
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
File: nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json)
Hash identifier: 9A9lKiSYf7bX+q4XMs9rx9kjUFrykJ/97fGKnZ59iiA=
Subject key identifier: 92:82:A6:45:D1:FC:E2:F7:5C:F1:6D:54:11:D1:3A:55:21:7E:9E:A5
Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
Certificate issuer: /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Certificate serial: 051B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
Manifest number: 051B
Signing time: Tue 24 Mar 2026 23:15:11 +0000
Manifest this update: Tue 24 Mar 2026 23:15:11 +0000
Manifest next update: Tue 31 Mar 2026 23:15:11 +0000
Files and hashes: 1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: H68AvuT1B020EcPPFp0DHnz8F30dTX+82sp1eHELoSo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl
rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1307 (0x51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3, serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Validity
Not Before: Mar 24 23:15:11 2026 GMT
Not After : Mar 31 23:15:11 2026 GMT
Subject: CN=69c31aff-c205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:34:99:bc:f8:03:27:74:3c:28:a6:9b:98:
3b:91:13:e1:d0:32:50:9a:88:56:7f:0a:76:c1:85:
fe:b8:34:8c:0b:7c:b2:0f:d7:a5:e2:27:c6:5e:ad:
f0:ec:54:e1:e7:00:3d:2f:79:2b:b5:53:dc:8a:fd:
7e:af:11:ec:2c:5a:0b:07:4e:91:9c:7c:77:71:9a:
e0:6a:28:f6:5d:a9:cf:f0:4b:47:e8:fc:5e:a6:1a:
b4:36:d2:e0:90:e7:47:da:ee:34:6f:41:41:b9:b8:
a4:11:24:75:b2:24:01:42:c6:00:8b:a7:55:a1:38:
13:ba:28:1e:15:1f:30:02:e1:60:6f:38:53:13:9a:
d4:4f:d2:97:a3:ff:42:73:52:27:1d:a8:fa:bb:9a:
58:f6:98:c9:bb:a5:90:fb:fd:50:60:7b:8a:e2:aa:
56:07:d9:89:d1:f3:6e:17:31:c7:76:56:11:48:a7:
20:47:db:92:48:bd:19:12:43:5c:02:80:ee:99:7c:
04:fd:9f:31:15:86:91:17:c1:3a:6f:86:e1:7d:36:
d0:d7:9a:90:65:5b:27:75:c6:ba:14:24:ae:e0:aa:
7c:37:27:f2:b4:c1:82:2b:59:fb:af:65:02:be:99:
df:4a:c0:a9:b9:77:57:c5:e3:0d:7f:4e:1c:66:bd:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:82:A6:45:D1:FC:E2:F7:5C:F1:6D:54:11:D1:3A:55:21:7E:9E:A5
X509v3 Authority Key Identifier:
keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:81:dd:51:a6:d9:e8:01:e9:26:5d:6d:9c:2d:49:0b:53:3c:
71:2b:24:6f:58:07:c2:81:45:cc:b5:3f:23:0f:4d:c3:4d:a4:
b7:e5:de:2d:d4:36:d7:74:2f:79:f6:48:15:9d:30:1e:38:a2:
e3:bf:d0:58:d5:50:92:da:25:0c:76:8e:00:04:26:cb:5e:21:
6d:69:67:25:3e:03:01:96:ec:03:c8:6c:21:ef:1b:38:e1:b8:
56:7b:04:03:7b:08:4a:7b:14:e5:5a:6e:d5:9f:de:18:6a:26:
1a:47:f7:34:46:6d:1d:30:a1:cd:a4:ca:d4:44:95:fd:89:da:
9f:3c:a9:11:05:06:fd:22:f9:52:a4:a0:fa:26:cc:07:56:f8:
e7:4c:79:33:f1:68:07:8a:23:9a:6a:62:08:06:d2:b7:78:d9:
2d:a0:fb:d1:cb:08:37:a6:73:e0:ce:26:84:3b:cd:ba:ce:0a:
a5:9e:88:84:68:1b:b3:74:cd:f8:88:01:c6:f8:4d:53:d4:8e:
59:d3:54:63:95:44:7b:50:73:e8:48:a6:c5:8e:47:b1:a0:21:
22:a0:cc:3d:b5:0f:5a:c4:db:64:de:b2:38:9e:41:5e:48:b5:
e6:72:d5:e1:35:ef:8a:3a:74:72:1c:56:67:b6:2e:06:5d:2d:
82:4d:ef:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJDRTMxMTAvBgNVBAUTKDlFMjlCMEY1MUJCQjZENjAzM0MwRUYwMDYyM0NDNEJC
QUNFQTU4NDEwHhcNMjYwMzI0MjMxNTExWhcNMjYwMzMxMjMxNTExWjAYMRYwFAYD
VQQDEw02OWMzMWFmZi1jMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7w0mbz4Ayd0PCimm5g7kRPh0DJQmohWfwp2wYX+uDSMC3yyD9el4ifGXq3w
7FTh5wA9L3krtVPciv1+rxHsLFoLB06RnHx3cZrgaij2XanP8EtH6Pxephq0NtLg
kOdH2u40b0FBubikESR1siQBQsYAi6dVoTgTuigeFR8wAuFgbzhTE5rUT9KXo/9C
c1InHaj6u5pY9pjJu6WQ+/1QYHuK4qpWB9mJ0fNuFzHHdlYRSKcgR9uSSL0ZEkNc
AoDumXwE/Z8xFYaRF8E6b4bhfTbQ15qQZVsndca6FCSu4Kp8NyfytMGCK1n7r2UC
vpnfSsCpuXdXxeMNf04cZr1fZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKCpkXR
/OL3XPFtVBHROlUhfp6lMB8GA1UdIwQYMBaAFJ4psPUbu21gM8DvAGI8xLus6lhB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy82NzI4QzRDNDQw
NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JXQXp3TzhBWWp6RXU2enFX
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25pbXc5UnU3YldBendPOEFZanpFdTZ6cVdFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkNFMy82NzI4QzRDNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JX
QXp3TzhBWWp6RXU2enFXRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ4HdUabZ6AHpJl1tnC1JC1M8cSskb1gHwoFFzLU/Iw9Nw02kt+XeLdQ213Qv
efZIFZ0wHjii47/QWNVQktolDHaOAAQmy14hbWlnJT4DAZbsA8hsIe8bOOG4VnsE
A3sISnsU5Vpu1Z/eGGomGkf3NEZtHTChzaTK1ESV/YnanzypEQUG/SL5UqSg+ibM
B1b450x5M/FoB4ojmmpiCAbSt3jZLaD70csIN6Zz4M4mhDvNus4KpZ6IhGgbs3TN
+IgBxvhNU9SOWdNUY5VEe1Bz6EimxY5HsaAhIqDMPbUPWsTbZN6yOJ5BXki15nLV
4TXvijp0chxWZ7YuBl0tgk3vRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:51 2026 by rpki-client