
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json)
Hash identifier: F7bqm6wkbo6UVIDCXhwietEplAaLoS4TbzAPMyozBlQ=
Subject key identifier: F4:E5:A0:A6:46:96:21:EE:38:05:F5:BC:0F:CD:E1:A3:53:BF:EB:01
Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 06:34:48 +0000
Manifest this update: Mon 21 Sep 2026 06:34:48 +0000
Manifest next update: Mon 28 Sep 2026 06:34:48 +0000
Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: clo2aD4cBOpAqLauso1ihiwI0j5NhRzvClPfHQvyBWs=)
2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: kENDVh6RH1qeZlCkf0uhEn8QDOreUtcC3M+ErBdzcRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Validity
Not Before: Sep 21 06:34:48 2026 GMT
Not After : Sep 28 06:34:48 2026 GMT
Subject: CN=6ab0d008-6aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:aa:25:14:3b:cb:14:c7:12:c6:db:da:74:
51:31:70:b4:9c:66:26:b4:77:47:4e:1b:bb:7b:96:
40:37:b7:5b:82:19:e7:29:42:b3:7b:bb:a3:2d:da:
a5:5c:08:22:08:95:d4:3e:00:11:42:fc:23:08:a0:
38:c6:21:9a:9c:29:65:29:cb:6d:eb:49:eb:90:0f:
41:c6:36:91:7f:16:84:2b:31:27:04:b3:5f:9b:58:
ea:c1:66:3a:75:67:db:63:16:68:1f:90:96:c2:2c:
70:bc:e3:73:16:3e:0d:ff:f8:55:26:8b:a0:70:ab:
0b:46:df:5c:ac:8f:72:71:0d:e9:8c:32:fe:ab:65:
d3:ee:2d:0e:65:9a:c0:05:b0:b4:df:5c:e7:9e:8d:
3a:59:55:86:4a:92:4f:25:06:9a:f5:35:65:a0:9f:
12:b5:d3:fd:e3:5f:e3:68:9e:b4:1c:f6:7f:65:e8:
c1:3c:f4:ca:26:11:ed:7d:2c:0c:33:5d:74:79:e5:
9c:41:a7:f4:ad:cd:36:6b:39:b3:30:40:20:43:8d:
49:78:de:88:63:c7:9d:1f:1f:43:5d:66:03:a4:1f:
c0:d1:42:1e:fa:f9:2f:7b:4f:b2:c1:6f:e5:e5:17:
d8:3f:c6:e4:79:8a:88:4c:96:ce:31:dc:b1:e7:bc:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E5:A0:A6:46:96:21:EE:38:05:F5:BC:0F:CD:E1:A3:53:BF:EB:01
X509v3 Authority Key Identifier:
keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:86:59:70:76:86:85:14:22:d3:57:17:60:1a:92:4a:6b:4b:
5c:17:53:ce:18:3e:55:75:5e:51:ae:81:55:08:db:db:64:8a:
f2:0b:d5:5d:92:66:c1:71:da:61:d7:62:1c:a9:fa:04:f1:bb:
46:a1:3b:d6:d3:3c:76:c0:fc:b2:27:b2:9b:1c:5b:80:49:f4:
9d:01:c3:d2:09:a2:16:d3:39:38:87:aa:bc:b2:4d:f4:eb:bf:
25:3e:50:57:01:fe:aa:45:a3:2d:5f:8b:dc:4e:85:82:a9:a3:
0e:c6:7c:ec:78:0d:0e:a4:06:f1:3b:6b:7d:1c:54:48:9f:15:
28:53:0c:2e:b3:91:44:a6:e4:07:4c:c6:b4:f1:a3:be:b7:6a:
11:e3:7c:48:2d:0c:79:75:e5:49:b3:75:66:7d:79:99:8c:1f:
79:4f:cc:8e:7c:03:2a:18:c0:94:3a:b0:15:b2:ed:07:46:81:
cc:3f:ef:1d:20:1e:9c:48:f0:7c:1b:80:68:e2:19:e5:d6:9a:
a7:dd:38:e8:ef:c3:2d:76:4a:ec:3e:60:a4:d0:7d:7a:b6:d3:
2f:f7:8c:34:a6:d3:e4:8d:35:e0:74:27:5c:12:d2:93:3d:16:
24:7a:49:b8:c9:28:cf:84:a7:20:bd:1d:f8:40:e8:01:c7:9d:
06:8b:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:59:39 2026 by rpki-client