
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json)
Hash identifier: 2SGD8ugNiOP+sNzFuxlEhtbCf5W5TVawVJPm9AkxppE=
Subject key identifier: 6C:BC:1C:9A:A4:24:C3:32:1B:AA:04:71:D5:90:5A:BF:5E:DD:59:9A
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
Manifest number: 74
Signing time: Wed 02 Sep 2026 16:21:18 +0000
Manifest this update: Wed 02 Sep 2026 16:21:18 +0000
Manifest next update: Wed 09 Sep 2026 16:21:18 +0000
Files and hashes: 1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: UC/Aec8nSR1Qk00/GGMGHPxwoKFPZ2EDbvmDc4Yw9Uw=)
2: DBFD5AE29AC911F198A92D964911F970.roa (hash: w+n0GytCz1tL+nta12xN55dLplLzBUMuXjHXBaFBmg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 16:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Validity
Not Before: Sep 2 16:21:18 2026 GMT
Not After : Sep 9 16:21:18 2026 GMT
Subject: CN=6a984cfe-9d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:a4:15:19:e4:7e:6d:be:bb:61:64:10:e6:
de:04:93:f9:8c:35:6f:10:7e:20:ea:c9:51:32:f5:
e1:98:02:13:58:2e:dd:18:a2:d9:94:42:6d:be:df:
ef:82:80:d2:8e:68:dd:da:3f:bc:a7:2c:29:e8:dd:
17:09:11:5e:f3:f7:8e:b4:e8:f1:ea:d9:d3:8e:60:
62:32:5d:65:30:ed:43:d8:7d:76:25:bd:8c:88:c3:
83:fc:a2:d7:02:11:dc:32:f2:1f:1a:0d:68:cd:8b:
fe:81:54:31:42:73:12:0b:97:9a:21:d5:58:71:82:
73:76:3f:00:0d:b1:b7:bf:55:ec:fd:01:40:3c:28:
1f:b3:45:af:cc:0f:72:22:7e:be:a4:45:33:b3:2f:
8c:d0:e8:12:02:4a:b1:40:ca:f7:35:84:ed:7b:91:
b7:a9:88:bd:45:1f:31:81:1c:e5:79:89:70:c8:71:
ad:98:4c:be:8f:82:2e:2b:ce:1b:2c:7a:04:6f:10:
f0:43:43:06:69:0e:ea:3d:52:74:2c:58:78:52:4f:
d2:74:d5:e6:73:d8:cb:bf:58:dc:b8:15:d1:22:6e:
89:72:e1:d6:ad:04:dd:77:e6:83:d6:46:9c:ea:09:
07:bb:e2:fe:64:14:06:7f:d2:04:1b:56:7c:cd:6f:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:1C:9A:A4:24:C3:32:1B:AA:04:71:D5:90:5A:BF:5E:DD:59:9A
X509v3 Authority Key Identifier:
keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:00:14:56:2e:72:cb:44:f8:9a:32:e1:54:29:6f:b2:03:ec:
d6:e0:9d:59:c1:32:bf:9c:70:29:f1:02:fe:38:ba:3a:7a:d3:
06:f7:d4:c0:36:e1:21:41:e2:57:37:57:39:a2:55:c9:9c:d4:
73:38:fd:68:78:03:0b:50:e2:2a:e8:5e:53:3f:37:5e:69:63:
18:01:ca:50:ba:72:9c:7b:09:76:7a:61:b1:80:48:b5:15:e1:
90:ec:19:1d:82:77:a9:b7:18:3b:62:d0:bb:10:93:9b:2c:ed:
09:82:3a:36:a5:1d:19:cc:25:6d:64:38:d9:01:15:50:22:9d:
c4:e2:f6:53:72:f6:8a:96:9b:61:56:8b:06:cb:74:b6:ca:e4:
06:31:cf:20:1f:c5:75:57:1b:7f:e7:1c:4d:aa:c7:8a:a6:b1:
ab:14:31:35:a0:65:b9:a4:f7:49:f0:9c:a3:fc:fd:b9:97:b5:
26:6f:a0:5c:26:21:cb:d5:f7:6b:3a:0e:43:16:c6:36:59:9d:
7e:7d:03:17:57:8a:b2:eb:fc:72:c4:6c:4a:6d:8e:e0:e0:f6:
64:02:13:1b:06:43:14:8c:2f:9e:05:73:c6:07:06:84:aa:01:
cd:7d:51:d4:08:dd:c1:b9:f6:13:c8:bc:d7:15:00:62:16:3b:
a2:df:5e:a3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QzcyNTExMC8GA1UEBRMoMzQ4MThCQ0YwRDg0RTE1OTlCRDk5ODE3OTk1RTVFQzM5
QjFCMDE0QjAeFw0yNjA5MDIxNjIxMThaFw0yNjA5MDkxNjIxMThaMBgxFjAUBgNV
BAMTDTZhOTg0Y2ZlLTlkNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3TaQVGeR+bb67YWQQ5t4Ek/mMNW8QfiDqyVEy9eGYAhNYLt0YotmUQm2+3++C
gNKOaN3aP7ynLCno3RcJEV7z94606PHq2dOOYGIyXWUw7UPYfXYlvYyIw4P8otcC
Edwy8h8aDWjNi/6BVDFCcxILl5oh1VhxgnN2PwANsbe/Vez9AUA8KB+zRa/MD3Ii
fr6kRTOzL4zQ6BICSrFAyvc1hO17kbepiL1FHzGBHOV5iXDIca2YTL6Pgi4rzhss
egRvEPBDQwZpDuo9UnQsWHhST9J01eZz2Mu/WNy4FdEiboly4datBN135oPWRpzq
CQe74v5kFAZ/0gQbVnzNb9mjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbLwcmqQk
wzIbqgRx1ZBav17dWZowHwYDVR0jBBgwFoAUNIGLzw2E4Vmb2ZgXmV5ew5sbAUsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNzI1L0FDNkNEMTVDMTM5
OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZtYjJaZ1htVjVldzVzYkFV
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTklHTHp3MkU0Vm1iMlpnWG1WNWV3NXNiQVVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD
NzI1L0FDNkNEMTVDMTM5OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZt
YjJaZ1htVjVldzVzYkFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBZABRWLnLLRPiaMuFUKW+yA+zW4J1ZwTK/nHAp8QL+OLo6etMG99TANuEhQeJX
N1c5olXJnNRzOP1oeAMLUOIq6F5TPzdeaWMYAcpQunKcewl2emGxgEi1FeGQ7Bkd
gneptxg7YtC7EJObLO0Jgjo2pR0ZzCVtZDjZARVQIp3E4vZTcvaKlpthVosGy3S2
yuQGMc8gH8V1Vxt/5xxNqseKprGrFDE1oGW5pPdJ8Jyj/P25l7Umb6BcJiHL1fdr
Og5DFsY2WZ1+fQMXV4qy6/xyxGxKbY7g4PZkAhMbBkMUjC+eBXPGBwaEqgHNfVHU
CN3BufYTyLzXFQBiFjui316j
-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:17 2026 by rpki-client