
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json)
Hash identifier: TQ/4TZhS3rmfv7/E86MKZ6Z0bhb4TZ9a0McM1Sv6O+M=
Subject key identifier: 45:A0:8C:C0:81:4E:DA:6D:DC:82:73:A0:A1:80:C1:97:A8:95:67:64
Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Certificate serial: 1E76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
Manifest number: 1E67
Signing time: Sat 04 Apr 2026 16:00:02 +0000
Manifest this update: Sat 04 Apr 2026 16:00:01 +0000
Manifest next update: Sat 11 Apr 2026 16:00:01 +0000
Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: ribYbeYloB974W6tPd/bzpovGUv26AHRlx/WAu1tnZ4=)
2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: gQzb1U7meIgu9bThPWgr8GqCZnh7L5ZruQYTrZjl8iA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7798 (0x1e76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Validity
Not Before: Apr 4 16:00:01 2026 GMT
Not After : Apr 11 16:00:01 2026 GMT
Subject: CN=69d13582-bb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:5d:bb:bf:c2:95:48:25:a7:ae:8f:20:57:
0b:2f:3f:43:dc:15:7c:9a:b6:89:e0:07:8d:bb:40:
63:5f:70:9e:f1:e4:65:7d:b9:ca:bf:e5:15:2a:de:
1c:73:0a:55:58:f2:9d:66:ef:6e:55:01:b1:25:0c:
ff:f8:7d:38:7c:ea:86:6e:d9:34:9a:3b:21:cd:b6:
e7:35:cd:79:75:da:c3:9d:d9:6b:97:73:e1:2f:c3:
f6:ca:49:78:3c:0c:42:75:5f:67:99:fb:5b:2c:13:
f7:6c:27:ec:7d:70:86:a5:71:08:bf:63:eb:15:05:
75:66:7f:5f:44:0c:b6:3f:5a:37:5c:b9:78:68:b7:
20:ba:55:8c:4d:c9:ea:0f:b8:95:db:07:a0:52:cc:
8a:12:64:26:fe:31:be:56:a3:a2:5b:71:1b:71:3c:
f4:67:fa:65:ad:f9:75:15:ff:73:f4:eb:72:82:c2:
bb:d8:db:c0:05:b3:5b:6f:81:c3:3c:9a:44:8c:35:
0e:61:33:64:75:3a:c6:21:10:3d:b3:ed:f7:97:6f:
43:b6:f8:68:f2:09:42:df:16:2e:a7:a1:06:fc:2b:
2a:31:b8:2a:cf:22:e9:d9:f2:80:c9:bd:9f:b8:c5:
a8:ae:c9:7a:bb:96:0e:ab:80:f3:f3:cf:2f:da:b5:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:8C:C0:81:4E:DA:6D:DC:82:73:A0:A1:80:C1:97:A8:95:67:64
X509v3 Authority Key Identifier:
keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:60:7c:20:35:91:37:56:2d:41:b3:0f:5c:a5:3f:ab:8e:07:
b8:23:2c:56:96:bd:aa:a7:aa:b0:4f:e1:3a:4b:b6:03:cd:a3:
de:1a:03:11:9d:5a:61:6c:e6:41:e9:93:1c:0c:f7:fc:93:21:
f6:23:6c:85:48:2c:07:ff:c8:a7:ca:d0:83:f4:d9:70:f6:31:
2d:5f:06:77:48:98:04:05:76:8f:78:90:b3:7b:31:ca:e3:b9:
de:67:cf:fd:61:48:6b:3a:52:2c:a3:71:48:2b:2e:e4:12:ca:
e7:c4:62:12:e8:f7:e4:4a:03:f6:35:f9:3c:f9:2f:2b:5e:b0:
e1:03:32:ec:03:3b:04:b7:f2:0e:a0:84:0c:e9:5a:cd:87:cc:
67:bc:9a:40:f8:2e:96:02:5b:c9:8d:b3:e6:f5:bb:a8:9d:1c:
66:92:ad:24:85:a8:8e:28:22:5c:2b:9c:54:d9:6d:6d:d4:fb:
e8:76:3a:73:51:a6:b3:0e:7d:09:88:75:ad:52:47:6e:dc:f3:
f0:f3:7f:de:78:4b:58:e7:eb:ad:75:7c:1f:0b:30:0c:b7:ce:
96:d3:8f:4a:f5:6e:5b:d9:26:36:1e:98:84:b8:1f:32:73:4e:
71:01:46:c1:db:34:07:e5:bc:d6:e7:10:33:86:51:bf:72:36:
f0:96:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:09 2026 by rpki-client