
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json)
Hash identifier: zjfc0p+8kEtjj5GaNEPRQlYUBNEx9Bq1I8dBXxv8gLE=
Subject key identifier: 66:AE:5F:37:33:77:73:81:C9:70:C1:F9:7F:7E:BA:91:94:CC:3C:C1
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
Manifest number: 01AF
Signing time: Fri 21 Aug 2026 04:05:30 +0000
Manifest this update: Fri 21 Aug 2026 04:05:29 +0000
Manifest next update: Fri 28 Aug 2026 04:05:29 +0000
Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: JUZAodpSLVrddMIo+i++kuBKIitF022t5quhObusVcA=)
2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: mvClkx+/PklZJGKqgdrrZKMouehan4C+PlGcFt8iz2Y=)
3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: kHqgL13pwDNCnWVijT06uf83XtGX7ISyin8fJncV3XQ=)
4: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: qS3P8NL2nujD8GiZi/a7Ne2ppBzTvdhSsZKX+btH6bY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Validity
Not Before: Aug 21 04:05:29 2026 GMT
Not After : Aug 28 04:05:29 2026 GMT
Subject: CN=6a87ce8a-e24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:3a:ed:3e:6b:c7:89:a3:23:82:0d:97:86:
3f:35:07:2e:d4:3d:bb:19:c1:4f:a6:32:d6:7b:8e:
15:3d:d6:53:6b:2d:0b:dd:9e:b0:e1:41:cf:58:60:
57:cf:45:eb:96:8b:1c:43:5a:b0:ea:a5:89:ae:99:
4c:27:9b:bd:96:e1:55:2f:bd:ea:ea:a7:80:a3:3e:
b7:83:a5:69:4c:00:6f:7f:16:6c:f9:78:ec:7f:de:
a6:8e:bd:5a:7f:38:32:b6:5a:45:89:5a:ce:aa:56:
3b:3b:17:e7:cd:95:a1:0d:73:cb:df:a6:97:28:01:
7d:71:d4:da:b1:a5:48:9d:3d:a3:0d:42:60:8e:bb:
53:93:c2:ac:3a:c5:54:fd:c3:9d:c8:f0:f2:89:88:
d9:a4:6a:89:86:8a:7f:98:31:61:7b:d9:2b:ce:00:
e4:e1:0f:6f:26:c8:16:51:a7:64:07:bd:1e:c9:2a:
f3:80:5e:6e:d1:27:f0:ae:94:2a:05:97:02:e3:02:
60:13:fe:8a:c8:6f:09:99:93:d3:a0:83:e8:5d:35:
0d:0d:7f:c4:b6:41:16:64:6b:3a:3a:dd:0e:11:51:
3a:cf:a1:a4:0f:d4:b7:f6:5c:c5:be:44:c9:c6:e9:
13:83:de:3e:96:8e:fe:2a:18:db:ff:4a:f2:92:07:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:5F:37:33:77:73:81:C9:70:C1:F9:7F:7E:BA:91:94:CC:3C:C1
X509v3 Authority Key Identifier:
keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:00:1e:7a:82:b0:b3:54:2a:d0:2d:99:3b:74:1a:0f:2f:
a4:3c:82:97:95:ef:94:23:fd:9d:01:be:02:fa:65:94:58:0d:
25:5e:11:11:ef:3f:1b:ec:9e:ae:33:12:6f:ec:6a:e9:87:a9:
73:ff:0b:20:96:d7:a8:f5:f8:6c:d0:4a:7c:3c:c8:dd:51:3a:
48:77:76:9d:90:ec:a8:14:1c:63:9f:c5:2d:5d:b8:c0:2f:da:
25:89:4c:65:35:0a:b4:d9:64:68:ee:8b:a7:2d:b2:3e:44:83:
5c:38:89:fc:65:7e:e4:18:35:84:d9:62:e3:8d:00:4f:47:67:
b1:f1:d9:a6:3f:d4:48:7b:fb:3f:79:5b:18:5e:92:54:0f:4c:
35:02:c6:e5:86:55:8f:f8:6e:2b:55:fc:79:fc:fd:60:ad:af:
0e:89:c2:eb:2e:ab:40:4c:c3:3e:3e:a1:34:32:ef:d0:eb:63:
ae:72:f1:b5:d0:b8:46:2e:ca:4e:ae:27:77:82:e8:9d:e1:fc:
a8:44:b4:15:30:e6:5c:a9:b6:a1:40:bb:41:9a:5c:30:0f:e1:
d0:ce:20:29:77:c2:89:22:c0:cc:6f:98:e3:d0:71:7a:aa:91:
97:09:e4:30:25:c8:22:dd:ab:39:7f:9b:0e:15:f3:66:a6:70:
30:58:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:34:14 2026 by rpki-client