
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json)
Hash identifier: /X7zLmJX2m2nnW10xBaaK8PK161bM89qkN0EEcPI2NI=
Subject key identifier: 43:96:8B:B6:ED:92:1F:7A:42:93:28:E4:29:14:A2:06:D2:3D:31:12
Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A
Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
Manifest number: 01E9
Signing time: Tue 23 Jun 2026 03:34:47 +0000
Manifest this update: Tue 23 Jun 2026 03:34:46 +0000
Manifest next update: Tue 30 Jun 2026 03:34:46 +0000
Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: 2byo43LnyDViXU1s351fpDfDfrjLMHndhxC3vqek3Vg=)
2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: Qx6h3CTOkKIiFv1hoz1s6u5nieG3giT15j3ng44V7sg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl
rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 03:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A
Validity
Not Before: Jun 23 03:34:46 2026 GMT
Not After : Jun 30 03:34:46 2026 GMT
Subject: CN=6a39fed7-218d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:82:c8:94:4d:f8:2a:a6:cf:07:03:23:58:
51:24:e0:aa:1e:84:c6:d1:05:84:49:b9:51:c2:88:
29:d6:29:79:f4:98:d1:cd:80:b6:2f:eb:78:6e:6f:
05:d1:2d:7a:cf:63:ea:f0:37:54:61:b1:0a:62:a7:
17:32:cc:14:69:d2:b6:c3:2a:fc:55:26:d4:f8:49:
fe:e6:e0:d7:1c:65:37:0a:44:ef:8d:00:ef:13:8f:
a7:83:e2:bd:06:06:3e:e9:e7:47:15:8d:48:5a:1e:
1f:b0:73:49:b0:ba:76:4f:f9:d8:70:dd:9d:5d:89:
b9:97:be:ae:50:aa:5d:e3:73:8b:72:af:55:61:b8:
95:a1:d3:1c:63:a2:b2:31:83:6e:cd:ba:eb:97:f1:
ca:a6:15:76:14:6b:f9:ad:e5:2a:da:ae:c8:8f:84:
0d:a4:3d:e7:04:50:91:d9:a1:6f:0c:32:7a:44:1e:
30:f5:b3:5f:44:14:f5:d6:f2:c4:89:f3:c4:c5:ea:
3f:7a:dc:e6:78:5b:43:55:20:6b:a8:2c:85:c9:92:
29:e8:79:2d:52:84:70:7d:6e:e6:35:85:f7:9a:0c:
d0:b5:d4:f3:3e:65:82:9d:78:2c:29:d5:c7:ef:dd:
d1:2e:4a:be:c4:1b:de:92:78:bc:63:cf:08:ae:15:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:8B:B6:ED:92:1F:7A:42:93:28:E4:29:14:A2:06:D2:3D:31:12
X509v3 Authority Key Identifier:
keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ab:86:fc:22:14:e8:79:53:67:1a:2d:cf:87:1c:37:38:e5:
b1:47:3a:44:f4:38:f0:5d:b3:85:41:4a:49:f7:c5:c4:57:b5:
77:3e:73:ca:71:42:4b:d6:d6:3a:13:d6:fe:f4:b6:7d:2e:15:
5e:3f:10:65:b9:3b:be:f9:70:cc:a7:17:1f:97:5f:71:d9:1f:
9f:bc:f6:ee:78:4d:39:69:09:c4:2e:81:22:c4:ec:ad:c6:ea:
22:14:a4:12:38:75:42:0a:52:fe:72:c4:fa:aa:35:75:db:fd:
ca:e9:d7:64:f5:85:4a:29:1e:d6:e2:be:4f:ba:cc:70:bb:5e:
f6:89:28:86:db:8c:e6:f1:8d:80:e1:cb:4c:50:b5:19:c4:b0:
9b:cf:ed:d4:1d:09:3b:b5:8c:40:c6:1e:3e:f5:a8:46:81:b6:
35:f3:c9:2f:76:34:a5:55:39:98:95:49:62:6a:8a:38:19:66:
e1:12:7d:58:e9:92:30:e8:a3:ea:0c:70:8b:ec:4a:bd:cc:19:
2f:2a:89:be:6c:42:0f:83:72:2a:91:f4:da:d3:14:c8:8f:ed:
45:4e:aa:6e:5a:7a:5f:21:cb:55:b6:70:6b:64:0b:96:f8:6e:
34:8b:34:19:98:5d:2b:4e:8c:9b:bc:b4:fc:98:61:bd:a6:06:
ac:23:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:09 2026 by rpki-client