
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
File: nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json)
Hash identifier: 9dhuno+lFqtHCbPtn9SN3i+Oj7mzVSFP3w/DqIyMyTs=
Subject key identifier: 14:DF:E2:BE:3C:87:20:70:26:AB:BD:97:E8:C5:A6:9B:B4:29:99:DD
Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
Certificate issuer: /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Certificate serial: 0558
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
Manifest number: 0558
Signing time: Thu 23 Jul 2026 00:10:10 +0000
Manifest this update: Thu 23 Jul 2026 00:10:10 +0000
Manifest next update: Thu 30 Jul 2026 00:10:10 +0000
Files and hashes: 1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: 42ZyjTSDtTqSuqeOzeaJ6j985gMoiAR1oP9YvSpakh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl
rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1368 (0x558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3, serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Validity
Not Before: Jul 23 00:10:10 2026 GMT
Not After : Jul 30 00:10:10 2026 GMT
Subject: CN=6a615be2-3a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:ee:9d:e9:d9:f5:58:d4:19:d0:81:ca:83:
88:36:6e:fa:f9:26:30:5f:fb:83:e1:43:d9:97:7a:
c6:69:2b:b4:50:95:e7:a9:cd:8a:d8:68:40:60:2b:
a6:67:c6:87:27:02:b9:e2:2f:04:08:48:a1:4c:fc:
a1:3b:c9:26:35:43:6e:20:f6:91:07:a3:15:d9:f6:
e8:7e:fd:f0:f7:24:97:53:8f:92:2b:e4:3b:8c:d6:
86:04:d5:d1:05:c1:50:58:3b:0a:3f:70:0b:33:9c:
c4:77:79:54:da:e2:dc:96:29:84:0b:89:06:a0:72:
4f:3a:29:36:fe:e2:ab:08:d5:d2:df:f2:0e:7a:29:
a0:c7:ef:50:44:19:6a:36:d6:7c:82:07:df:2f:20:
ae:37:57:62:08:94:79:50:a5:d0:90:ab:8e:df:2a:
45:b6:b1:b2:9c:26:b6:65:47:00:fa:73:0f:60:cf:
38:95:ff:2c:67:25:be:3d:cf:91:06:cc:96:53:fe:
ab:2e:eb:47:ba:8a:58:c7:e1:b3:fb:6e:b6:b5:91:
46:ec:35:c3:3d:fe:95:28:da:d7:7e:39:2c:48:00:
f4:5d:fa:f7:ca:f7:f6:69:b4:6e:c4:b7:46:38:bb:
9e:a0:fc:83:42:1c:9f:4f:8e:dd:5a:4a:a0:6f:82:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:E2:BE:3C:87:20:70:26:AB:BD:97:E8:C5:A6:9B:B4:29:99:DD
X509v3 Authority Key Identifier:
keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:da:a6:46:59:e5:4f:b3:c6:ee:76:c6:f8:1b:82:88:db:ca:
bb:72:58:9f:57:7e:9d:d5:bf:fa:14:28:7e:d1:b3:e2:7d:d4:
62:14:20:2a:96:d9:b9:03:4d:ba:68:0b:7c:9d:7f:35:a7:ad:
1c:63:33:24:81:a5:86:01:14:5e:1a:ec:2f:8f:c1:73:50:23:
24:0e:bb:49:9f:d9:84:ae:16:55:f3:e3:bd:c7:9c:e9:59:fa:
1c:5e:cb:04:71:0b:40:59:ca:56:7f:8a:78:43:65:64:06:97:
c2:d1:08:6b:9e:46:fb:3b:21:7d:e5:f9:a0:aa:e9:1d:e8:2a:
af:19:db:76:12:c5:37:2d:5e:a6:bd:da:c1:f2:cf:d3:23:eb:
54:c7:31:f9:90:91:17:cc:45:3e:86:a6:60:8f:8e:0a:7c:a8:
d5:55:89:f9:fe:e5:39:00:88:15:b7:0d:9a:8a:d9:6b:11:84:
40:58:6f:27:66:db:0e:7b:df:69:e7:c6:55:a3:fb:3f:5c:82:
eb:b7:5b:38:3f:0c:f3:e7:b3:8f:ac:7b:d8:e5:ed:3c:5c:61:
54:68:f5:bd:c4:f0:bc:9a:cb:61:6c:46:fe:6a:b2:24:a2:00:
fb:aa:39:be:fb:2a:9a:f0:a3:1e:bc:cb:d0:41:fb:74:24:f4:
ca:30:d2:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJDRTMxMTAvBgNVBAUTKDlFMjlCMEY1MUJCQjZENjAzM0MwRUYwMDYyM0NDNEJC
QUNFQTU4NDEwHhcNMjYwNzIzMDAxMDEwWhcNMjYwNzMwMDAxMDEwWjAYMRYwFAYD
VQQDEw02YTYxNWJlMi0zYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlVrunenZ9VjUGdCByoOINm76+SYwX/uD4UPZl3rGaSu0UJXnqc2K2GhAYCum
Z8aHJwK54i8ECEihTPyhO8kmNUNuIPaRB6MV2fbofv3w9ySXU4+SK+Q7jNaGBNXR
BcFQWDsKP3ALM5zEd3lU2uLclimEC4kGoHJPOik2/uKrCNXS3/IOeimgx+9QRBlq
NtZ8ggffLyCuN1diCJR5UKXQkKuO3ypFtrGynCa2ZUcA+nMPYM84lf8sZyW+Pc+R
BsyWU/6rLutHuopYx+Gz+262tZFG7DXDPf6VKNrXfjksSAD0Xfr3yvf2abRuxLdG
OLueoPyDQhyfT47dWkqgb4IX1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTf4r48
hyBwJqu9l+jFppu0KZndMB8GA1UdIwQYMBaAFJ4psPUbu21gM8DvAGI8xLus6lhB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy82NzI4QzRDNDQw
NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JXQXp3TzhBWWp6RXU2enFX
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25pbXc5UnU3YldBendPOEFZanpFdTZ6cVdFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkNFMy82NzI4QzRDNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JX
QXp3TzhBWWp6RXU2enFXRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAONqmRlnlT7PG7nbG+BuCiNvKu3JYn1d+ndW/+hQoftGz4n3UYhQgKpbZuQNN
umgLfJ1/NaetHGMzJIGlhgEUXhrsL4/Bc1AjJA67SZ/ZhK4WVfPjvcec6Vn6HF7L
BHELQFnKVn+KeENlZAaXwtEIa55G+zshfeX5oKrpHegqrxnbdhLFNy1epr3awfLP
0yPrVMcx+ZCRF8xFPoamYI+OCnyo1VWJ+f7lOQCIFbcNmorZaxGEQFhvJ2bbDnvf
aefGVaP7P1yC67dbOD8M8+ezj6x72OXtPFxhVGj1vcTwvJrLYWxG/mqyJKIA+6o5
vvsqmvCjHrzL0EH7dCT0yjDS5Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:02:47 2026 by rpki-client