
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
File: nxlDAU2jmDwfXHj3bM8tpWpKNro.mft (raw, json)
Hash identifier: 7G/xNGZ/tZGMF/KH79BTDmgrb09hqhGZeJKk8clZ+4Y=
Subject key identifier: 38:C7:27:CF:42:62:95:6F:B5:D5:31:98:0F:54:9F:8F:20:F9:40:3A
Authority key identifier: 9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA
Certificate issuer: /CN=A912E3B6/serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
Manifest number: 76
Signing time: Thu 29 Oct 2026 08:34:58 +0000
Manifest this update: Thu 29 Oct 2026 08:34:57 +0000
Manifest next update: Thu 05 Nov 2026 08:34:57 +0000
Files and hashes: 1: nxlDAU2jmDwfXHj3bM8tpWpKNro.crl (hash: zgtH+Lwyck3jKskmAkux+9xvt6rW7zki89sR8Z8Q/Gw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl
rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 08:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3B6, serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA
Validity
Not Before: Oct 29 08:34:57 2026 GMT
Not After : Nov 5 08:34:57 2026 GMT
Subject: CN=6ae30531-2e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:9d:25:82:eb:15:e5:0a:af:df:d1:0d:06:
ee:0f:9b:0f:0b:98:dd:df:45:b8:44:70:64:f3:f1:
37:cd:a8:56:c0:61:dd:c1:3a:ec:e2:f8:ec:20:b5:
cf:0a:7c:41:8a:25:f4:04:ec:51:85:7a:f9:38:e2:
40:77:7e:b6:81:bb:e2:71:16:89:6d:e4:76:e9:e2:
cb:a7:87:d3:3a:2c:c8:35:82:d7:46:86:be:17:33:
46:ab:ad:5d:7c:fd:23:94:9f:e5:0f:0d:a2:80:6d:
8a:0f:bc:6f:f5:ef:e8:ca:e8:00:b8:bd:73:2a:72:
31:0e:53:24:cb:ab:d9:9c:bc:c4:16:f2:db:14:c0:
33:e5:40:d7:3f:a2:d5:a6:12:f7:cf:dd:ce:ca:a0:
89:d8:07:22:79:b3:b4:b4:4f:07:34:dc:35:44:58:
bf:18:33:f0:7a:a2:12:e9:69:8d:23:39:5d:c1:6d:
a1:8c:cd:8c:39:13:f9:79:27:8b:d4:bb:43:b1:9a:
a6:86:4f:67:23:4b:16:f2:98:65:94:8a:26:af:3e:
3d:c8:d3:21:61:29:39:d8:39:a5:21:e0:27:9f:87:
94:55:22:3c:fe:e8:99:9c:ad:c5:1e:0c:07:68:ce:
3e:55:2e:61:5c:19:fd:a9:0c:52:51:6a:96:32:f5:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:27:CF:42:62:95:6F:B5:D5:31:98:0F:54:9F:8F:20:F9:40:3A
X509v3 Authority Key Identifier:
keyid:9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:d2:00:23:9f:80:a6:ef:34:72:74:50:98:f4:a0:0c:99:d7:
54:34:66:99:bb:e7:5b:50:0f:e7:37:76:e2:4d:10:e9:a5:ca:
6e:95:27:b3:b9:f7:3c:fc:6b:63:11:12:11:4a:b9:e2:25:f9:
86:92:6e:28:23:0f:a5:50:41:74:bf:ae:f9:ba:84:ba:da:da:
2f:06:4e:65:a5:4c:ca:f0:d4:2a:51:1d:96:c6:5a:64:10:3e:
03:12:99:60:75:70:ab:ae:5f:bd:92:43:21:dc:70:a7:42:20:
b1:70:bd:4f:fd:69:fc:33:49:c3:2e:c6:ac:97:b4:a8:06:29:
7b:f1:26:3d:17:d0:ac:e6:87:fc:82:00:c5:33:42:c7:0f:1a:
08:a0:68:44:f0:95:45:c1:92:f5:04:3b:69:42:b5:d5:b7:b7:
79:3d:f7:b2:20:86:62:2f:87:96:53:f5:56:e9:b5:47:7c:93:
b6:b6:f9:c7:27:93:52:64:5c:5f:d3:a5:f3:14:83:bc:d8:e2:
16:ad:e4:4a:ec:0e:5c:f6:fa:f8:56:27:91:c3:7e:31:7f:15:
d4:65:0f:ac:48:a1:88:37:4e:25:13:34:97:a0:9d:fa:19:6e:
bd:73:a1:11:b9:03:7e:5d:7f:3f:e2:1e:d1:9b:43:6a:0e:67:
6f:db:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:55:51 2026 by rpki-client