
$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json)
Hash identifier: JG+RVStH9DyTI3gvxC4oKZ40qUzCSGu4eKlMiEZd6+I=
Subject key identifier: 9E:68:21:3F:00:C9:DB:A5:FC:7F:04:80:7A:22:0B:31:D1:A0:D0:A1
Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Certificate serial: 0619
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
Manifest number: 0610
Signing time: Tue 24 Mar 2026 22:34:07 +0000
Manifest this update: Tue 24 Mar 2026 22:34:07 +0000
Manifest next update: Tue 31 Mar 2026 22:34:07 +0000
Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: yeyQBFwRvQyCnV9wm1VsUs8ClFNGZ5sr89yz/ngQVV4=)
2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: usDOtB9gsXFp/fYqVlEN73gvUQeHa2M7YP3Jv7AgQ9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1561 (0x619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Validity
Not Before: Mar 24 22:34:07 2026 GMT
Not After : Mar 31 22:34:07 2026 GMT
Subject: CN=69c3115f-7626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:96:c1:6b:95:07:98:32:1b:c9:1f:7f:fc:
17:ae:ca:c2:79:42:cb:2e:34:38:42:7f:a7:48:c3:
9a:77:4b:72:93:4f:f3:e4:f3:53:54:54:4b:c1:8f:
83:54:6f:4b:c6:c5:af:ff:30:85:74:e2:11:45:51:
07:13:4a:ef:87:ea:e4:64:ae:b4:3f:0f:79:cb:97:
15:bd:99:fd:63:30:a1:e7:f1:46:a2:09:1f:e2:3d:
68:c8:f0:fa:ec:83:c3:07:f4:75:68:ab:c3:65:2e:
c0:94:37:de:b1:7c:08:a2:22:a9:32:d1:ae:e3:86:
ff:06:af:0a:e5:e8:8f:67:b2:14:22:54:09:c7:51:
8c:27:72:a0:30:a1:c9:c6:d9:15:92:e6:a3:09:1d:
00:4a:2e:de:07:b4:37:3f:1f:bc:75:97:f8:b2:a9:
ce:69:ac:f7:81:d6:d6:38:52:55:12:3e:5f:31:68:
42:16:b9:b7:64:d0:a0:67:3b:ab:bd:ab:4d:21:c1:
c9:bd:a8:b0:ec:24:e2:6f:63:98:72:63:f0:33:8e:
c1:4b:91:58:ba:0f:78:4b:b8:93:a0:bf:71:54:86:
8b:a5:91:b8:ea:85:0e:33:5d:68:79:2f:90:3c:a1:
87:b5:69:4e:ed:2f:92:6f:9f:5f:08:90:15:d7:03:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:68:21:3F:00:C9:DB:A5:FC:7F:04:80:7A:22:0B:31:D1:A0:D0:A1
X509v3 Authority Key Identifier:
keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:e5:b9:14:f2:a3:8c:28:39:7f:6a:26:dc:56:36:21:10:f1:
fe:42:a5:48:af:be:a2:6d:20:20:95:16:dd:a3:3f:db:61:9a:
65:e1:5c:82:e6:b2:4b:14:19:68:ff:20:05:7a:69:80:6c:a6:
77:d3:4c:20:ee:4d:89:fb:1b:0f:6c:9c:fb:dc:d5:7d:aa:1a:
92:6e:78:7b:ea:92:3f:7b:23:2c:97:59:03:fe:9e:16:5e:32:
4f:91:bf:c5:08:a5:9e:ab:02:09:87:d4:83:ea:76:65:8c:b3:
0d:85:30:40:9e:df:99:8b:81:a2:a9:22:1a:33:b8:6f:72:97:
10:96:e6:5e:38:22:c1:b3:18:c5:f9:9b:e9:6d:e9:19:e9:39:
ec:22:ae:6c:b6:48:6a:a1:ef:fb:c4:59:90:e1:20:62:3e:0f:
b3:d9:a9:ef:84:5e:9d:4e:cf:c6:8e:1c:a8:8a:8f:4e:45:01:
6e:cd:dc:37:0e:ef:fb:21:93:7c:a4:cb:78:2f:69:1d:56:3d:
1d:dd:1e:34:ee:fb:1d:43:dd:78:cc:8f:96:a0:0b:e2:67:d9:
98:aa:06:58:12:97:73:4d:98:c9:ca:d1:14:f8:d7:49:e2:69:
4b:21:d6:86:cc:63:fb:83:03:b2:80:15:fd:f8:41:55:8e:e1:
e9:66:12:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:08 2026 by rpki-client