3f:67:73:a2:60:d9:54:c6:af:
33:62:fd:46:e4:81:5a:e1:c6:d4:59:f3:36:8d:13:4a:9a:90:
b1:35:b5:77:08:7e:2f:30:d4:3a:5d:ec:2b:b5:f9:c7:fa:f1:
e1:69:90:81:3d:5f:53:2a:a2:d3:b9:21:c3:0a:31:f9:42:fe:
7b:94:d3:29:b1:bc:36:67:0a:49:d0:e5:4b:16:44:d8:ce:00:
1b:5c:c7:6b:44:73:03:c9:8d:c4:7e:5b:a0:00:04:fb:3b:7a:
0e:c7:ef:76:19:e5:9c:d6:07:ac:d8:53:b0:84:c4:42:f6:de:
3e:d0:ac:a7:a3:3a:ab:dc:9e:15:aa:0c:6e:34:38:8e:9e:c7:
42:f1:18:64:b1:33:51:ed:c5:59:94:83:37:15:46:1f:d8:4a:
f7:2e:66:2e:78:32:a1:ce:b1:25:58:00:c4:a6:c3:95:bd:09:
77:58:bd:2d:31:3b:79:e2:e9:5a:ea:9b:97:c8:e6:63:d2:11:
8a:0d:eb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:17:39 2026 by rpki-client