
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json)
Hash identifier: LK+m9O4Zs0u+0RRFOK9qoURXZZY2vme9kxutUH/yLr8=
Subject key identifier: 51:D5:40:A1:C2:47:9D:9D:66:6C:D6:D2:6E:C2:04:BC:93:C5:66:57
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial: 0EE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
Manifest number: 0EB8
Signing time: Tue 18 Aug 2026 17:55:32 +0000
Manifest this update: Tue 18 Aug 2026 17:55:31 +0000
Manifest next update: Tue 25 Aug 2026 17:55:31 +0000
Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: hP1XZJzx4sW1qog9eqRQkfRc9qqlUXODJf/1fPS62wE=)
2: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: d9F++wY6Y6kgkdiYtZ2QORaHxCioMHguW70TTV+zajY=)
3: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: zukV/SXcPzYBgJKVgWzwFqdqBSRV39PGc6HpPmopdXY=)
4: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 4N6uyRk5nJ01NdKd6SKeVxfMhzqmYtvkZXZd8f8mRwQ=)
5: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: xnBTgZgKcT/ckvkR025VfmbRMRDm1gAIO/fOxIRSEIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3815 (0xee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Validity
Not Before: Aug 18 17:55:31 2026 GMT
Not After : Aug 25 17:55:31 2026 GMT
Subject: CN=6a849c94-4ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:9c:6e:7c:f0:75:9e:b5:27:40:9c:1f:95:
2e:c9:b5:e0:3e:9b:8c:7a:27:46:92:b6:57:1a:0a:
27:99:d3:fc:13:b2:48:7a:ba:71:bb:51:23:2a:dd:
d3:ed:a0:1d:fd:f2:90:69:be:19:b8:0a:12:bd:a1:
8f:19:a8:85:e6:ab:81:2a:49:95:de:70:a1:90:44:
40:ba:14:27:60:ce:ce:db:03:6a:db:4b:94:03:a6:
86:e0:62:60:1f:af:fc:57:52:9c:2b:55:fd:c3:bc:
3c:fa:1c:f7:59:4b:5c:5c:b6:ef:87:7b:b1:42:5e:
60:e9:6b:e6:2c:4b:0c:d0:4f:c3:3d:59:6c:6f:1c:
96:79:54:f3:45:1e:74:44:f1:f5:7f:4a:15:fb:dc:
60:8a:7a:45:f4:46:a6:9a:c3:be:2d:72:f8:43:e7:
2b:4c:59:14:ef:15:5d:22:c2:f7:78:ac:45:f6:b9:
40:91:78:64:72:42:18:50:29:84:2b:ba:ae:1e:ae:
86:c8:8d:79:a3:92:7c:dd:cc:02:60:2a:b6:c3:83:
50:b3:b5:6c:eb:2f:9e:da:02:8f:03:0d:11:72:2a:
bd:b1:28:5c:21:d1:09:f6:c5:01:71:ba:3d:26:ac:
9e:7b:ac:46:ce:bc:20:ba:3a:8a:41:ce:bb:99:c5:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:40:A1:C2:47:9D:9D:66:6C:D6:D2:6E:C2:04:BC:93:C5:66:57
X509v3 Authority Key Identifier:
keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:3e:4f:e0:dd:0f:59:68:53:d1:8a:f4:86:b8:29:37:36:e1:
9a:ee:c3:ef:c9:d8:96:ee:20:fd:fd:63:93:bd:17:fb:91:6f:
b2:7e:55:fc:e1:13:b6:1c:93:c0:df:dd:98:82:3f:9d:ff:28:
fc:95:2c:6a:83:27:ba:b5:ad:57:54:63:a9:db:2b:9d:43:34:
03:9c:d8:d0:6d:c8:95:f4:ab:b3:f5:e9:68:40:16:e6:78:86:
83:d3:57:0e:79:d6:e7:34:7d:43:3d:57:55:e3:fd:ac:ef:42:
41:c8:75:0b:dc:fa:94:d0:c1:1a:cd:f1:a8:d1:70:fe:0f:9e:
c0:7d:6e:c8:16:59:32:28:6d:9a:f6:ea:39:c6:2b:54:b4:ad:
75:17:ea:a5:eb:54:2a:be:fd:a8:fb:4c:be:ee:61:5c:17:93:
e9:30:8b:45:f9:04:8e:d1:4b:05:3e:8e:43:a8:e6:ae:ae:28:
93:8f:81:79:fe:ab:ef:e0:04:65:45:cf:8f:b0:d1:c4:3e:23:
64:19:1d:24:34:02:c4:10:d8:7d:ea:ec:40:7c:7d:f3:c9:9d:
be:84:a9:15:38:ae:63:45:2c:3c:23:0b:81:50:46:65:37:e5:
35:73:35:4f:ec:cf:94:e6:9a:cc:a4:2b:61:58:f6:42:9c:6c:
71:7e:59:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:34 2026 by rpki-client