
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
File: Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft (raw, json)
Hash identifier: tYqtDY9i+XefvmDy17zrGnnAGdK4jLY4soFa5W1Y5zw=
Subject key identifier: AC:03:CA:7E:79:E8:9A:FB:EB:18:7F:67:30:EA:E9:7F:D5:22:A7:5E
Authority key identifier: 36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
Certificate issuer: /CN=A9110B36/serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
Manifest number: 43
Signing time: Wed 19 Aug 2026 09:11:21 +0000
Manifest this update: Wed 19 Aug 2026 09:11:20 +0000
Manifest next update: Wed 26 Aug 2026 09:11:20 +0000
Files and hashes: 1: Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl (hash: WpyEdBb8cCKeCuRVNkh9Q/Wi4xV9bfDLcZ+pwADLW7g=)
2: 49C3A0F43AAD11F18ABD7390C4833773.roa (hash: M3Bb6K66672mLJWoFirlzgaQZknuy9ibLFZWuZIc970=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110B36, serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Validity
Not Before: Aug 19 09:11:20 2026 GMT
Not After : Aug 26 09:11:20 2026 GMT
Subject: CN=6a857338-c6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:6c:7e:70:6a:33:20:f1:52:52:fc:b2:38:
74:71:8a:8d:ab:6d:8c:b8:82:bf:14:d2:b0:30:76:
23:10:3d:0e:a6:ce:24:c9:f6:5a:9c:19:82:d3:ab:
b8:b4:01:b4:51:ad:fa:56:f1:fb:d9:87:fa:df:8d:
b9:3b:54:e0:fb:eb:37:b6:e3:d9:e1:0a:f9:6c:5e:
16:3f:f2:18:6b:6a:a1:a1:a3:7b:ff:93:f2:9e:9c:
45:11:4b:e4:58:ec:94:09:65:eb:f7:8f:35:66:d3:
cf:ca:73:f7:04:8f:e8:cb:0b:9c:cf:6b:a5:c8:f8:
47:24:96:a8:47:51:1a:9e:a7:10:61:43:04:4f:63:
b3:cf:d2:a2:d4:5b:ff:a9:44:f0:cc:d4:75:65:ba:
ca:ea:9b:14:4b:e6:58:2c:bb:0e:25:73:dc:57:f0:
43:b0:20:c1:86:9c:86:c8:f3:8c:10:34:ef:9a:3c:
00:82:a5:93:30:d0:d0:8b:f2:3a:44:aa:5c:e0:70:
bc:d7:19:3a:28:ae:a4:92:83:79:e1:a8:d1:a3:7c:
98:2d:0a:26:2e:73:1b:00:6f:e0:22:a4:57:64:85:
95:b6:d3:da:12:5d:e0:22:68:64:92:a1:0c:0f:6c:
a6:83:87:9a:c8:10:9d:c4:d8:94:b6:cd:04:04:46:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:03:CA:7E:79:E8:9A:FB:EB:18:7F:67:30:EA:E9:7F:D5:22:A7:5E
X509v3 Authority Key Identifier:
keyid:36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5c:0e:c3:ed:6b:e0:69:e4:2b:c0:d9:b4:ca:57:0c:97:50:
de:32:6a:97:b8:59:ea:cf:b2:84:d5:a8:c4:0b:49:dd:b7:f4:
e4:63:f7:1e:23:57:fb:23:0e:95:8b:90:11:9d:3f:5e:97:cb:
c2:25:1d:73:84:2a:4d:90:18:55:c4:5f:83:85:2d:85:c7:e4:
28:9b:82:9c:0c:de:10:79:93:09:0a:57:f3:94:63:57:ba:34:
98:7f:de:78:15:e8:ee:47:91:5c:14:82:b3:00:a7:e8:55:20:
31:10:3c:fd:aa:7f:22:3c:b4:bf:5f:79:74:da:ec:22:f0:bb:
ec:57:78:a1:b3:49:61:51:21:b4:cf:19:04:44:97:c9:26:40:
0c:14:1d:e8:e0:bf:10:bf:3b:13:c9:a4:b8:4c:d1:34:f1:64:
c5:3f:32:2b:35:9b:ae:8d:4e:60:09:ae:b6:83:5c:af:47:3d:
a3:b5:5b:24:62:84:c1:d8:eb:de:df:82:40:08:0f:c6:18:fb:
38:66:f2:e8:e2:a8:d2:0a:23:7b:1c:27:e0:38:46:b4:bd:8f:
4c:d2:84:f6:be:8c:74:29:2e:eb:92:46:c5:2c:a7:e6:78:5f:
37:5a:0a:ae:22:a6:02:5e:9d:c2:b8:ef:91:c7:c6:6b:ae:72:
70:93:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:51 2026 by rpki-client