
$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
File: nzVmCVwLDAIx0LuWkl4DidHCbFc.mft (raw, json)
Hash identifier: 2sVHsF6XiYxoVErZmlvLvl/EEKptBf9u4Og+l+9Kp/4=
Subject key identifier: 41:F5:3B:98:F4:4E:B3:73:EF:4F:F6:B5:D1:CB:3A:FF:58:64:1D:F8
Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
Certificate issuer: /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Certificate serial: 04FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
Manifest number: 04F6
Signing time: Mon 22 Jun 2026 23:48:22 +0000
Manifest this update: Mon 22 Jun 2026 23:48:22 +0000
Manifest next update: Mon 29 Jun 2026 23:48:22 +0000
Files and hashes: 1: nzVmCVwLDAIx0LuWkl4DidHCbFc.crl (hash: Br3TV1rFNsbk1RnB60m+2IUkem4sVu3WYL2K/dX5IvE=)
2: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (hash: tWz/6xO64zB/1Qqhs2Ax95uvHFJIaUVINpHba9CIrQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl
rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1278 (0x4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911403B, serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Validity
Not Before: Jun 22 23:48:22 2026 GMT
Not After : Jun 29 23:48:22 2026 GMT
Subject: CN=6a39c9c6-d93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:ff:7d:ab:0d:9e:88:66:e8:8d:fd:e2:6b:
36:e8:19:5d:1e:7d:cd:ca:80:0d:da:49:dc:2a:b2:
25:86:4b:06:3a:2c:d0:17:9a:16:b2:85:73:b8:a5:
4c:91:33:ac:5f:1d:10:43:7b:5b:5d:00:80:af:37:
6d:d2:b7:9b:5c:b7:79:fb:b5:d7:ad:71:dd:f7:64:
0e:aa:f8:62:b7:1f:34:65:5d:f1:3d:14:06:e9:13:
bc:a7:26:c2:b2:b5:a6:01:4c:60:e2:41:8d:bb:20:
a9:d2:a7:8a:e7:a0:fc:d9:7c:ae:b8:df:57:fa:e2:
8a:37:d8:9c:96:20:36:eb:9f:fe:da:f1:5c:70:f7:
f5:29:53:19:be:8a:69:00:43:6d:f3:83:2f:8d:0f:
52:18:0f:58:da:e9:42:f9:bd:69:34:cf:4b:a4:d3:
0a:fd:2e:2d:13:b1:28:8d:bd:d0:5d:6b:47:56:39:
b7:36:66:96:a7:70:b7:12:cc:9d:55:0b:60:38:d1:
dc:6f:33:30:39:91:6a:c5:9d:68:a2:a5:3b:20:6e:
70:88:9e:53:4a:09:57:23:c5:6b:df:83:28:e1:18:
96:2b:bb:5b:8c:4b:5b:31:cf:ca:ab:c1:ee:7d:31:
bb:c5:68:f6:22:8c:7c:a6:07:60:17:0b:bb:ab:5e:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F5:3B:98:F4:4E:B3:73:EF:4F:F6:B5:D1:CB:3A:FF:58:64:1D:F8
X509v3 Authority Key Identifier:
keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:18:00:59:f7:21:68:50:25:17:0d:0e:95:5c:11:a7:38:ce:
c6:29:a1:a7:16:74:9d:7f:8d:02:08:3f:c2:aa:7c:8d:a9:a5:
df:e1:f1:c8:ca:92:cd:ee:fb:fb:a4:53:78:2a:be:b4:fe:af:
cd:13:2f:7c:0f:6f:ea:34:0f:9a:d9:03:e9:0a:78:4a:77:c2:
3a:3e:e9:fc:62:49:47:ba:1b:47:60:d4:f3:22:f5:d7:18:f1:
08:a1:a6:b0:64:74:86:68:ce:65:1e:1f:a7:59:90:bb:e7:2e:
82:6f:55:78:76:25:f3:59:29:40:a5:b0:44:9d:22:4c:83:8c:
a2:f2:ac:20:ab:60:13:9e:b5:78:82:05:e8:4a:68:9c:b4:c2:
74:60:d8:65:c6:70:6d:fa:ab:84:8a:7f:56:ba:db:67:ba:9d:
1d:80:9f:99:88:a9:35:4a:b8:3b:6b:10:1e:03:d7:e6:36:aa:
dc:a6:9c:51:5d:3f:12:69:36:10:d4:59:19:88:47:0e:ec:54:
d5:fb:39:84:6f:30:16:55:4d:0e:0d:0f:bb:de:33:68:91:44:
8e:90:ab:5b:cd:55:a3:ca:f9:0a:6a:59:31:00:47:12:ec:6a:
01:60:b5:90:05:f4:8d:75:f3:73:11:b1:e4:9e:51:16:cb:57:
68:3f:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:05 2026 by rpki-client