
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json)
Hash identifier: BOdEDS8JgD2Y116yeNHgCfb6Cd7NSutfslZL4wqtFwk=
Subject key identifier: 27:4C:3E:DA:2D:98:90:7A:AA:EA:12:BA:D9:8A:12:31:83:4D:36:C6
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
Manifest number: 017F
Signing time: Thu 21 May 2026 04:37:25 +0000
Manifest this update: Thu 21 May 2026 04:37:24 +0000
Manifest next update: Thu 28 May 2026 04:37:24 +0000
Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: qGz0vjSRDXUAAAFktLD5rY+qcRvYPZQXtAj86UXTo2I=)
2: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: wmNPnDvvzaXNcEvPjVuLtrgnnHPLzw2rLFktnj5ROwE=)
3: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: UjpEnJbWEEameT5NyA6GTtZ6l6bxgo6wSQmSr5ohGUM=)
4: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: rXEcC70BHU9BGaTrOUEVMio2SeHlBdWNjj8ucac2NAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Validity
Not Before: May 21 04:37:24 2026 GMT
Not After : May 28 04:37:24 2026 GMT
Subject: CN=6a0e8c05-0de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f5:85:b9:fb:13:75:71:52:85:3a:0c:e5:43:
fe:26:5b:2a:a3:ce:b7:ca:22:a6:55:c7:86:59:8c:
90:e5:0d:34:0d:0e:28:9d:5e:0f:30:94:4a:68:95:
70:92:9c:36:58:69:03:12:f3:6f:28:55:95:6c:41:
13:6e:30:6f:3a:a1:cb:24:e6:66:3e:46:31:d5:8e:
4a:1c:66:6f:e2:8c:bc:0c:c8:29:a3:56:61:ea:f7:
ef:3e:02:59:c2:64:c7:e1:d0:ec:a0:c6:66:33:85:
57:ce:ba:12:62:d9:56:ae:1c:60:69:63:3a:84:ac:
6d:94:f4:cb:c8:55:97:f4:15:36:45:c3:8b:9f:ca:
ba:e2:a9:89:77:28:83:fa:50:82:dd:fb:62:fc:e9:
07:5b:8b:fc:77:4b:c1:52:17:99:21:62:50:88:66:
1e:12:c3:28:bb:9e:e6:0f:1b:f9:6e:f7:37:6e:3f:
aa:57:3d:29:38:52:cd:c8:2c:c3:2e:0e:b7:24:e2:
19:aa:48:b3:02:ff:18:c2:2d:f7:0f:4f:0b:fa:8a:
4d:49:51:3f:b3:0c:e3:c0:65:77:66:85:d0:26:91:
c1:15:23:3f:fb:3c:a4:ed:cf:bb:a8:5f:bf:bd:31:
48:0b:d8:90:eb:3f:5a:49:8c:8e:88:86:c8:35:da:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:3E:DA:2D:98:90:7A:AA:EA:12:BA:D9:8A:12:31:83:4D:36:C6
X509v3 Authority Key Identifier:
keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c5:af:9d:1d:ff:7a:3f:2a:20:82:e3:48:d7:e7:4e:7c:89:
17:56:38:3a:02:24:8a:5c:b0:23:e6:71:94:b5:24:c7:56:fb:
55:e4:c3:66:e9:3f:be:f4:da:eb:87:da:87:a6:cf:21:56:7f:
9c:cc:95:4f:9b:b5:6f:91:02:2f:af:fe:8e:00:0d:66:f1:1c:
37:77:e9:84:6b:4f:00:d1:6a:c9:df:8d:5f:c6:d8:75:13:60:
50:ab:0d:0d:83:8f:3e:4f:13:45:cd:2c:9c:e5:1b:bc:25:d9:
25:51:00:d3:ec:96:9a:a1:a6:a2:5c:d5:26:c7:5b:8b:6d:7e:
7e:a6:42:88:30:58:24:3c:3b:ca:d2:37:b0:a6:95:bd:c1:4f:
25:13:8b:ed:bf:97:af:65:f6:40:a0:d3:72:9e:27:29:bd:96:
2a:a3:ec:ab:6d:ed:d5:79:9d:5d:b5:86:11:07:d3:d4:c5:12:
be:c7:cb:07:7b:d0:dc:aa:52:15:3b:f6:89:b0:95:fc:01:a6:
3e:cd:4c:af:f6:13:89:c3:5e:83:b6:32:7a:ea:08:4d:37:ee:
f1:4d:4f:cd:7e:14:ec:61:a5:41:b9:87:64:67:aa:f3:c1:79:
e3:f8:3a:2e:17:bb:50:20:d0:59:c7:66:c6:9e:61:9b:f0:26:
67:54:9a:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE
MTQ1RkU0OTgwHhcNMjYwNTIxMDQzNzI0WhcNMjYwNTI4MDQzNzI0WjAYMRYwFAYD
VQQDEw02YTBlOGMwNS0wZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5/WFufsTdXFShToM5UP+Jlsqo863yiKmVceGWYyQ5Q00DQ4onV4PMJRKaJVw
kpw2WGkDEvNvKFWVbEETbjBvOqHLJOZmPkYx1Y5KHGZv4oy8DMgpo1Zh6vfvPgJZ
wmTH4dDsoMZmM4VXzroSYtlWrhxgaWM6hKxtlPTLyFWX9BU2RcOLn8q64qmJdyiD
+lCC3fti/OkHW4v8d0vBUheZIWJQiGYeEsMou57mDxv5bvc3bj+qVz0pOFLNyCzD
Lg63JOIZqkizAv8Ywi33D08L+opNSVE/swzjwGV3ZoXQJpHBFSM/+zyk7c+7qF+/
vTFIC9iQ6z9aSYyOiIbINdqTUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdMPtot
mJB6quoSutmKEjGDTTbGMB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD
RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw
bzlMYWRZbTlnekhSUmY1SmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArcWvnR3/ej8qIILjSNfnTnyJF1Y4OgIkilywI+ZxlLUkx1b7VeTDZuk/vvTa
64fah6bPIVZ/nMyVT5u1b5ECL6/+jgANZvEcN3fphGtPANFqyd+NX8bYdRNgUKsN
DYOPPk8TRc0snOUbvCXZJVEA0+yWmqGmolzVJsdbi21+fqZCiDBYJDw7ytI3sKaV
vcFPJROL7b+Xr2X2QKDTcp4nKb2WKqPsq23t1XmdXbWGEQfT1MUSvsfLB3vQ3KpS
FTv2ibCV/AGmPs1Mr/YTicNeg7YyeuoITTfu8U1PzX4U7GGlQbmHZGeq88F54/g6
Lhe7UCDQWcdmxp5hm/AmZ1SaKg==
-----END CERTIFICATE-----
Generated at Sat May 23 03:48:22 2026 by rpki-client