
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
File: NnO2jJT8If8_zeajk-7GOxbAFP4.mft (raw, json)
Hash identifier: c3eO30PYdeRpvFgr/sabzWJ4K6frf4UI/LC5Ob3Blnw=
Subject key identifier: 31:66:38:4E:FC:9E:D7:B1:39:A2:D0:E3:6A:FC:7F:C5:B7:9F:14:BB
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Certificate issuer: /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
Manifest number: 04
Signing time: Wed 25 Mar 2026 06:19:29 +0000
Manifest this update: Wed 25 Mar 2026 06:19:28 +0000
Manifest next update: Wed 01 Apr 2026 06:19:28 +0000
Files and hashes: 1: NnO2jJT8If8_zeajk-7GOxbAFP4.crl (hash: MpaMJQHY7EyIAUI9n+6B/Nc9PxjZONDrfD/zu0d7diY=)
2: 80708DE2267611F1BE9D6DCBAE833773.roa (hash: jGySyCZGfLJ6Gub4dNKlt20vYdC2D9wIP1qqcY9QBu8=)
3: 80FBB9EE267611F1BE9D6DCBAE833773.roa (hash: bSERLhOY5GiHM0MRoVjj+c34VXkpFi4/JG1GVO16gFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Validity
Not Before: Mar 25 06:19:28 2026 GMT
Not After : Apr 1 06:19:28 2026 GMT
Subject: CN=69c37e71-85a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:69:01:04:e3:8d:d7:95:e7:6b:60:3d:14:
01:d9:1b:68:19:ac:f4:e3:93:3e:c7:28:2e:5a:a0:
40:d6:21:6b:a8:3a:45:7b:f4:27:25:ed:77:f8:fa:
0c:67:8c:af:f1:8a:f6:65:72:67:5d:84:57:2d:a8:
58:86:4c:78:d6:9a:a0:0e:43:9f:62:8f:a9:a7:07:
55:b4:a5:4e:65:61:96:83:57:9c:96:10:1a:3b:e6:
8f:3e:7c:8e:87:5a:cf:cc:c4:64:aa:18:8c:88:9e:
5b:cc:e0:71:b0:91:06:a3:9a:69:7f:10:67:a4:38:
b3:7c:15:43:ba:2e:26:c9:69:3d:02:2d:c1:d4:ac:
22:b8:ac:59:83:1e:2a:52:de:f1:e0:2f:16:5f:09:
3f:71:c9:79:3d:ac:66:7d:47:89:a3:ef:6a:01:6f:
42:c4:d7:d1:4c:2e:7d:ad:b6:ad:c3:ae:54:db:82:
b0:4d:a0:b5:06:97:2c:e5:6e:bd:e2:1a:06:c5:cd:
9d:b6:ba:17:e9:e4:b7:d1:93:f8:75:4a:7d:48:14:
31:03:96:89:aa:9b:29:a9:dd:20:72:92:31:c6:84:
98:67:5b:b1:7c:56:dc:26:9d:e4:55:0a:62:34:cf:
cd:78:0f:63:55:a5:e5:dd:a2:92:12:ab:c9:b6:6a:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:66:38:4E:FC:9E:D7:B1:39:A2:D0:E3:6A:FC:7F:C5:B7:9F:14:BB
X509v3 Authority Key Identifier:
keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:ae:3f:20:23:e1:46:81:3a:a3:b6:0b:39:69:34:99:ec:4b:
c5:cc:6b:fc:59:b3:06:ef:d9:4b:df:3f:5a:8b:dc:d3:aa:6d:
fe:40:40:98:bc:55:dc:a8:61:bc:5b:f0:84:74:0b:71:52:a9:
23:34:25:31:72:8d:20:d6:83:de:1f:61:38:6c:09:83:5c:7f:
64:2d:e0:3a:fa:2b:50:64:61:5c:1f:56:bf:21:60:a2:ea:71:
92:6d:de:5f:b0:4a:5b:4b:ba:c9:23:40:88:3e:8a:22:68:84:
65:2e:4f:e9:7b:c2:1e:58:42:9b:b8:e1:3e:46:0f:17:69:21:
11:8a:82:35:ab:a5:63:bf:0c:b3:d4:9c:89:b7:4e:37:56:cb:
b8:90:be:ad:d5:4d:20:f8:37:c4:29:ec:aa:4d:62:43:2f:de:
51:75:e9:97:52:e4:11:ee:77:ab:49:8a:7c:fd:1a:19:94:84:
f5:52:fe:01:b4:cb:43:87:7a:e2:58:8d:6a:ce:0f:eb:d5:fd:
90:40:01:0b:10:81:71:69:de:1c:4c:9c:84:bb:6e:b6:ec:a4:
dd:7a:95:1b:3a:b2:ff:e5:0f:ff:20:94:f1:ea:ce:f2:c1:47:
58:99:92:68:8c:b2:18:86:5e:6c:8b:b7:c8:80:9e:bd:c5:a6:
1f:c7:ee:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:54:07 2026 by rpki-client