
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
File: npKCbPR9rsiFyZgQKH24bmlXaOo.mft (raw, json)
Hash identifier: 5ua0gGhQHYp+QyDQfWCfgZ3x/UtK2RZ9/814XbfPg78=
Subject key identifier: 12:EC:E5:82:1D:E4:8C:1D:D1:AC:84:40:85:F5:4A:58:DB:56:EF:B7
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Certificate issuer: /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial: 1609
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
Manifest number: 15E0
Signing time: Sat 04 Apr 2026 16:38:42 +0000
Manifest this update: Sat 04 Apr 2026 16:38:42 +0000
Manifest next update: Sat 11 Apr 2026 16:38:42 +0000
Files and hashes: 1: npKCbPR9rsiFyZgQKH24bmlXaOo.crl (hash: qwA8NFKU0i/dLQEbUJDU6r3VgTuTnJjzjfcuFcoKNyQ=)
2: 75417ABE781411F0BDF7A723C4F9AE02.roa (hash: bd3G0MC0OsIrACGAlJF1YZX5oT2Dt7osbjWXj1d662s=)
3: 08C486D0E47311EBB62C361EC4F9AE02.roa (hash: Hs6M3Fh7jWKDJILdF9BW0Fb1gb+f3a7k4oNX0ABQRLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5641 (0x1609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Validity
Not Before: Apr 4 16:38:42 2026 GMT
Not After : Apr 11 16:38:42 2026 GMT
Subject: CN=69d13e92-a43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:5a:91:77:ed:a5:f9:39:55:60:b1:86:25:
f5:ad:62:23:af:dd:e4:cc:1c:ab:e2:be:dc:0c:e2:
7d:f8:93:2f:48:a5:d3:ba:d3:2e:4b:4a:e8:9f:aa:
f0:85:57:15:2d:22:56:70:2e:fe:1d:f0:3c:21:78:
b5:66:de:09:9c:db:75:61:0b:21:7f:2b:2e:84:fd:
41:b4:1d:b3:39:63:9d:14:21:b9:50:0d:c8:cc:c6:
7b:ad:a5:88:04:e5:59:fa:a9:1a:6e:38:bd:9a:e1:
2e:7e:8e:79:ed:81:f6:87:9b:f7:06:9d:1e:60:86:
cf:64:9e:80:40:bf:05:94:d0:56:0a:77:ad:a1:75:
78:db:16:19:48:2a:f1:45:d4:4f:14:43:7c:76:7b:
69:42:75:e9:66:57:d5:6a:ef:a4:e0:33:3d:bb:3f:
a7:57:70:c5:4d:99:2f:87:b2:8e:d1:bd:29:ac:6d:
8a:6f:3a:6e:6a:ce:27:99:7f:50:3b:a7:4e:c3:e9:
c0:31:17:c9:4a:d7:a4:23:8b:1f:16:45:b4:9b:e3:
ce:22:c4:15:c0:7b:d0:67:fa:23:50:1f:96:5c:71:
e7:4f:21:7b:7c:ca:d4:c8:fe:09:db:7a:20:2c:94:
e9:0c:97:46:95:18:ce:ca:ce:5a:fd:87:d0:65:93:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EC:E5:82:1D:E4:8C:1D:D1:AC:84:40:85:F5:4A:58:DB:56:EF:B7
X509v3 Authority Key Identifier:
keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:66:6c:59:b5:a4:48:b7:cf:cb:63:95:5e:51:c1:a8:4f:c2:
8f:8e:0f:5c:5e:e2:eb:82:9a:cb:6c:05:95:d8:6b:5e:97:ad:
60:64:f3:ef:ea:f2:89:97:2c:30:4d:fb:d3:5f:ea:ef:0f:61:
a7:66:32:6b:d3:1e:d2:da:e6:01:89:3b:c0:0c:db:2c:00:0b:
00:36:28:cb:b5:80:99:a9:85:b3:4d:75:62:f3:41:af:fc:b5:
26:79:48:92:f0:37:e2:f4:ed:53:dc:e0:f6:5e:39:3c:c7:3a:
98:d8:56:2a:31:3e:da:59:5d:ab:96:bd:e8:44:a4:c3:df:ae:
e4:bd:53:fe:05:e3:60:68:f7:ad:7e:aa:5a:56:c1:cb:e1:09:
51:88:aa:88:4e:f4:ec:38:7c:6a:aa:60:d9:67:96:48:0a:94:
86:74:05:ec:d5:86:06:ad:20:89:28:98:13:81:92:a7:84:6a:
0d:a7:c7:82:a4:de:75:d6:68:45:96:52:b6:4d:bc:3a:33:72:
15:8d:e3:8f:91:55:ae:e0:a4:2d:f9:53:9c:d8:46:e8:b7:41:
16:05:4b:67:5e:65:e9:b2:65:bc:e1:23:49:b9:c4:2f:dc:d3:
c9:54:13:c0:20:80:f7:82:f1:e0:21:f0:6b:d2:47:a6:39:78:
a2:fb:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:57 2026 by rpki-client