
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
File: NhbgHaMxfwnuypjnvHVMvJkNfWg.mft (raw, json)
Hash identifier: qY7QLLbcsQKJc/RuI4+gqYV7scUpDylS+HPaYQAb7j0=
Subject key identifier: A3:16:7F:AB:7A:BB:CB:47:21:E0:C5:B9:C8:9D:FE:32:97:77:8F:E2
Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68
Certificate issuer: /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
Manifest number: 0111
Signing time: Thu 23 Jul 2026 07:45:00 +0000
Manifest this update: Thu 23 Jul 2026 07:44:59 +0000
Manifest next update: Thu 30 Jul 2026 07:44:59 +0000
Files and hashes: 1: NhbgHaMxfwnuypjnvHVMvJkNfWg.crl (hash: 1H3aQ1/87RT2OmCR87vsEbmiCJ/sK9Fuvr0EnrcGLA4=)
2: C2E1583EECFA11EFA881E216C4F9AE02.roa (hash: jTQKPLGkqI6hmZ4YsmcAwkWRvhQzIWW2T5De8EQkVwk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl
rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68
Validity
Not Before: Jul 23 07:44:59 2026 GMT
Not After : Jul 30 07:44:59 2026 GMT
Subject: CN=6a61c67c-68e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:9b:63:51:da:bc:8c:1d:d3:27:ca:c5:78:
b6:d5:2a:db:d9:e1:b8:45:5b:71:a6:02:a8:fa:54:
0f:ed:95:37:22:e9:fd:41:c3:63:49:54:5f:5c:0e:
3f:a4:f1:31:4c:af:d4:08:74:83:59:d4:c6:39:87:
55:45:c9:17:38:01:78:00:0a:dd:f7:1f:99:78:9b:
b3:3b:e2:c1:d7:1a:af:d7:ba:71:5c:3f:72:05:b2:
31:2b:92:93:c7:36:c5:c7:36:c9:d0:0d:1a:63:39:
d8:ab:53:0e:47:b9:a6:5e:4e:fb:e3:ec:62:e6:ee:
68:42:48:65:9c:a1:3c:05:59:c5:5e:d2:fb:37:b3:
ef:01:cf:99:b5:26:17:1d:66:58:97:93:47:92:0b:
75:c3:d7:2e:c1:c5:47:b2:bd:cb:2f:04:ff:a2:2a:
3d:5e:21:de:59:cd:36:12:5d:b2:09:b7:b9:be:66:
34:24:b6:45:d1:d3:2a:ab:0b:bf:c0:f2:00:7b:71:
f6:a3:29:ab:53:3e:55:99:c0:82:ce:98:68:c8:95:
f7:a3:75:b0:95:e9:e4:ce:93:eb:09:f1:8e:83:de:
6a:a3:82:4b:4c:32:08:ac:45:72:40:ac:2e:d7:1c:
2c:a9:cf:6e:25:d1:a4:11:b1:ad:17:d8:b9:72:2a:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:16:7F:AB:7A:BB:CB:47:21:E0:C5:B9:C8:9D:FE:32:97:77:8F:E2
X509v3 Authority Key Identifier:
keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:24:50:25:15:66:8a:1b:9f:88:0f:95:8b:c2:f4:e1:a5:0a:
47:95:ef:6d:61:f0:4b:8c:2a:3c:c2:c2:09:59:5a:a6:75:59:
ba:e2:ce:12:2b:e4:a4:c0:93:34:9e:da:cb:6d:eb:e0:fc:95:
b3:1f:95:48:1c:9a:3b:19:e0:0f:42:f9:0e:3e:af:36:d4:bc:
62:21:7c:5d:e8:c2:a3:32:0c:36:fd:e6:5c:40:13:fe:4e:af:
14:0c:1a:cc:af:ee:55:7a:9d:16:a8:46:75:8a:bc:76:e3:a0:
cd:36:34:45:4f:eb:5e:26:6c:8e:bf:25:03:99:b6:3c:f8:da:
94:be:eb:00:d4:19:a0:63:09:28:90:5a:37:97:69:1c:25:c2:
f7:2c:44:af:f9:96:f7:b9:4a:41:e0:55:f8:84:7c:fd:f7:12:
1c:d8:bf:9d:ae:78:ce:b0:d0:3b:90:2c:e4:5c:b4:dc:c4:f9:
a9:97:b4:5d:03:fb:5b:b0:d1:db:8e:7e:dd:b8:ad:1b:da:a4:
d8:c0:55:dd:26:00:83:b9:45:79:54:0d:4d:c4:e6:dc:73:a7:
4b:0c:28:b9:53:d4:76:3f:3d:23:cb:10:c8:2a:e5:bd:66:32:
62:18:26:75:33:f6:fe:3a:34:02:ea:00:b7:cd:22:d3:3d:b1:
1a:4e:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:49 2026 by rpki-client