
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json)
Hash identifier: 1HYZaNw1pBU8MBKZgJapEa4eUNGhXWTgg48/fGA3xBU=
Subject key identifier: FB:D7:A6:BD:86:49:FD:13:39:50:CB:A0:7A:CC:EC:3F:4D:24:C1:90
Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Certificate serial: 1A10
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
Manifest number: 4C0E
Signing time: Wed 22 Jul 2026 15:25:06 +0000
Manifest this update: Wed 22 Jul 2026 15:25:05 +0000
Manifest next update: Wed 29 Jul 2026 15:25:05 +0000
Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: aMcP4SRZMulzlJofmg91C3HvcUrwsU4jas6TT0RmT7I=)
2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: gEyD44KlU7kGIP6KThcKtoihoaJv7b+z5iLc4Ql5KJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6672 (0x1a10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Validity
Not Before: Jul 22 15:25:05 2026 GMT
Not After : Jul 29 15:25:05 2026 GMT
Subject: CN=6a60e0d2-a015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:e6:db:35:89:a4:df:ee:b2:d9:88:db:a9:
48:42:ec:40:8d:6d:c4:5d:b8:f5:73:71:31:ae:30:
3b:e8:a7:d1:be:d2:5f:d2:29:ef:23:07:fa:58:30:
85:56:e5:91:33:46:5e:64:c5:84:72:17:6b:b2:28:
5d:17:b7:bd:1d:71:d1:b9:87:a6:c4:b9:bf:6c:2d:
65:6f:d0:9b:d4:97:11:2e:e0:12:76:12:5f:2e:e8:
65:7e:82:8c:fd:42:b5:06:b6:56:47:4a:ce:7e:3b:
a0:cb:81:c7:54:bc:3b:07:ad:2b:e6:08:3d:b2:6b:
8e:86:34:22:49:87:9c:7e:30:a9:15:23:47:43:30:
0f:cf:ec:f8:f2:54:2a:14:df:8f:9c:bc:19:2f:80:
8d:0f:98:14:6d:74:2b:f6:39:54:ab:1b:b0:a8:67:
8e:bb:2b:1e:c0:ba:1e:55:10:1c:9e:9d:d5:fb:1c:
51:1b:55:0f:b3:02:d2:25:df:40:60:b3:a6:77:0d:
5c:0d:f8:ac:91:26:7b:6f:3c:f3:cc:e5:cd:f7:00:
a7:81:45:44:ca:ee:6a:ef:20:75:9d:e4:0c:c8:ac:
74:8a:7d:25:7d:a2:9d:87:56:db:9a:8c:c9:97:9d:
c3:3e:d3:de:10:be:63:b8:b6:5b:11:0b:d6:11:3d:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D7:A6:BD:86:49:FD:13:39:50:CB:A0:7A:CC:EC:3F:4D:24:C1:90
X509v3 Authority Key Identifier:
keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:f9:84:9b:3c:0b:1e:71:5b:50:3f:bf:ed:e1:63:32:e3:f1:
cf:ca:af:1d:9c:ea:54:1b:61:02:da:72:59:76:9b:5f:ee:5e:
18:b2:2a:7a:8d:fe:f5:c6:70:d6:4a:dc:59:3a:30:6f:e3:18:
41:cf:91:f8:4e:d7:31:cf:12:98:8f:cc:61:60:35:bf:d3:1b:
86:3e:8f:a6:40:cd:e6:76:20:7b:43:3f:16:0b:a0:90:1f:d8:
c4:b7:c0:91:23:f8:c2:55:86:a2:81:2f:6e:35:9b:eb:72:3d:
a2:6e:c9:b9:20:ff:af:5d:79:42:c4:25:e8:b3:8b:a3:2f:b1:
93:2f:8d:4f:d0:83:fe:a2:a6:f4:ee:0f:7c:ed:41:24:fa:53:
00:ff:2c:47:c5:57:67:db:d3:fe:16:02:38:ea:97:20:15:f6:
df:ff:62:32:f2:7d:9e:4f:a0:c1:bc:3a:fb:e7:1b:2d:b2:20:
4a:0a:e0:97:bb:4a:b1:b2:b7:aa:de:52:e8:b7:48:8c:62:10:
60:2f:5b:55:58:e6:23:6f:5a:07:9d:48:af:2c:2d:a4:90:91:
0b:8b:6d:93:e7:1f:92:52:20:73:80:32:05:ae:93:72:1f:17:
cc:24:d6:a8:2c:9d:95:1e:53:c0:2b:09:d8:ce:34:e0:05:25:
3b:cc:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:44 2026 by rpki-client