
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier: 1Rau7R/s9KnqzLXaqllsDdwG9NOSRzQivns+T1jBGCk=
Subject key identifier: B5:07:8C:EF:21:FC:B2:08:7E:44:A6:DD:86:34:AE:F4:50:EA:A7:75
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number: B7
Signing time: Wed 25 Mar 2026 06:15:25 +0000
Manifest this update: Wed 25 Mar 2026 06:15:25 +0000
Manifest next update: Wed 01 Apr 2026 06:15:25 +0000
Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: gz38XaZiQ0dr3boZX2afF8DbBIEEHX6GmjmP++23j5E=)
2: AF75682A101911F09363D44DC4F9AE02.roa (hash: zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: Mar 25 06:15:25 2026 GMT
Not After : Apr 1 06:15:25 2026 GMT
Subject: CN=69c37d7d-48e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:65:d1:35:85:3a:56:97:1f:69:78:9b:85:
49:95:be:d0:5b:c3:88:d6:02:03:df:de:17:97:6e:
1a:0f:49:24:6f:4f:e1:ec:4a:06:05:f0:15:66:be:
03:a3:ab:2f:f6:90:54:14:d7:1f:93:e8:90:60:0e:
db:ed:5d:4d:da:d6:5e:70:9f:3f:82:38:2e:77:6b:
89:0f:5b:af:15:87:92:2a:15:87:3e:64:0f:4f:f5:
e6:bd:4a:f1:5c:e8:68:5e:01:9b:2b:e0:60:ad:04:
a8:19:dd:fd:f5:d1:50:06:e5:ef:30:bd:2a:ff:4d:
2d:91:f0:fe:5f:29:ac:35:54:5c:e4:85:5f:da:c1:
61:76:f8:08:12:b1:4d:ab:ff:ff:63:17:07:54:11:
06:ac:92:02:b1:32:73:54:5f:ec:8b:44:50:28:15:
f5:56:d8:c8:94:a0:4e:26:5c:bd:a8:da:23:a4:a6:
1c:1f:6d:2e:93:4a:23:2d:75:5f:91:9f:42:cf:76:
4d:ae:1c:16:91:a2:df:c7:99:70:ef:b7:06:3e:c5:
41:dd:fb:b6:4a:11:48:17:d8:05:b1:78:32:9f:c4:
f7:d2:12:46:79:03:cb:36:1e:95:0c:a1:94:22:22:
9d:b0:f0:e3:a7:65:eb:bd:a3:0a:66:a8:20:3d:fd:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:07:8C:EF:21:FC:B2:08:7E:44:A6:DD:86:34:AE:F4:50:EA:A7:75
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:1f:a7:8c:0e:48:13:20:4d:29:79:a4:81:12:f0:59:be:88:
d4:86:19:1d:44:f6:63:6e:5e:b9:a6:37:4a:33:52:1b:86:5b:
59:9d:c4:ca:8e:34:ef:bf:00:03:0c:e4:4c:f7:05:83:4d:96:
24:61:a9:fa:25:ec:4e:0a:23:ba:3e:fb:e8:d9:97:c4:fd:44:
38:57:94:25:b8:21:f1:69:04:76:ab:d8:f2:a3:8a:71:82:a2:
7f:6a:34:ba:ef:b8:6f:a4:cd:80:45:64:74:03:fb:74:28:0f:
e3:2d:6b:e6:4c:df:56:6d:db:42:b8:c3:c8:13:71:38:6b:26:
99:64:dd:02:9c:97:bb:91:c7:8e:b1:9a:cf:af:cd:80:fe:9f:
e8:b0:83:9d:7c:d6:ef:5e:bc:a1:6a:46:17:6b:17:69:60:d2:
d7:1e:87:4a:e0:6a:51:c8:19:f9:53:27:ca:6b:2e:78:d9:59:
ae:41:6d:18:63:16:a3:10:ca:dd:3a:82:39:33:31:28:ee:6a:
5f:56:27:b6:fc:66:47:b6:86:f9:a3:08:95:82:00:f4:d1:9b:
12:27:9b:4e:42:2d:ed:d0:68:46:70:93:f2:87:e9:5d:1d:d9:
92:06:7e:2f:5b:82:03:53:b5:6b:c3:da:7e:b4:eb:e7:09:24:
2f:52:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:43 2026 by rpki-client