
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json)
Hash identifier: UEq1dzHQJ43kphFN+HIcssfquRmOJOoizKhsVtzYilY=
Subject key identifier: 5F:3B:7D:97:AC:E5:70:5B:2A:30:6C:AE:45:70:8E:5D:77:D2:CE:92
Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Certificate serial: 0D4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
Manifest number: 0D32
Signing time: Tue 12 May 2026 18:06:25 +0000
Manifest this update: Tue 12 May 2026 18:06:24 +0000
Manifest next update: Tue 19 May 2026 18:06:24 +0000
Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: fv1ZJJ9wBTirbkEvD4GqsR1mJrxUjhZ/C0v7+Z0JsUE=)
2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: Ra9KeGGoq4qKoY1lvMm4sJXsGfKv+RNnldeY/mU1RTs=)
3: B647F704090C11EFB666C967C4F9AE02.roa (hash: nMJlJs5RVl9hK1ao5B9tFWVbxrXwgcmPLTkIzplwg3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3404 (0xd4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Validity
Not Before: May 12 18:06:24 2026 GMT
Not After : May 19 18:06:24 2026 GMT
Subject: CN=6a036c21-aff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:a0:be:fe:fe:8f:25:35:f0:d7:ce:43:2b:
81:ec:ee:cb:9f:90:79:dd:ea:24:bf:ca:e7:40:f0:
b3:32:1d:94:20:49:c6:5a:e3:52:76:c3:07:30:25:
61:7d:72:46:11:89:f3:ce:30:05:64:23:41:9a:33:
4a:f8:77:9f:0a:ff:b9:c7:e0:8e:f4:62:dc:3b:1f:
3a:33:3d:f1:f1:3c:73:c7:79:10:44:ea:cb:01:6c:
bf:8e:6e:8c:f3:ef:b7:1c:4e:5f:27:b5:6e:1b:c6:
42:34:a9:a4:10:49:9a:0d:8e:48:7d:2a:ae:0c:b2:
b1:1d:8c:17:8f:7d:c6:77:9c:be:54:e2:ce:ab:88:
d1:d1:62:05:df:25:9b:ec:dd:d3:81:c0:1e:ce:40:
90:1c:fb:0a:c1:a5:67:0a:02:01:0f:94:d9:e1:38:
d1:5a:d7:01:78:dc:0e:10:e2:a3:7a:46:73:a0:50:
c3:ce:0b:08:da:93:df:40:d6:4d:d7:5f:09:de:99:
d9:56:0b:32:18:68:55:ff:0b:a9:52:c8:fa:ac:07:
ee:3c:c1:0c:67:ce:17:ef:bd:ab:49:d1:f2:77:40:
1d:2c:99:5a:2b:5e:b9:72:50:b9:b0:56:21:b7:00:
e2:f0:bd:59:40:e9:28:18:b2:45:ee:18:6b:35:bd:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3B:7D:97:AC:E5:70:5B:2A:30:6C:AE:45:70:8E:5D:77:D2:CE:92
X509v3 Authority Key Identifier:
keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:f4:84:a1:f8:bf:e4:5a:6e:60:7c:21:c4:27:45:67:c0:de:
b5:e3:9b:d8:8f:e2:0e:b1:5e:2d:71:af:53:83:59:b2:aa:46:
ce:9a:03:57:98:c9:49:6b:1b:3e:14:82:38:63:b9:50:88:bc:
39:6b:67:3b:c3:71:3c:5e:5a:5b:d8:c2:5f:e8:4a:b6:a0:66:
47:7b:4f:8a:b1:2d:ef:37:c1:a8:ff:88:77:15:ec:ee:c4:16:
10:96:95:27:ae:92:98:76:a0:42:ac:37:e2:16:2a:e6:20:2e:
08:98:50:b4:ce:1c:21:43:c7:88:ee:e2:06:fa:b1:86:18:64:
b1:f2:7c:61:11:0d:6c:bb:fb:ac:3d:c7:16:49:78:09:cc:ab:
5f:2f:2e:47:e1:52:7c:f8:d0:57:39:4b:50:c1:d3:1c:79:74:
d1:1c:d9:00:28:9c:14:ae:04:b3:5d:b7:74:97:09:6b:a6:d5:
46:42:d8:77:50:00:ce:7d:eb:60:72:7e:92:01:9a:44:00:e2:
81:0a:31:82:1d:1b:b7:19:91:e0:08:bc:97:98:27:72:bb:2b:
b5:4f:bd:93:4c:81:12:d0:f1:73:98:ce:5d:16:0e:70:ff:9a:
7a:df:fc:e0:a9:69:fe:e3:6f:9d:f9:89:e1:9d:de:ea:9a:88:
12:17:d5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:10 2026 by rpki-client