
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier: llAyDxwLMgp3F4RY1RzfVPe+/dINhEnUSGlLWOP+RoI=
Subject key identifier: 90:06:13:23:29:58:25:11:15:B8:E5:DB:60:D0:B8:B0:B6:71:F6:4D
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial: 06E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number: 06DC
Signing time: Sat 04 Apr 2026 21:59:54 +0000
Manifest this update: Sat 04 Apr 2026 21:59:53 +0000
Manifest next update: Sat 11 Apr 2026 21:59:53 +0000
Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: 4gFmOT9jqzec+a5G7/LRpnBhU5fHHNjMrIY9NoIol5s=)
2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Validity
Not Before: Apr 4 21:59:53 2026 GMT
Not After : Apr 11 21:59:53 2026 GMT
Subject: CN=69d189d9-fc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:33:4a:eb:85:c7:ed:d9:5c:62:6c:3f:ba:
7f:1c:1b:2e:5f:80:a9:90:fe:62:50:2f:ca:7a:7d:
96:0f:23:91:1c:c0:81:09:6f:65:9c:ff:31:d6:8a:
1b:ad:2c:89:fc:d1:bc:73:54:50:5b:4d:52:aa:14:
53:98:b6:08:3d:49:ee:01:e0:ea:60:a5:d7:0b:cb:
41:c8:83:74:f6:54:07:25:b7:bc:1f:58:b8:52:8e:
73:25:4a:2e:e4:d6:e8:38:f8:58:65:86:03:f7:37:
29:f8:eb:b0:43:27:19:b1:6d:c1:3c:c4:52:5b:7f:
4c:17:a1:f4:fc:ba:f5:11:70:b1:a6:0e:66:83:af:
6a:89:2f:39:35:bd:11:41:59:00:91:bb:3f:a6:c5:
c6:ed:5f:e7:a6:c3:91:c0:7e:b1:91:e4:04:fb:d2:
08:7d:e6:e3:90:d8:2c:70:bc:7c:97:4f:79:1a:78:
b0:99:09:6f:b3:48:61:bb:e0:33:f1:35:9a:5f:d6:
12:ae:f1:71:6b:f6:76:98:be:2f:0b:28:7a:0b:f8:
4c:d0:dc:07:91:13:1b:c8:b1:fd:e5:88:79:9d:98:
30:2a:8a:cc:e1:79:90:ab:84:43:13:86:2c:36:28:
6b:7a:3f:91:ec:34:ae:48:7f:90:30:bc:d9:54:43:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:06:13:23:29:58:25:11:15:B8:E5:DB:60:D0:B8:B0:B6:71:F6:4D
X509v3 Authority Key Identifier:
keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:bc:1c:ef:0c:bd:56:e1:cf:a0:b8:23:cb:30:c9:4b:1a:13:
a6:b8:62:73:25:d9:5c:d2:e6:fe:6f:bc:5d:09:73:31:87:94:
c0:65:71:b0:00:28:f0:40:a4:a9:ad:2c:8c:3e:95:35:a2:87:
7e:65:6d:a0:14:b8:0e:0b:27:80:d8:52:1f:ea:a4:18:45:f7:
06:64:31:42:2a:2c:0c:70:65:c0:87:56:bf:27:a8:04:21:18:
b4:5b:c7:4b:82:42:68:e8:31:23:56:db:29:12:17:2a:d7:d0:
1b:03:5a:42:8e:ae:ee:dc:be:ce:79:92:83:c3:3b:26:00:e6:
41:97:ef:23:25:5c:9e:48:bb:1f:3f:6a:8a:7b:6a:4a:af:d1:
90:71:74:b6:48:a1:ae:ab:43:25:88:02:aa:51:c7:43:7b:13:
99:65:55:3c:cb:32:3c:7e:6f:1c:f4:d2:09:4a:96:4d:ed:ec:
34:92:5c:d8:5d:b5:44:1a:3d:ce:2b:8c:9f:da:09:94:1d:c7:
bf:85:48:f0:98:d3:db:d8:68:23:02:09:98:07:55:29:b3:d3:
1c:9f:64:7a:ff:d2:e8:bc:74:9b:2d:1e:f5:84:76:30:ad:da:
ff:e0:b0:65:a0:6d:0c:3a:ae:6e:d2:37:d1:f4:79:65:8c:87:
9d:36:60:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG
OUQ2MDFFMEUwHhcNMjYwNDA0MjE1OTUzWhcNMjYwNDExMjE1OTUzWjAYMRYwFAYD
VQQDEw02OWQxODlkOS1mYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2t0zSuuFx+3ZXGJsP7p/HBsuX4CpkP5iUC/Ken2WDyORHMCBCW9lnP8x1oob
rSyJ/NG8c1RQW01SqhRTmLYIPUnuAeDqYKXXC8tByIN09lQHJbe8H1i4Uo5zJUou
5NboOPhYZYYD9zcp+OuwQycZsW3BPMRSW39MF6H0/Lr1EXCxpg5mg69qiS85Nb0R
QVkAkbs/psXG7V/npsORwH6xkeQE+9IIfebjkNgscLx8l095GniwmQlvs0hhu+Az
8TWaX9YSrvFxa/Z2mL4vCyh6C/hM0NwHkRMbyLH95Yh5nZgwKorM4XmQq4RDE4Ys
Nihrej+R7DSuSH+QMLzZVEMFFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAGEyMp
WCURFbjl22DQuLC2cfZNMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky
ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy
VWktdHZ4bFU3bF81MWdIZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdrwc7wy9VuHPoLgjyzDJSxoTprhicyXZXNLm/m+8XQlzMYeUwGVxsAAo8ECk
qa0sjD6VNaKHfmVtoBS4DgsngNhSH+qkGEX3BmQxQiosDHBlwIdWvyeoBCEYtFvH
S4JCaOgxI1bbKRIXKtfQGwNaQo6u7ty+znmSg8M7JgDmQZfvIyVcnki7Hz9qintq
Sq/RkHF0tkihrqtDJYgCqlHHQ3sTmWVVPMsyPH5vHPTSCUqWTe3sNJJc2F21RBo9
ziuMn9oJlB3Hv4VI8JjT29hoIwIJmAdVKbPTHJ9kev/S6Lx0my0e9YR2MK3a/+Cw
ZaBtDDqubtI30fR5ZYyHnTZgEQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:04 2026 by rpki-client