
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
File: NjEWXebubQcy5I-6Klzn3KjUA3w.mft (raw, json)
Hash identifier: FFRV1CVQPKIqzTbLBoKF0f5bEnviIVwccwuuT7NUYFc=
Subject key identifier: B4:EA:59:1D:C0:FB:3A:93:CB:9A:BB:1E:1E:2E:5E:60:EC:2E:29:AB
Authority key identifier: 36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C
Certificate issuer: /CN=A913BBCF/serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
Manifest number: 05
Signing time: Tue 21 Jul 2026 11:07:28 +0000
Manifest this update: Tue 21 Jul 2026 11:07:27 +0000
Manifest next update: Tue 28 Jul 2026 11:07:27 +0000
Files and hashes: 1: NjEWXebubQcy5I-6Klzn3KjUA3w.crl (hash: mBOZ442WKuhA7NUAO1glJ6gauX8zSKhcPNYz3C/MGGY=)
2: A8386F1880BA11F199241D7E93A30FBC.roa (hash: X3b6yFfF3a4hrZ2AmVdCmz6pbLFnZ96Z+2HaXzQujlk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.crl
rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 11:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BBCF, serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
Validity
Not Before: Jul 21 11:07:27 2026 GMT
Not After : Jul 28 11:07:27 2026 GMT
Subject: CN=6a5f52ef-6226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:5b:93:56:25:ae:bf:c9:08:fd:21:ef:c7:
e8:20:be:a9:5f:78:29:34:c9:6e:12:18:ce:6e:02:
ed:9c:9b:93:f4:8f:6e:ad:34:78:9a:1c:2f:a0:c4:
10:9a:52:c4:99:a3:a1:cb:01:86:c2:02:2d:37:6a:
36:51:d9:18:da:8c:60:23:49:bb:49:89:d5:53:eb:
13:8b:94:be:6f:84:61:fe:ad:0f:ac:04:42:85:75:
6b:d9:7a:f8:21:0b:35:3c:5a:63:5f:71:45:98:30:
2b:f1:74:70:27:1c:59:72:b2:36:9a:83:c0:81:bc:
08:73:d6:97:c3:5a:bc:b4:9b:c4:03:18:3e:f2:b6:
9f:47:9e:32:e1:fd:95:f0:6f:6e:24:7d:8b:cc:19:
09:83:49:2e:86:27:71:22:b3:d2:26:a1:d7:ab:41:
5f:1b:b2:20:e2:f8:e3:98:b7:7a:61:6f:64:65:68:
75:5a:c6:e0:a4:f6:58:ab:1b:c2:da:35:c4:04:82:
9c:c6:1b:7a:4e:d6:ae:10:17:d8:3c:de:9b:ee:7c:
a1:78:e7:80:63:04:e6:a1:91:eb:03:66:15:fc:75:
fa:2f:d0:84:90:66:b7:f9:5d:a7:f6:f2:27:4b:9c:
5a:3d:5c:d6:ad:b9:d6:33:e4:ff:0e:f8:fe:43:49:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EA:59:1D:C0:FB:3A:93:CB:9A:BB:1E:1E:2E:5E:60:EC:2E:29:AB
X509v3 Authority Key Identifier:
keyid:36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:af:e8:b7:50:1e:7c:48:21:47:09:04:13:87:07:f5:97:4b:
80:1c:80:77:70:86:25:f0:1e:da:82:b3:bd:46:11:ed:cc:1c:
cf:a2:18:60:09:cd:36:7c:e7:1f:a9:44:d1:08:41:40:62:60:
c3:20:58:59:07:e0:79:4f:b3:9f:f0:11:85:fb:ba:e3:9f:6e:
81:04:df:6e:35:b1:ca:a3:5c:df:61:c5:52:26:a5:74:17:84:
1e:8c:99:33:d9:17:72:bb:42:9f:e4:31:4c:c4:4c:91:4d:26:
21:f9:d0:26:96:ad:19:73:f3:9e:52:af:77:db:e8:26:88:6a:
7b:13:f8:c8:39:be:4f:13:9d:19:2c:8e:ca:52:d7:f4:83:00:
7d:38:8b:fc:bb:cf:9c:08:69:4c:56:3c:2a:72:6c:33:25:62:
3d:df:10:15:8b:84:5c:2a:42:1e:aa:70:dd:e6:74:e5:4d:c7:
ff:a3:3a:40:44:63:96:04:08:b5:ab:e7:1a:c7:43:79:cf:e6:
02:b5:39:5c:fc:9d:b4:33:55:e5:42:aa:40:b0:d5:2e:0e:ac:
14:1c:c1:10:eb:1d:55:7f:49:5d:ab:e6:93:12:7c:eb:17:cd:
80:13:4a:a9:78:0c:cb:24:76:d1:8f:e2:ed:17:44:62:27:c0:
76:63:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:33:24 2026 by rpki-client