
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
File: nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json)
Hash identifier: +SXWAts16K5LrPqSccc2zOU79YWGnsoegrVW+lpNhBE=
Subject key identifier: 9E:09:56:DC:1D:BF:D1:16:1F:A5:30:4F:9E:04:EB:6C:26:D6:58:18
Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
Certificate issuer: /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Certificate serial: 0A6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
Manifest number: 0A65
Signing time: Tue 24 Mar 2026 19:24:43 +0000
Manifest this update: Tue 24 Mar 2026 19:24:43 +0000
Manifest next update: Tue 31 Mar 2026 19:24:43 +0000
Files and hashes: 1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: V2XaUJ2Z4/8BKaiso1kIZSJCa+gM6/1lc/aZkqLb1ek=)
2: 95A08652730D11ECAB074439C4F9AE02.roa (hash: RFdB63/y3+Tbs7GEAdEYbpEM6B+Xvuyjatvb6gT/7vE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2671 (0xa6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Validity
Not Before: Mar 24 19:24:43 2026 GMT
Not After : Mar 31 19:24:43 2026 GMT
Subject: CN=69c2e4fb-a8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:b9:18:91:0d:24:f1:2d:9a:28:85:f1:53:
b5:ed:95:93:99:96:dd:70:49:7d:b0:e7:83:98:26:
b4:d3:55:ce:bd:54:be:94:f5:aa:57:14:25:45:c8:
e7:f1:23:6c:a9:51:38:6c:da:32:e2:2b:a5:d8:e5:
bf:6a:e5:06:01:d7:07:5d:29:21:54:4d:6b:e1:b9:
e5:b2:bd:0b:4f:cb:ee:0e:e4:14:6f:3f:2a:89:20:
44:58:d5:b9:71:fc:5a:05:75:2b:d9:ba:4a:9c:b3:
21:87:62:6b:21:69:5e:7a:b4:91:0f:46:2b:d2:9b:
fb:6f:65:f1:0e:26:2a:4c:97:7b:b2:e9:c4:3e:da:
a3:d8:6b:df:a7:4a:38:3c:08:3b:15:77:83:05:b8:
d0:f7:ac:a4:77:9c:5e:08:35:27:3f:1e:7b:f3:59:
21:22:a4:9b:99:6c:bb:09:bc:f4:bd:56:c3:29:5b:
2d:0e:81:1f:83:ab:13:1e:97:be:bb:d6:b9:ef:16:
21:10:f4:f4:c7:74:c2:a3:fa:a6:d6:48:ba:b9:01:
dc:b5:fe:a9:58:4f:aa:b3:e7:4e:d9:7f:49:57:c3:
a2:65:2c:fe:c2:5a:ee:68:54:49:73:7d:0e:e2:d1:
49:0b:b2:0e:ea:50:75:ab:28:63:9b:2e:d3:4d:3f:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:56:DC:1D:BF:D1:16:1F:A5:30:4F:9E:04:EB:6C:26:D6:58:18
X509v3 Authority Key Identifier:
keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:70:92:87:dc:19:bf:b0:2e:bc:58:c8:09:bf:44:c3:b9:8b:
6a:92:97:81:96:fc:4c:a5:05:1c:39:67:be:1d:72:a5:f8:1b:
f9:7c:03:0b:ad:42:40:52:81:45:96:e1:18:6b:c8:96:3c:2c:
a4:42:a9:c5:38:b1:c1:30:6e:39:5d:bb:b4:2c:88:67:36:ad:
72:82:58:c8:81:ce:e0:f2:db:99:53:db:07:72:63:ba:b9:b3:
84:ea:3d:30:76:98:83:5a:80:c8:a5:c4:75:b6:d0:d6:ef:b5:
cf:79:63:8a:b2:09:21:20:88:a1:23:34:66:0d:42:aa:22:75:
ce:f3:94:8a:09:d8:26:b9:07:eb:9d:da:aa:88:8f:51:ae:d1:
37:d2:fd:98:84:2d:6e:3f:33:8b:c9:ab:c6:8c:92:6f:b8:5b:
a9:7f:fb:b9:d3:40:4b:9a:f9:8e:59:c7:7f:41:47:f1:17:a0:
29:84:65:3b:d4:e2:65:17:a4:a9:c2:fd:f7:80:2d:9d:49:b8:
55:a3:15:42:96:37:b6:eb:34:52:31:4f:9d:54:e9:24:85:31:
da:b6:24:6f:9f:c2:70:d3:ee:0a:25:2f:6f:c0:6d:94:69:78:
29:73:55:4f:79:4f:bf:51:36:60:3e:f4:d5:b4:a4:29:be:30:
90:b0:f3:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzIxNTQxMTAvBgNVBAUTKDlFOTk0RUY3NUUxMTMzRTYwRjAxQjlBNDhBMDkyNjE5
NTJGQjFCODEwHhcNMjYwMzI0MTkyNDQzWhcNMjYwMzMxMTkyNDQzWjAYMRYwFAYD
VQQDEw02OWMyZTRmYi1hOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqSu5GJENJPEtmiiF8VO17ZWTmZbdcEl9sOeDmCa001XOvVS+lPWqVxQlRcjn
8SNsqVE4bNoy4iul2OW/auUGAdcHXSkhVE1r4bnlsr0LT8vuDuQUbz8qiSBEWNW5
cfxaBXUr2bpKnLMhh2JrIWleerSRD0Yr0pv7b2XxDiYqTJd7sunEPtqj2Gvfp0o4
PAg7FXeDBbjQ96ykd5xeCDUnPx5781khIqSbmWy7Cbz0vVbDKVstDoEfg6sTHpe+
u9a57xYhEPT0x3TCo/qm1ki6uQHctf6pWE+qs+dO2X9JV8OiZSz+wlruaFRJc30O
4tFJC7IO6lB1qyhjmy7TTT9tMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4JVtwd
v9EWH6UwT54E62wm1lgYMB8GA1UdIwQYMBaAFJ6ZTvdeETPmDwG5pIoJJhlS+xuB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjE1NC8zOUE2Q0YyQTgw
OTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0tWVBBYm1raWdrbUdWTDdH
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25wbE85MTRSTS1ZUEFibWtpZ2ttR1ZMN0c0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjE1NC8zOUE2Q0YyQTgwOTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0t
WVBBYm1raWdrbUdWTDdHNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1nCSh9wZv7AuvFjICb9Ew7mLapKXgZb8TKUFHDlnvh1ypfgb+XwDC61CQFKB
RZbhGGvIljwspEKpxTixwTBuOV27tCyIZzatcoJYyIHO4PLbmVPbB3JjurmzhOo9
MHaYg1qAyKXEdbbQ1u+1z3ljirIJISCIoSM0Zg1CqiJ1zvOUignYJrkH653aqoiP
Ua7RN9L9mIQtbj8zi8mrxoySb7hbqX/7udNAS5r5jlnHf0FH8RegKYRlO9TiZRek
qcL994AtnUm4VaMVQpY3tus0UjFPnVTpJIUx2rYkb5/CcNPuCiUvb8BtlGl4KXNV
T3lPv1E2YD701bSkKb4wkLDzdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:27 2026 by rpki-client