
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json)
Hash identifier: TI+1PRZE+1aSZyfDANfVO2h9F6lUGuVIRnHeoIxqPO0=
Subject key identifier: 4E:EE:8C:B2:B1:8F:52:CC:32:30:97:12:D8:42:1E:14:EB:B7:83:BB
Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Certificate serial: 03E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
Manifest number: 03E2
Signing time: Mon 11 May 2026 00:35:09 +0000
Manifest this update: Mon 11 May 2026 00:35:08 +0000
Manifest next update: Mon 18 May 2026 00:35:08 +0000
Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: AFtOf2qywdjZjaM+9pnkewaht2k402oBWH2zYjsZs7o=)
2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: cWZ5GSiO7fyMHvHfVtg9avvdisY3XQZ/JYleCE5yM3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1001 (0x3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Validity
Not Before: May 11 00:35:08 2026 GMT
Not After : May 18 00:35:08 2026 GMT
Subject: CN=6a01243c-2c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:5d:88:7a:72:1a:71:96:4c:4a:c9:3d:c4:
60:fe:02:d4:b4:f8:5b:55:59:76:5a:f6:c8:03:27:
96:7f:06:74:07:d5:e5:ca:27:e7:40:80:e9:e7:4e:
1e:bb:96:0b:bf:15:42:e6:cd:be:8e:3a:0a:99:af:
d2:fc:06:ea:fc:7d:88:e7:e1:d7:f9:c0:ee:4e:4f:
c6:7e:84:6a:7b:fb:fb:b9:90:ec:1b:f2:c4:aa:fd:
13:59:4a:2c:38:10:b1:ad:0b:77:d9:94:fc:26:e1:
7a:5b:7e:c4:9b:3c:14:68:6e:fe:50:94:36:70:4b:
1d:b2:e4:9b:1c:71:3d:42:c9:a7:34:0e:cb:b1:d5:
af:3c:3f:1a:cd:27:9f:8c:c0:69:16:8c:ee:34:fc:
d5:fd:4c:3d:d9:80:e3:c6:48:9f:17:09:3b:61:37:
22:4d:d7:7d:a1:e2:f0:38:3f:2d:01:6a:7b:d8:fd:
6f:d0:b6:7b:cc:fd:78:36:06:a7:a7:bb:17:08:9b:
fa:d9:2a:5a:7d:90:9b:a1:e7:84:e3:06:80:aa:91:
27:96:49:d1:7f:1a:24:a6:7b:19:32:78:96:83:be:
6c:52:85:36:0e:9a:e6:c2:ae:02:b4:58:2a:18:34:
3e:1e:1b:b8:e5:a9:92:c6:d0:cb:33:e5:15:60:e2:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EE:8C:B2:B1:8F:52:CC:32:30:97:12:D8:42:1E:14:EB:B7:83:BB
X509v3 Authority Key Identifier:
keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e1:a6:af:b8:da:c8:38:5d:4f:cd:aa:47:db:01:89:35:09:
02:21:e6:9b:4a:0e:3f:37:4b:59:e0:06:b1:f2:36:d2:2a:2d:
b4:24:74:37:bb:c6:4f:60:ff:ad:5f:a9:3e:00:2b:6a:b6:82:
34:1a:eb:f0:6c:57:e7:5f:ae:d5:9a:aa:ff:9d:64:11:8d:b0:
9a:49:63:85:5a:c9:78:c4:e8:a8:e6:d5:ab:e6:03:a0:56:c8:
f4:85:91:b7:c3:85:f5:17:26:20:30:0b:1a:1c:bd:97:3f:fb:
e7:8f:44:22:42:b4:20:8b:2a:ed:81:64:d9:95:1c:a5:e0:5f:
8f:f7:45:36:c1:17:17:87:89:6d:45:50:07:06:35:85:49:ac:
3c:27:a6:33:04:60:78:84:98:5c:9b:58:cb:14:ea:62:6a:37:
18:05:ac:d2:89:8f:e0:74:4b:aa:c8:f0:b7:6f:87:af:08:c0:
62:c0:b4:ca:40:b7:36:62:ce:38:f0:a1:72:5a:5d:05:8d:46:
63:59:29:1e:cf:14:b6:11:c1:3a:79:0f:44:37:7b:23:f1:25:
8b:f4:07:1b:62:d2:e9:f6:3c:90:a1:4c:07:33:f4:03:b1:e3:
00:47:43:df:39:aa:9e:e0:9a:79:c6:33:2d:d2:a4:d6:9a:08:
06:28:ec:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:38 2026 by rpki-client