
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json)
Hash identifier: o26EtTxNN0omi9O/ww7V7mpgDjpKcI4TPjfSQaMfaNc=
Subject key identifier: 91:01:68:C2:B4:4E:ED:8A:1A:9A:72:DF:66:9E:A2:91:25:E3:32:05
Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Certificate serial: 0A07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
Manifest number: 09FD
Signing time: Sat 26 Sep 2026 19:52:47 +0000
Manifest this update: Sat 26 Sep 2026 19:52:46 +0000
Manifest next update: Sat 03 Oct 2026 19:52:46 +0000
Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: woBb3jgvJ3QRzZPH33f1L7kMkwOrNnGc9Zsgrzj6eqA=)
2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: 8Bst/i6kLHW0IcCwxsUo93WqVLek67ZtmgFeQJKwT8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl
rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2567 (0xa07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Validity
Not Before: Sep 26 19:52:46 2026 GMT
Not After : Oct 3 19:52:46 2026 GMT
Subject: CN=6ab8228f-568e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:43:2e:0f:7f:28:79:ec:e6:84:d2:18:c9:
d7:31:13:29:db:bc:1c:be:78:74:88:89:78:81:74:
39:d9:63:85:b2:91:2b:45:e4:43:85:bc:31:6e:a5:
12:31:d8:4e:46:94:24:27:e8:95:06:8e:0d:a6:e7:
9d:d7:00:75:cb:cf:b3:df:9d:05:9a:7f:e3:73:80:
ae:f8:cd:f8:33:67:35:a9:02:58:2c:ac:a9:13:dd:
a2:c1:55:d8:fd:ff:b2:89:77:af:d0:82:17:c1:dc:
35:d5:ff:23:0a:c1:04:09:b7:a0:29:6c:a6:49:d6:
2e:62:4e:29:66:f9:04:aa:26:c8:65:98:04:ac:df:
7f:88:44:7d:06:04:4d:21:76:9e:f0:7b:ce:23:4a:
7b:fa:67:fd:11:12:a5:00:fe:25:bf:ba:72:c9:07:
b6:fb:b1:5a:46:1b:db:95:9e:67:af:3f:14:93:9f:
ba:1f:48:eb:7b:a6:fa:85:6c:fe:31:b5:04:97:b9:
fb:ab:e1:b9:06:e5:5f:ef:16:63:3b:6a:44:5c:32:
a7:28:10:f6:75:2a:d9:da:82:8d:bc:5e:2b:73:c8:
75:45:62:75:11:b4:4e:14:03:e1:c1:5d:63:f2:b1:
b9:a7:13:b2:c4:8b:14:c3:0d:c2:17:7d:e7:06:d6:
74:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:01:68:C2:B4:4E:ED:8A:1A:9A:72:DF:66:9E:A2:91:25:E3:32:05
X509v3 Authority Key Identifier:
keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f1:b5:af:73:41:c5:a5:77:63:b4:d0:cd:7f:0e:ac:bc:76:
fa:6c:ec:42:a5:0a:87:d9:64:e0:cb:4a:c4:f8:32:92:f2:17:
09:1c:f2:78:dc:44:d6:f2:ef:0a:eb:55:08:f9:52:00:6c:c5:
53:b3:b4:08:04:10:8d:97:f7:b3:19:c5:15:55:90:ce:6d:03:
55:15:95:72:8d:70:e9:43:f7:1e:31:52:f7:8a:d4:bf:4e:00:
53:8f:72:69:64:e5:60:0d:be:4b:f0:9f:18:c6:3b:9f:4f:c1:
18:d0:85:ad:8b:b6:83:53:aa:19:ff:5b:9f:6c:28:ee:49:1d:
1a:fd:9a:fe:50:d9:78:e2:1b:a4:65:54:95:e5:ae:4e:00:47:
9c:53:35:6e:5b:02:8d:a9:0a:62:bf:40:fb:0a:7f:e9:4e:12:
03:9e:1b:35:c9:55:3a:9d:37:85:91:79:34:bc:a1:20:9a:7a:
d8:98:d4:10:77:22:3f:03:f9:83:d4:1a:f2:31:73:c9:a9:ed:
b7:1b:08:bb:b1:4f:f2:aa:c3:7e:e3:89:05:06:9f:0e:e9:83:
a5:7c:92:6a:50:9b:65:cc:7d:8a:a3:63:4f:84:51:1e:29:67:
b7:1a:66:4f:4c:f4:f5:d8:f1:e6:ff:a6:7d:c4:9d:13:c9:c6:
1c:1d:18:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:15:22 2026 by rpki-client