
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json)
Hash identifier: KNoOSeCddwUgrMY1AZ/CPa52TX5LLY/0qqutNeF0fF0=
Subject key identifier: E6:A6:6D:D7:0E:4C:45:D7:20:71:85:C5:F3:D6:4A:05:7E:4D:DF:C2
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial: 151E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
Manifest number: 1513
Signing time: Sat 26 Sep 2026 16:51:59 +0000
Manifest this update: Sat 26 Sep 2026 16:51:59 +0000
Manifest next update: Sat 03 Oct 2026 16:51:59 +0000
Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: GDODW2iiGbJKOLBn2qv7gTr1FT/67o35eFY9okmf1H4=)
2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: W6FOTcn74gf4+0BoMZOpH6DC5rviJxuaWu2OotOF9rk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 16:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5406 (0x151e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Validity
Not Before: Sep 26 16:51:59 2026 GMT
Not After : Oct 3 16:51:59 2026 GMT
Subject: CN=6ab7f82f-93d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:25:ad:4d:2d:ee:56:d7:dc:b9:2f:e5:de:
62:9e:83:2c:94:ff:27:4c:2d:e1:f9:74:6a:ac:c2:
df:76:1e:08:e8:92:80:3f:82:fd:d6:48:b3:57:13:
26:19:93:dc:b9:e2:6f:a0:91:27:34:41:6b:32:8d:
ac:84:78:f9:78:b7:7f:4c:f1:9a:98:91:b9:2f:35:
dc:cd:82:dd:ce:20:90:24:44:38:5b:dc:a1:b5:81:
47:64:d0:d3:39:b2:e6:a5:01:4d:3c:fd:51:1f:fa:
9f:b1:4f:36:44:fc:7c:86:d8:ed:3f:b0:69:91:cd:
c3:10:11:7b:d2:e5:b3:0d:f0:58:b8:c7:4e:04:77:
66:78:38:03:20:88:55:7f:77:61:7b:dd:0c:ab:c1:
e4:3e:38:3f:15:03:fd:d6:97:00:95:a8:a5:35:20:
36:47:04:64:e8:c9:2b:7f:ba:51:c7:fd:d0:8b:fe:
eb:0c:9f:9e:9c:24:ad:0d:b8:7d:d6:b4:9b:97:70:
7e:5c:ee:32:40:b1:78:c7:16:f8:f5:cf:7c:4e:f9:
be:b4:94:a3:6c:e1:b9:16:f5:7a:22:e2:8a:ca:5d:
3f:ba:f7:0f:93:57:4c:8b:a6:c2:45:30:c6:76:b3:
c5:45:ae:d2:94:9f:43:98:4a:8f:f4:6b:87:dc:d0:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A6:6D:D7:0E:4C:45:D7:20:71:85:C5:F3:D6:4A:05:7E:4D:DF:C2
X509v3 Authority Key Identifier:
keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:b1:49:66:70:ac:b6:d3:f4:a0:30:58:24:dc:98:c3:a5:1e:
e8:c8:32:4b:02:2f:48:60:28:20:55:e0:38:f2:a7:3a:9f:ab:
a7:67:14:dc:11:7c:88:13:18:e8:37:d6:14:b5:6a:9c:d3:12:
3a:30:95:7e:33:4e:06:b4:8c:09:70:f6:78:9c:a6:f5:20:32:
ad:aa:a8:e2:d9:ee:af:7a:84:89:6c:bc:20:d2:f4:88:6d:55:
0a:b3:87:22:92:97:cd:34:d6:43:e1:94:67:28:d9:f7:b6:1d:
f1:2f:7e:e8:73:db:8f:fe:84:c3:13:47:2d:f9:62:36:70:d6:
05:82:45:f2:db:8e:3e:70:6f:33:b9:de:89:22:d5:e0:6c:f0:
0e:ec:e3:b6:78:db:78:68:4d:41:e9:35:45:4c:f5:25:2f:d2:
82:a5:ed:11:43:cc:ed:a6:76:63:d2:2f:b9:2d:90:e6:18:e5:
f9:37:90:57:62:13:2d:58:88:05:c2:bb:3f:c1:65:09:76:ba:
9e:f1:fd:0e:bc:29:71:a5:5d:87:9d:b6:c9:75:fd:09:aa:9d:
a3:dc:1a:b8:b0:2f:75:30:00:c6:48:1a:99:9b:0c:26:b7:aa:
c2:65:ab:e5:f5:45:f0:b1:5b:94:77:f9:c7:06:79:cc:53:84:
e1:48:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:04:17 2026 by rpki-client