
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json)
Hash identifier: IWJR0CjtjBjFs71bOjut7fSI5OomzpHKptIZzwVVfEQ=
Subject key identifier: EF:5D:7B:A3:DF:9E:E1:A0:16:5A:78:E4:EA:FC:D0:8F:AC:68:79:A8
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial: 04E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
Manifest number: 04C8
Signing time: Fri 04 Sep 2026 23:35:20 +0000
Manifest this update: Fri 04 Sep 2026 23:35:19 +0000
Manifest next update: Fri 11 Sep 2026 23:35:19 +0000
Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: DsXqit0Fs+N31O3MIuzRkAnLAYGpmTpCYe8HFbO9AF8=)
2: 0BDDA52C7E4711F1A538061D81A30FBC.roa (hash: HsWAdOU5aGRJlW8FY2L3nkNFibcMLbUNXEEQ7VNVJdI=)
3: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: T3sBWx7WsASIvXJipD/8/WgUdUsv5wiiZndfgeUi8xY=)
4: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: rB0rGnSozJU8NojAc45M//byk+WcellFqqyoYGAw7jI=)
5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: Pmqjaf05ZJypDFe8YtfZZnEUHZ02b2LTX1bmYry5Vhw=)
6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: CKul+kVwMWY4jLfuuuUbRh3TQkde1chI2jW7GmtTDpI=)
7: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: HLjD7Dlj4QNO0JkX6mdLipIuyOmY6BPG8xeaEhp4ZP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Validity
Not Before: Sep 4 23:35:19 2026 GMT
Not After : Sep 11 23:35:19 2026 GMT
Subject: CN=6a9b55b8-06a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:c3:6a:be:48:22:8e:51:3a:24:75:42:8f:
1e:01:ca:4a:96:0c:f4:30:b5:3e:f4:3b:a3:9c:a2:
ef:04:11:00:65:ec:a5:21:47:16:c1:f8:d7:b6:ca:
5e:ce:02:b8:9c:d0:be:2c:ef:d7:bf:93:73:75:9d:
45:2a:e8:d3:f7:ab:06:ef:7d:c3:cf:bc:03:fc:31:
ce:12:19:b4:23:ba:24:06:85:a6:81:14:79:fd:65:
cf:47:d7:25:80:37:ea:5b:b3:0c:4e:67:d3:eb:74:
53:e6:f3:93:30:4c:e7:76:61:59:f5:3e:4a:60:54:
14:69:be:ae:ca:61:0a:c8:de:44:12:31:bb:54:57:
cb:8a:3d:fd:5b:59:d6:c5:87:59:32:28:9a:ff:bb:
ce:3b:6b:23:a5:6c:ed:d8:f5:5e:4f:22:5a:76:51:
98:f2:a3:2c:af:5f:90:e0:33:5f:a2:ed:a9:98:2a:
a2:9d:15:5b:fc:d2:42:6b:f5:ee:3d:4d:9d:b6:3b:
64:26:cf:de:ae:ad:bc:5f:69:b3:ed:48:59:fa:e8:
d4:4a:28:5a:f2:96:db:cb:19:fb:be:59:fc:89:d0:
68:ec:2a:73:a5:f8:d2:f0:15:e2:e8:85:a1:59:9a:
d3:5c:1c:de:b3:e9:df:46:f4:e8:b5:02:57:b8:ef:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5D:7B:A3:DF:9E:E1:A0:16:5A:78:E4:EA:FC:D0:8F:AC:68:79:A8
X509v3 Authority Key Identifier:
keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:4b:2a:c4:be:e9:5d:87:fb:35:a7:9c:6e:d9:54:ac:93:
ab:1b:14:3b:f2:c9:84:3d:0c:2f:1a:35:82:21:00:17:1b:51:
6e:78:f3:52:7b:16:1a:a1:8e:26:73:99:7e:a1:ac:a4:d2:29:
f4:0c:30:03:77:cb:b0:46:ed:7f:26:98:06:1c:92:3d:f8:39:
53:33:02:32:fc:9b:39:de:b8:dc:46:8d:27:0d:24:7c:a3:e9:
92:4f:b8:b7:21:06:b8:5b:15:e2:37:ee:89:09:55:46:53:7c:
37:d2:fa:39:d1:da:4e:82:6f:7b:4f:96:fe:c7:34:bf:26:2d:
40:89:00:5a:90:74:8e:5f:2a:ff:9b:a5:e8:ca:51:75:6d:58:
ff:18:66:c1:3b:15:d9:b5:3c:06:90:74:f5:c2:1f:07:c6:20:
6a:7f:b1:d9:1d:c8:39:e7:a6:bb:65:78:ec:d9:50:19:d3:41:
1c:af:77:e7:56:d0:81:12:af:ae:bb:bd:66:2f:aa:b5:72:4b:
df:ed:10:b6:b3:b1:d0:19:a3:92:7f:4c:09:84:64:69:45:cb:
aa:13:45:f2:33:88:52:a5:0e:9a:13:c2:86:13:a1:a4:f6:8f:
5c:50:10:17:7f:35:38:4a:17:9b:63:b3:dd:b3:c6:df:5a:e1:
07:7e:43:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:25:23 2026 by rpki-client