
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json)
Hash identifier: azJjlN2RtXVoLkTkdqwmHOa3m+fyrbvFfVecBChEmWA=
Subject key identifier: 20:2B:51:AA:75:83:BD:FA:83:2D:BD:C4:4D:FF:42:49:43:59:8F:8F
Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
Manifest number: 02B0
Signing time: Thu 23 Jul 2026 02:31:17 +0000
Manifest this update: Thu 23 Jul 2026 02:31:16 +0000
Manifest next update: Thu 30 Jul 2026 02:31:16 +0000
Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: zjHj9yuBo/AXfZeKD634oFx942ncw+IhaxUhecds080=)
2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: JhQP+mcUaNPHBqxU1e/1HhxGjSkQQVMKp70bq/iMgKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Validity
Not Before: Jul 23 02:31:16 2026 GMT
Not After : Jul 30 02:31:16 2026 GMT
Subject: CN=6a617cf4-4554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:d7:30:3e:c2:27:68:09:65:c6:67:53:ed:
bb:46:d4:40:13:de:b8:ad:af:be:c7:2f:8c:50:a0:
da:a3:e6:6b:c3:43:b0:ec:66:52:35:e1:3f:75:74:
48:41:b0:02:b1:b5:a6:48:7a:4c:6a:a4:98:91:dc:
29:fc:5f:6e:0c:bf:a5:94:89:63:32:4f:dd:f8:90:
58:fd:c1:6d:9a:81:f3:88:1c:6e:28:66:9a:2d:61:
98:29:90:70:eb:0b:38:e3:6b:25:d0:20:d3:26:33:
88:8b:2d:75:e0:58:e2:d1:b3:53:82:fb:b7:46:bc:
91:9c:72:de:03:5b:a9:11:e3:9b:f4:91:1e:39:c2:
a7:5e:fb:89:ac:67:1d:2d:e2:a0:54:16:a9:8a:e2:
cf:fc:97:d4:e6:06:29:5b:e2:58:15:82:0d:c5:c5:
9f:b6:d3:c0:09:04:82:a1:98:de:74:e5:20:90:2a:
dc:67:a3:86:dc:5f:d8:f4:b4:b4:57:ea:b2:0f:a3:
b8:bb:56:e3:7b:6d:06:d8:38:90:90:5c:8f:f0:99:
a5:a3:f4:2b:a2:0e:dd:cf:a3:36:e4:51:90:64:5e:
61:cd:27:c3:a3:bd:dc:72:32:35:05:f3:6f:f3:03:
9e:de:0c:15:64:08:f0:2e:b3:fe:a7:8c:e7:45:47:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2B:51:AA:75:83:BD:FA:83:2D:BD:C4:4D:FF:42:49:43:59:8F:8F
X509v3 Authority Key Identifier:
keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:1b:52:e7:cd:bc:94:3c:02:44:7b:17:8d:d0:65:8f:3d:a2:
04:8c:92:0f:02:8c:69:dd:38:ca:54:fc:39:4c:9f:3b:ff:2b:
25:c8:0e:31:df:11:1d:1d:0f:27:ab:52:f2:95:20:41:88:ec:
55:7f:05:a2:32:86:44:c0:56:0d:e1:1d:ca:65:56:98:4b:42:
80:81:4d:bb:80:b2:69:43:da:63:4c:c7:b6:a2:f9:a4:cf:d1:
35:48:b9:a1:b1:df:9d:78:f5:94:cc:67:da:16:1c:eb:01:71:
38:0c:6d:1a:32:52:38:4d:42:74:d8:9b:c7:63:18:c0:33:9a:
6b:46:96:be:5f:18:96:29:3f:c5:44:c1:21:56:57:b8:8b:59:
2c:c4:9a:ef:ad:df:b3:60:6e:c5:de:da:98:ea:9e:12:56:7e:
12:f4:87:23:20:2e:e4:47:c7:9e:16:56:fc:d0:d3:ab:f4:62:
1c:3a:31:f6:e8:74:70:ce:63:31:c0:41:be:61:ce:c5:00:f1:
7f:3b:d0:5d:35:4f:72:1a:23:68:53:fc:ac:87:c7:7a:c6:02:
72:84:40:34:10:77:b0:18:48:d2:60:6c:cd:1c:68:00:67:ed:
d8:57:2f:43:52:14:c1:19:bb:48:8f:56:c6:7b:43:93:9e:34:
6c:46:ea:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3
OUJCQkEzM0YwHhcNMjYwNzIzMDIzMTE2WhcNMjYwNzMwMDIzMTE2WjAYMRYwFAYD
VQQDEw02YTYxN2NmNC00NTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5fLXMD7CJ2gJZcZnU+27RtRAE964ra++xy+MUKDao+Zrw0Ow7GZSNeE/dXRI
QbACsbWmSHpMaqSYkdwp/F9uDL+llIljMk/d+JBY/cFtmoHziBxuKGaaLWGYKZBw
6ws442sl0CDTJjOIiy114Fji0bNTgvu3RryRnHLeA1upEeOb9JEeOcKnXvuJrGcd
LeKgVBapiuLP/JfU5gYpW+JYFYINxcWfttPACQSCoZjedOUgkCrcZ6OG3F/Y9LS0
V+qyD6O4u1bje20G2DiQkFyP8Jmlo/Qrog7dz6M25FGQZF5hzSfDo73ccjI1BfNv
8wOe3gwVZAjwLrP+p4znRUeVhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCArUap1
g736gy29xE3/QklDWY+PMB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB
Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi
WHBmWUxOMl8teTU1dTdvejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABhtS5828lDwCRHsXjdBljz2iBIySDwKMad04ylT8OUyfO/8rJcgOMd8RHR0P
J6tS8pUgQYjsVX8FojKGRMBWDeEdymVWmEtCgIFNu4CyaUPaY0zHtqL5pM/RNUi5
obHfnXj1lMxn2hYc6wFxOAxtGjJSOE1CdNibx2MYwDOaa0aWvl8Ylik/xUTBIVZX
uItZLMSa763fs2Buxd7amOqeElZ+EvSHIyAu5EfHnhZW/NDTq/RiHDox9uh0cM5j
McBBvmHOxQDxfzvQXTVPchojaFP8rIfHesYCcoRANBB3sBhI0mBszRxoAGft2Fcv
Q1IUwRm7SI9WxntDk540bEbqKw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:09 2026 by rpki-client