
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json)
Hash identifier: 6uEWNNjHjl4avfMhzveF2RFmLoMaP4QODk043bGYO/M=
Subject key identifier: 70:98:7D:19:77:46:10:FE:1F:BA:9A:01:ED:47:03:35:8B:97:2F:49
Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
Manifest number: BE
Signing time: Thu 23 Jul 2026 08:48:46 +0000
Manifest this update: Thu 23 Jul 2026 08:48:45 +0000
Manifest next update: Thu 30 Jul 2026 08:48:45 +0000
Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: JDutsFu6jWisMNN/g9/u11Jwpd5r3aH6aI3XnAp4zrA=)
2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: rrBoaZeZAYohnofQuu333DPGl97BqUXv9lxtd9Vptcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Validity
Not Before: Jul 23 08:48:45 2026 GMT
Not After : Jul 30 08:48:45 2026 GMT
Subject: CN=6a61d56d-687b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:a9:5e:81:f3:b0:56:f0:3e:26:bf:52:b1:
70:61:39:a7:b4:c3:e7:fc:58:97:37:22:1e:75:0b:
2e:97:14:89:d4:1a:4b:dc:1b:45:0f:61:46:1d:bd:
cf:cc:e8:84:e4:17:5c:ae:55:5f:71:71:c2:66:0a:
21:e1:f5:d9:69:c8:97:b0:5e:c0:09:7c:c3:3d:af:
5a:4f:60:86:bf:c0:ea:aa:cd:b8:90:71:3e:63:8f:
a5:25:1a:bd:02:0f:da:86:f3:cc:e7:c2:cd:2b:5b:
91:44:ed:c8:62:64:fc:38:5d:9a:aa:8a:96:45:d3:
0a:c1:c1:e2:17:62:70:c1:1b:66:ef:86:6d:7f:c7:
6c:95:83:35:49:01:18:a2:24:e0:a1:8f:1a:85:64:
82:4a:68:57:04:40:f4:1b:a1:41:ac:e2:d6:0c:87:
7d:e2:d8:44:98:04:7a:24:e8:f5:d4:f6:b5:60:8c:
0b:69:3d:19:49:29:8c:ca:0d:2d:2e:b1:29:05:21:
7b:5d:24:01:92:a1:ff:24:37:fb:c7:38:35:b9:da:
b1:ae:b2:00:25:57:52:8c:34:ba:cc:79:66:29:6d:
54:4a:b0:e0:6f:d6:ea:9a:2e:25:88:3d:47:90:78:
a2:b6:3c:05:45:76:89:17:c9:90:15:9f:f4:79:a0:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:98:7D:19:77:46:10:FE:1F:BA:9A:01:ED:47:03:35:8B:97:2F:49
X509v3 Authority Key Identifier:
keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:17:2a:66:c4:b4:68:8c:29:e8:14:51:ff:d5:4e:4d:07:07:
8c:96:92:f0:85:db:28:ce:c9:e2:23:ef:ee:9b:22:ae:13:cc:
19:be:78:11:40:03:5b:af:1c:b3:ab:68:38:21:0c:40:5c:b8:
54:e6:01:9f:5e:57:b6:35:b3:f1:3d:3e:dc:73:2a:ae:ed:a7:
39:8f:6e:d7:2f:35:d2:08:7f:a6:5a:99:6f:12:de:63:90:4f:
08:8a:fa:da:8b:18:98:62:50:47:47:1d:0e:34:c5:ba:76:1e:
e5:cc:89:4b:d5:e4:e5:5a:1c:92:2e:cb:73:09:1d:84:28:ce:
14:02:26:15:46:92:d6:2d:e5:24:7d:f8:db:fb:54:c7:46:4b:
55:e9:53:dd:8a:c0:05:90:86:0c:ee:12:43:bd:dc:3c:36:62:
03:8f:0a:91:83:e2:98:9a:94:cb:97:68:41:f2:7c:bf:53:ef:
81:30:2e:21:56:a9:1c:cf:d0:d2:ef:02:e9:ef:42:80:af:89:
a4:26:47:10:66:75:92:2e:c1:e0:9a:23:fb:4a:8b:80:da:80:
f7:25:1f:ee:00:62:84:a6:4c:c3:da:64:89:54:6c:a0:38:84:
d1:c8:71:54:d5:75:83:96:5a:bf:2d:85:8d:cc:0e:20:a5:e1:
ee:9f:ea:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:47 2026 by rpki-client