
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft
File: nFFy5DAbErBXIH5LhA56y5CyCK4.mft (raw, json)
Hash identifier: aUlimSxIXNf2n1IcC9en6P+7YuDZ9e5erfLpoQnHxVA=
Subject key identifier: 31:4F:22:AF:5B:72:F9:32:DC:2C:D3:95:24:A4:48:14:4F:90:94:8F
Authority key identifier: 9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE
Certificate issuer: /CN=A919125D/serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft
Manifest number: 1B
Signing time: Fri 25 Sep 2026 09:07:18 +0000
Manifest this update: Fri 25 Sep 2026 09:07:17 +0000
Manifest next update: Fri 02 Oct 2026 09:07:17 +0000
Files and hashes: 1: nFFy5DAbErBXIH5LhA56y5CyCK4.crl (hash: jfsZ9zTxRPEPHxVo603za2t0/JIxkaxTAAMrylitH/M=)
2: 2D766076947611F18F33E6295F11F970.roa (hash: nYN/boG0EONSsyNSFsdFD5f6WoaCZ/bo3AQVDqm6EiU=)
3: 74EA4288947611F1B81B112D5F11F970.roa (hash: xf63CpVG1xYHFcYXOGVTTTSM5albmIZRt5CqNRfPUy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.crl
rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 09:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919125D, serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE
Validity
Not Before: Sep 25 09:07:17 2026 GMT
Not After : Oct 2 09:07:17 2026 GMT
Subject: CN=6ab639c6-8417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:47:73:c9:5b:03:50:bb:12:94:46:0c:37:
0f:f8:68:5b:d7:fc:35:1e:23:aa:c8:c7:6d:4a:43:
1a:19:19:e3:45:f4:97:f4:85:53:50:8d:74:1a:62:
da:62:ab:90:ec:93:c1:9f:83:10:c3:a3:84:db:93:
5b:70:07:3b:c9:00:34:b5:08:94:a2:4d:4c:d2:c4:
dd:4a:e3:01:ff:83:2a:54:2e:28:ee:42:41:87:94:
94:97:5e:2e:c6:cb:3b:78:a7:5c:f1:08:f2:d8:7c:
59:0c:fc:e5:b7:8c:a3:30:c5:90:36:78:93:c9:30:
bf:c6:90:84:4b:b7:f5:93:79:cf:2d:bb:82:14:84:
65:d2:55:d5:9f:a6:55:6e:97:eb:7a:bb:13:d0:aa:
fd:60:69:d2:32:04:2e:f9:e8:5b:41:f5:5a:bb:9a:
f6:30:a6:62:70:b1:c2:5b:14:f9:87:5b:9a:dc:12:
25:dc:3d:e6:79:68:a0:56:8d:49:95:60:3d:62:18:
fc:45:51:3d:9f:53:2f:42:3b:dc:fe:3b:f5:e1:53:
ea:ed:3b:22:fd:23:78:0a:1a:ce:11:91:36:f5:75:
81:e8:a3:8e:61:35:81:63:b0:e9:29:91:72:a9:3c:
61:05:62:ee:59:14:04:05:3d:af:a8:4b:2a:65:34:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:22:AF:5B:72:F9:32:DC:2C:D3:95:24:A4:48:14:4F:90:94:8F
X509v3 Authority Key Identifier:
keyid:9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:60:d3:14:ea:9c:12:c3:35:c9:45:e0:01:d5:0f:cc:56:4e:
69:18:f2:0c:07:64:dc:57:3a:d7:91:7e:58:b9:89:d2:09:4c:
b2:f3:ab:67:df:ff:ff:f1:6e:fe:20:42:0c:a7:5a:fa:1d:63:
27:d8:df:d4:74:e8:96:bd:74:10:f9:b5:63:d7:c9:3d:5d:5d:
52:b8:52:0c:a8:80:1d:a7:ae:3f:f1:15:a6:6a:26:83:64:37:
b2:06:62:ad:19:0b:7e:56:8f:cf:21:16:9b:bd:e0:35:ae:00:
1a:d3:91:31:ec:30:e7:7e:09:af:f8:d7:f6:50:20:f8:3f:7d:
8e:78:10:77:82:dc:b9:f5:c6:c0:ac:fd:87:99:b8:89:7b:1a:
66:ed:e7:15:6f:6f:67:97:cc:62:6f:98:eb:20:c3:69:02:ea:
46:cd:49:99:60:70:0b:85:89:31:1e:e8:77:ad:73:b7:f9:c4:
23:47:28:8b:e1:e7:4f:83:e7:77:2c:0a:ad:dd:4c:35:ef:54:
9e:af:5b:05:f6:3f:83:1f:11:1c:f6:a2:59:37:1f:dc:29:91:
46:8a:8f:ba:0e:5c:da:e1:e6:7c:00:c7:a8:c8:aa:df:25:36:
34:9f:e6:e1:99:49:ab:db:78:9a:a1:bd:02:14:cd:48:a3:bb:
51:0c:41:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:01:55 2026 by rpki-client