
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File: nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier: oLlhCkgQagr7Q5w25iHu3pCF8I2n6KEhCVGHgLFN2vI=
Subject key identifier: 7B:D9:09:FB:DB:56:3D:0A:D1:6C:7F:AF:A8:F2:C2:52:60:E8:7D:61
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer: /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial: 0673
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number: 0653
Signing time: Thu 12 Nov 2026 22:27:10 +0000
Manifest this update: Thu 12 Nov 2026 22:27:09 +0000
Manifest next update: Thu 19 Nov 2026 22:27:09 +0000
Files and hashes: 1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: OI9iqanZ966/V3pZsM+kOeqZZSMprsLPe41UCrfmPQM=)
2: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: 0gpxn+LFfnOKpxuOSksfeYmDkEyohwtADQR3Mk8Jkrg=)
3: 77465F12874511EEBEA58225C4F9AE02.roa (hash: ygP33q0RkY5m431TK8mMBj98/E5fJw5QVCf5+wBvW5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Nov 2026 22:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Validity
Not Before: Nov 12 22:27:09 2026 GMT
Not After : Nov 19 22:27:09 2026 GMT
Subject: CN=6af63d3d-0f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:79:12:7d:ee:da:fd:44:8a:8e:0a:d0:cd:
08:10:f0:37:d1:96:87:c3:21:1d:c7:78:b5:3e:09:
49:01:e8:85:2a:6f:44:a3:41:d1:61:52:22:44:91:
65:a0:50:91:e2:21:f5:99:81:3b:e5:7d:f2:09:7b:
e6:89:aa:ea:12:fd:74:89:9b:c1:56:e5:44:ee:7c:
38:48:57:10:b4:ff:40:e6:ef:1c:b8:ea:17:68:c2:
38:78:7d:cf:fc:c3:33:96:f7:8b:5f:21:61:88:12:
3e:47:ff:cd:77:e8:35:c2:17:88:69:e6:d5:93:22:
b7:36:36:07:ff:12:63:38:31:78:46:35:6e:74:ca:
48:cc:23:dd:60:f4:91:76:15:d2:77:75:58:11:80:
97:ba:1f:7a:93:4f:55:b9:4c:2f:28:c8:1c:b2:8f:
1f:b9:9f:e7:5e:6e:d5:1d:34:48:0e:0c:03:98:02:
80:3a:57:e2:cf:25:a4:0a:c4:ee:76:9c:9b:49:0d:
fb:89:1d:ae:09:a3:d9:9c:40:97:c2:41:42:ec:29:
d7:6a:84:96:8e:8b:89:2b:37:9c:39:cc:ac:6e:87:
6a:f4:2a:05:35:63:bf:48:9f:e8:b2:49:9d:13:41:
3c:88:29:6b:de:5d:97:74:67:9f:40:d8:85:2b:b9:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D9:09:FB:DB:56:3D:0A:D1:6C:7F:AF:A8:F2:C2:52:60:E8:7D:61
X509v3 Authority Key Identifier:
keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:b5:d6:8f:75:9d:40:98:70:2a:b2:e9:04:5b:74:4d:cb:09:
c2:36:a3:41:f4:31:6e:8d:08:a1:e1:07:8b:73:b9:5d:92:16:
c2:3d:b6:35:80:d0:15:e5:12:b0:6d:9c:2a:b8:9b:23:01:8e:
8e:4e:3e:19:cb:92:f8:4c:f1:04:9b:a4:15:66:1e:55:38:be:
2c:bc:25:bf:b9:bb:7a:5f:40:fd:ad:f7:6e:df:9a:67:8b:19:
8c:65:db:ce:ef:1f:59:39:2f:21:c5:45:ea:fa:af:a1:eb:f9:
e0:0d:0c:ae:29:9e:fe:4f:46:f9:d9:f6:5e:7f:51:e0:df:28:
b9:58:2d:62:2e:d3:c6:1d:5c:5a:aa:f4:e9:92:c0:88:fa:b3:
5c:cf:df:ee:da:f3:ca:09:94:0e:3b:41:de:92:eb:b3:71:c2:
76:7a:1e:3d:d8:ed:40:8c:94:23:f0:9f:a8:4b:54:12:8f:00:
de:1a:53:fb:7a:5a:69:46:c7:db:d6:be:cd:1a:0e:66:0b:f5:
f0:bf:21:e3:79:39:7f:42:e8:8c:10:ee:25:b3:2b:fb:bc:7f:
71:45:bc:af:e5:f1:fa:58:ab:50:fd:ef:34:73:4e:1a:95:6b:
4c:8b:e6:32:3a:03:d2:30:c1:af:4c:ed:69:14:45:0c:9a:02:
93:d4:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:53:36 2026 by rpki-client