
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File: nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier: sp5jSxDHYEbJ1plU40bu7fCj+j6nmfx92CR7Ep1g1YI=
Subject key identifier: 04:BD:45:DC:F9:8A:B3:6D:FE:81:15:D0:76:EC:CF:3D:1E:42:E8:EB
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer: /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number: FC
Signing time: Wed 13 May 2026 06:22:53 +0000
Manifest this update: Wed 13 May 2026 06:22:52 +0000
Manifest next update: Wed 20 May 2026 06:22:52 +0000
Files and hashes: 1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: U5PsfNwrny2zLZwfhIWHLaCesLmZ0C2a0qmG07Fd+eA=)
2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: t58wU/pXz+iEQ4RAW3H0lzuZf3qpTPHdtZHwx3xgStE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Validity
Not Before: May 13 06:22:52 2026 GMT
Not After : May 20 06:22:52 2026 GMT
Subject: CN=6a0418bd-01a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:69:b9:60:e6:dd:db:30:c7:63:7a:b8:48:
d6:fe:a1:a7:15:1b:05:98:20:de:a5:83:8c:f0:85:
81:45:45:1c:03:1c:cf:50:3a:a7:f4:9d:1d:45:ad:
1e:e2:d1:02:f2:ac:9f:65:9a:bb:82:b7:10:67:a5:
b4:ef:bc:57:e3:a5:45:5a:90:97:f3:92:d1:a8:b4:
a9:0b:4e:5e:0a:a3:10:1a:9f:4f:d6:5b:9c:82:d3:
f1:45:53:56:58:2c:1b:d0:25:2a:49:35:80:0e:41:
3c:ad:20:1e:cf:e6:df:d0:52:0f:8c:60:43:cd:2f:
47:60:50:70:ba:5e:22:c5:4d:b2:b5:ad:d8:45:51:
ba:55:aa:5a:57:36:24:c7:54:1e:55:01:ac:5a:15:
53:32:8e:aa:16:5c:55:7c:4c:48:c7:87:b2:e1:b2:
69:de:7b:d1:20:75:4f:a7:51:88:3e:f4:1c:53:9f:
55:10:1f:de:81:d0:1f:dd:f2:90:34:67:bc:75:c4:
e7:ab:7b:28:44:29:87:b2:20:7b:13:a4:0b:b6:52:
e7:80:d2:e0:d8:05:ba:44:d5:61:a3:bd:2c:ae:37:
55:bc:92:8f:f9:6f:d9:86:eb:97:e7:79:09:a0:33:
d5:e4:1b:b0:90:c2:ed:82:51:c6:cf:41:2b:95:ee:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BD:45:DC:F9:8A:B3:6D:FE:81:15:D0:76:EC:CF:3D:1E:42:E8:EB
X509v3 Authority Key Identifier:
keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d7:76:fa:db:cb:6a:a6:85:bb:db:70:c5:8e:76:a6:91:f9:
70:98:03:58:59:5f:27:e2:8a:74:0c:4b:21:7a:1e:df:a6:57:
e0:3f:bf:8a:b4:f5:ba:db:89:e1:8d:11:0f:23:d4:b5:e7:e1:
c8:82:e2:bc:b8:e8:d7:9c:2c:52:0c:60:19:d9:75:6b:70:89:
cc:78:74:06:53:b6:3a:23:5b:15:47:51:63:13:0e:e8:c9:97:
42:72:ad:b1:59:04:30:c4:7f:69:c6:77:e9:07:b7:c4:1f:c3:
f2:d9:b9:fe:bc:c9:e0:55:df:e4:a7:47:9d:7b:53:8a:ed:31:
c7:6c:98:8c:59:9d:e7:83:b3:92:cf:f6:2e:02:c4:70:a1:f5:
b1:47:4f:07:c7:5b:bd:aa:20:bf:d2:66:f4:96:23:8b:6c:79:
4d:55:6c:5c:0d:ab:0b:ca:c2:a2:8a:df:fa:8f:39:81:27:cd:
af:6a:ca:2f:00:b3:18:d7:6b:a6:d9:96:a9:5d:7c:13:fd:04:
69:a2:10:b3:e7:0f:b6:ad:60:24:c5:97:27:c4:b9:e6:04:bb:
7b:d6:42:87:d8:8b:90:8c:d7:59:4e:5e:29:82:1a:04:87:50:
61:b1:c9:82:cf:dd:79:23:c1:22:8f:e0:77:d0:6c:52:7e:84:
c2:5f:e2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:50 2026 by rpki-client