
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier: fVqmIDE0+U2OcOi8SgACj18/V7vqxU7Gg7uBspuMOps=
Subject key identifier: 75:E5:EB:07:B9:67:AD:58:6C:3B:4A:29:11:C3:CE:26:91:71:EC:0E
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number: CF
Signing time: Mon 11 May 2026 06:53:27 +0000
Manifest this update: Mon 11 May 2026 06:53:26 +0000
Manifest next update: Mon 18 May 2026 06:53:26 +0000
Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: BHX6lS80kCYJjIWNLB73+Ml/7rP0pbvevChUIEdyxJY=)
2: AF75682A101911F09363D44DC4F9AE02.roa (hash: zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: May 11 06:53:26 2026 GMT
Not After : May 18 06:53:26 2026 GMT
Subject: CN=6a017ce7-d248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:fb:6a:a9:80:55:9e:37:d1:0e:48:1c:54:
af:27:7b:6d:1c:0b:c4:3e:eb:92:74:60:7e:6e:5f:
be:dd:b0:ae:3b:5b:f8:52:bd:c0:cd:71:4c:57:e5:
da:c9:50:2a:ab:4e:01:ba:90:02:2c:27:cc:a0:3a:
67:b3:76:ea:ad:dc:bb:1c:cc:7a:62:1c:aa:a3:75:
c2:ac:07:8b:7d:cc:a6:f7:1d:03:20:71:4b:ee:1f:
cd:ab:81:52:3d:e4:fc:ef:ef:9c:90:4f:44:1c:8a:
cf:36:bd:06:ea:ff:82:d6:03:4e:03:3b:c6:8f:f1:
b5:4a:ab:47:26:eb:e6:c3:a2:2d:f7:c5:1c:92:d0:
19:f9:e9:83:59:1b:40:fc:37:9e:d5:1f:9c:cc:66:
2b:bb:4f:58:7f:c7:db:1c:85:38:48:ff:e1:02:76:
de:59:05:e5:1b:5a:d3:75:4a:82:0a:aa:84:a9:fe:
ea:c6:64:f4:82:95:45:42:68:5b:c5:35:cc:79:05:
6a:05:dc:bd:7f:b2:fa:f2:fa:f7:c3:7f:f9:c2:45:
7b:ce:15:c3:22:99:50:54:90:48:7a:2e:cc:8e:23:
26:cb:40:1d:e5:ab:62:4f:8e:33:0c:f9:45:5c:9b:
93:f2:e9:05:6d:20:8a:5d:f9:bd:d9:f0:55:62:6e:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E5:EB:07:B9:67:AD:58:6C:3B:4A:29:11:C3:CE:26:91:71:EC:0E
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:56:ee:76:01:10:db:64:7e:ae:95:62:21:bc:04:a5:93:e7:
62:22:73:83:86:d9:53:9c:67:9e:c8:f9:55:ff:2b:cf:36:0c:
bc:75:7e:35:1b:77:d8:10:fa:8e:81:e3:72:61:36:db:87:7e:
88:70:23:b1:8a:a9:8d:06:d2:a4:3f:77:3e:44:eb:a3:09:5c:
3f:1f:59:4b:5a:2a:15:29:15:86:52:bb:76:f5:4a:46:12:e4:
ae:0e:6e:81:a7:74:60:c2:2c:23:96:8d:c7:4b:cd:99:56:a8:
87:26:1e:00:ff:2f:3a:fc:d9:7c:0e:08:ea:7f:d5:32:95:72:
c8:44:7c:f3:c4:c9:46:4d:bf:46:c0:95:19:e7:c9:b3:94:ba:
f4:f6:d8:6d:38:d4:e5:d0:cf:fd:6e:e1:13:8f:24:ef:16:53:
3c:66:a6:8f:1e:7b:39:d7:e4:bc:b7:73:a6:70:50:a1:32:05:
d1:91:e9:d9:23:b7:47:5e:91:63:c3:d7:d5:cb:48:7b:35:f3:
28:cb:df:16:ca:ea:5d:bc:88:f3:b2:f0:58:77:a4:10:c6:cb:
7b:9b:f7:42:34:7f:43:75:e8:81:dc:0a:b2:38:d6:db:e6:86:
53:55:a2:99:7c:fd:10:db:b7:7b:e2:e8:c8:be:b2:dd:d9:ab:
7c:df:98:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNGQUMxMTAvBgNVBAUTKDlENDU2N0ZCRTI1MkM2NjE2NDJBQTMzRTc4MDQ4QTg3
MTdGQTdDQjMwHhcNMjYwNTExMDY1MzI2WhcNMjYwNTE4MDY1MzI2WjAYMRYwFAYD
VQQDEw02YTAxN2NlNy1kMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdr7aqmAVZ430Q5IHFSvJ3ttHAvEPuuSdGB+bl++3bCuO1v4Ur3AzXFMV+Xa
yVAqq04BupACLCfMoDpns3bqrdy7HMx6Yhyqo3XCrAeLfcym9x0DIHFL7h/Nq4FS
PeT87++ckE9EHIrPNr0G6v+C1gNOAzvGj/G1SqtHJuvmw6It98UcktAZ+emDWRtA
/Dee1R+czGYru09Yf8fbHIU4SP/hAnbeWQXlG1rTdUqCCqqEqf7qxmT0gpVFQmhb
xTXMeQVqBdy9f7L68vr3w3/5wkV7zhXDIplQVJBIei7MjiMmy0Ad5atiT44zDPlF
XJuT8ukFbSCKXfm92fBVYm6LeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXl6we5
Z61YbDtKKRHDziaRcewOMB8GA1UdIwQYMBaAFJ1FZ/viUsZhZCqjPngEiocX+nyz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0ZBQy9BRkY1NjNFNjEw
MTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9uVVZuLS1KU3htRmtLcU0tZUFTS2h4ZjZm
TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25VVm4tLUpTeG1Ga0txTS1lQVNLaHhmNmZMTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0ZBQy9BRkY1NjNFNjEwMTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9uVVZuLS1KU3ht
RmtLcU0tZUFTS2h4ZjZmTE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARlbudgEQ22R+rpViIbwEpZPnYiJzg4bZU5xnnsj5Vf8rzzYMvHV+NRt32BD6
joHjcmE224d+iHAjsYqpjQbSpD93PkTrowlcPx9ZS1oqFSkVhlK7dvVKRhLkrg5u
gad0YMIsI5aNx0vNmVaohyYeAP8vOvzZfA4I6n/VMpVyyER888TJRk2/RsCVGefJ
s5S69PbYbTjU5dDP/W7hE48k7xZTPGamjx57OdfkvLdzpnBQoTIF0ZHp2SO3R16R
Y8PX1ctIezXzKMvfFsrqXbyI87LwWHekEMbLe5v3QjR/Q3XogdwKsjjW2+aGU1Wi
mXz9ENu3e+LoyL6y3dmrfN+Yag==
-----END CERTIFICATE-----
Generated at Wed May 13 03:46:51 2026 by rpki-client