
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
File: nSYymrepW4-pWWN12jcInk18Iss.mft (raw, json)
Hash identifier: fPxljcMZvG0bxAnjfBld+NWwGBpbiNpfq4OkSGf5ojQ=
Subject key identifier: 38:76:1D:FC:B5:19:1C:14:CB:AC:D5:E9:29:16:D1:0D:1C:28:EE:12
Authority key identifier: 9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
Certificate issuer: /CN=A9156801/serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
Manifest number: C7
Signing time: Tue 27 Oct 2026 07:04:51 +0000
Manifest this update: Tue 27 Oct 2026 07:04:51 +0000
Manifest next update: Tue 03 Nov 2026 07:04:51 +0000
Files and hashes: 1: nSYymrepW4-pWWN12jcInk18Iss.crl (hash: RxCgXbegc8U+zHGtgM8j4bcvWEJ1TiSNdsxBefvFv/k=)
2: 777A4FE4A67311F0B63FA56CC4F9AE02.roa (hash: Yna++zDeE89ulMcZkL3ygCODxHhvZWE/Q4kRPAKzwQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 07:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156801, serialNumber=9D26329AB7A95B8FA9596375DA37089E4D7C22CB
Validity
Not Before: Oct 27 07:04:51 2026 GMT
Not After : Nov 3 07:04:51 2026 GMT
Subject: CN=6ae04d13-26cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:fd:4a:50:54:f0:72:04:d3:1a:46:d8:b8:
c5:f2:81:e9:5c:4a:ae:71:3c:19:95:95:89:a0:20:
11:c8:07:b6:2f:92:da:8c:83:2b:3d:9f:cc:ac:d6:
81:f6:d5:7e:40:f1:f8:bb:27:70:c4:3a:21:1d:aa:
f9:4e:09:21:e4:2e:ec:7d:ea:2e:17:2a:1c:a0:d0:
52:27:89:bb:44:3d:66:e9:db:92:c0:53:80:af:e4:
0f:83:a5:7e:d3:99:df:69:c5:47:b9:3e:72:3c:d6:
09:c1:d9:8e:d9:3f:de:6e:0d:b0:cc:7e:55:5c:63:
38:31:00:bd:6c:72:d7:72:ad:1d:2b:b2:05:70:5b:
1b:d8:a8:d2:c5:8e:27:aa:e0:0f:da:d5:4c:92:a1:
40:93:8c:e4:b2:0b:ea:47:ef:f0:7c:ee:45:61:31:
0e:eb:7b:31:66:2e:43:6b:d0:22:b7:40:24:87:a7:
33:eb:ad:81:b3:e3:6c:a4:d7:d9:6a:7f:96:ca:7f:
f9:20:cd:c0:ed:df:00:db:4f:ff:58:93:f8:d8:d6:
da:ba:0d:83:5a:0f:4d:77:ce:30:0c:55:12:a8:31:
1d:04:c0:d4:96:d4:bc:72:d3:06:35:04:4a:9e:bc:
24:d9:22:16:d4:8b:51:9a:53:5c:d3:83:5d:d0:8b:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:1D:FC:B5:19:1C:14:CB:AC:D5:E9:29:16:D1:0D:1C:28:EE:12
X509v3 Authority Key Identifier:
keyid:9D:26:32:9A:B7:A9:5B:8F:A9:59:63:75:DA:37:08:9E:4D:7C:22:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nSYymrepW4-pWWN12jcInk18Iss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156801/2B91772CA58A11F0B0170B50C4F9AE02/nSYymrepW4-pWWN12jcInk18Iss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fc:27:8d:de:62:34:c9:4e:21:5b:88:07:64:73:59:e4:33:
8f:bd:0b:ab:6c:d1:16:83:0a:fa:b1:81:a2:de:82:c6:29:af:
67:70:a5:ce:f5:83:cd:cc:fe:af:5f:28:ba:bc:0a:2a:39:e5:
64:cd:4e:c6:d4:b1:fb:5c:a6:79:da:af:22:96:10:31:4f:86:
3c:c7:6c:95:d3:ae:73:2f:64:39:15:64:dc:64:82:a9:cf:c2:
65:7b:12:26:31:fc:d7:43:cb:d2:0f:41:4e:14:7b:8d:21:2d:
9a:a3:d4:ed:80:ea:98:38:71:2c:df:af:40:c8:0f:a9:98:7e:
56:c5:c0:73:90:68:07:3f:f1:2f:7c:ae:c8:fb:e8:6c:67:1a:
18:e7:1e:a1:b3:67:0c:fe:ae:99:b2:56:2e:0a:bc:5f:86:bb:
8d:dd:2a:23:d1:aa:ae:8f:e0:2d:d4:50:e9:26:c7:d5:3e:03:
0f:87:8e:37:9b:be:e0:68:b2:d9:35:36:0f:25:67:6a:99:52:
ab:d8:59:13:6f:5f:15:c0:11:19:06:08:b5:79:f7:f5:3c:c3:
54:3d:da:54:9e:36:2f:99:2e:f7:24:fd:4b:f8:5e:53:16:bf:
91:9f:ca:c1:31:94:34:68:6e:a9:f8:00:2e:06:f3:d8:9f:0b:
91:4b:13:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 23:46:04 2026 by rpki-client