
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json)
Hash identifier: 9YnkF+M59x6jmUg4zgIfFEVxbCNNpbeAZLwYv8slwIs=
Subject key identifier: BD:63:98:60:00:B6:4D:47:77:9C:68:4A:DE:77:8A:74:6A:4A:DB:00
Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08
Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
Certificate serial: 35AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
Manifest number: 3598
Signing time: Sat 26 Sep 2026 15:00:16 +0000
Manifest this update: Sat 26 Sep 2026 15:00:15 +0000
Manifest next update: Sat 03 Oct 2026 15:00:15 +0000
Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: elMXMqlXhZwVX09C0kKRfq95mNwplt32tjwSgiagCOc=)
2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: uaBZ8rrkBWuiO8vvVUgSMMRL47cpkYF6IyC6kK7kqtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl
rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13741 (0x35ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
Validity
Not Before: Sep 26 15:00:15 2026 GMT
Not After : Oct 3 15:00:15 2026 GMT
Subject: CN=6ab7de00-e04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:a2:dd:f4:5c:c0:99:5d:d4:5a:9f:98:79:
0c:a9:62:02:ab:b9:60:94:f8:01:3e:86:5a:a5:84:
08:50:52:39:34:ec:4a:6c:92:83:54:b7:3e:a0:23:
d2:bd:a7:c0:c4:e6:04:ac:8b:a0:ca:e3:31:f7:36:
5d:97:08:92:fe:01:60:5d:e6:3b:94:23:ce:f7:c7:
e8:04:76:68:80:80:bb:27:4f:12:a4:c1:29:04:31:
10:50:16:53:3f:44:1a:4c:67:76:91:c0:cd:2c:37:
10:d2:c4:17:1e:f7:c5:58:4e:c6:13:d6:ea:db:0b:
a3:8c:52:15:e1:14:1f:43:bc:0b:66:99:b2:46:e9:
f3:e3:b1:ed:33:61:32:c4:52:0f:e6:8a:b2:ae:76:
c4:e3:bc:c6:71:8e:a5:49:31:ff:48:7e:e6:68:3f:
20:2c:5f:68:92:ff:73:fd:75:92:0c:cd:1c:05:f9:
d8:51:be:6c:0f:a8:a5:68:29:5f:bc:56:d6:bb:4a:
5b:a0:ae:6d:34:b7:92:cc:6d:a5:63:aa:e4:3e:e5:
af:74:ad:02:1a:50:c9:18:4c:a2:4e:dd:bc:38:88:
56:7b:1b:d1:fa:97:f4:0a:6a:16:be:58:9e:d7:7e:
a6:47:55:12:07:77:36:13:0b:e7:ad:9a:78:c3:54:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:63:98:60:00:B6:4D:47:77:9C:68:4A:DE:77:8A:74:6A:4A:DB:00
X509v3 Authority Key Identifier:
keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f2:00:09:0d:3b:ba:3a:05:2e:83:92:1b:eb:73:9b:89:34:
30:2f:a1:71:8f:3a:aa:5a:a1:fc:1d:61:e3:a2:79:de:c2:58:
93:a5:1a:7d:56:94:6c:61:58:68:e2:21:82:ae:f8:e1:15:91:
e9:4f:68:e6:41:b1:36:7b:84:39:34:b1:5b:fa:0e:bf:2a:40:
76:4c:9b:61:dc:8e:dd:f5:d8:d2:fd:06:d8:a1:ae:f9:b5:52:
a1:66:b9:dd:38:e8:64:c7:c6:f8:5a:60:d4:00:9e:03:7f:73:
5f:06:06:72:e9:4a:5a:71:94:c2:ad:b9:fa:22:e3:f5:0e:5b:
95:ce:90:ca:66:5d:e8:98:31:23:46:e2:a8:28:4f:5c:e4:0f:
54:3e:e0:a2:09:d5:e7:60:c4:e7:f9:2f:c6:fa:a0:54:00:59:
7f:57:1a:8c:11:42:83:cc:53:66:68:45:cb:e6:fe:90:37:8a:
32:82:11:17:3b:26:0e:e2:6a:ce:b2:b2:54:f8:1f:cc:75:c1:
4e:44:08:34:f1:10:7d:90:a5:c5:03:ec:66:71:28:b5:57:4f:
b9:eb:48:79:81:d6:46:bb:7e:54:a4:87:d2:9d:6b:70:c7:bc:
0c:01:9d:d6:ef:36:bc:cf:4e:c8:c8:8c:3f:89:e9:5c:65:39:
6b:97:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:40:21 2026 by rpki-client