
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json)
Hash identifier: qOovvU8X6bB2uAsvs7/ece03KyLQazKsNN0+yXpG2VQ=
Subject key identifier: A6:00:D2:8B:00:C4:39:E6:55:56:27:7C:6D:33:23:0E:AD:40:9E:F9
Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A
Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
Manifest number: 021F
Signing time: Wed 07 Oct 2026 03:19:10 +0000
Manifest this update: Wed 07 Oct 2026 03:19:10 +0000
Manifest next update: Wed 14 Oct 2026 03:19:10 +0000
Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: 321Ts446V21Xmu8tLrH8M8578Apw0sAiVXgpM3lCZtU=)
2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: Qx6h3CTOkKIiFv1hoz1s6u5nieG3giT15j3ng44V7sg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl
rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A
Validity
Not Before: Oct 7 03:19:10 2026 GMT
Not After : Oct 14 03:19:10 2026 GMT
Subject: CN=6ac5ba2e-275d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:fe:5a:0e:f6:5a:f6:dc:7c:df:88:0b:d6:18:
98:89:d7:f1:fe:e6:28:4b:fb:51:ef:82:33:c0:49:
a3:45:54:c7:4b:0f:b5:c5:ff:90:a1:cb:a4:a0:7f:
c1:66:1f:86:68:df:d9:d6:85:8a:9c:a5:6e:c5:bd:
9d:6f:4b:82:75:cf:06:2f:a6:8a:b1:b2:f6:69:86:
f5:80:ff:36:48:80:b1:c1:54:c8:77:9b:82:66:4a:
d7:54:56:d8:85:d8:3b:64:28:cc:7c:26:4f:09:91:
af:5c:a2:9f:a8:31:35:d0:2d:b6:70:d8:5a:cc:e0:
ca:73:34:76:9b:a0:2b:47:79:5f:f0:85:b1:58:52:
7e:2e:2a:bc:59:0c:0b:5b:e2:53:ce:01:95:2b:45:
fc:05:bf:e8:cd:3e:d1:68:28:40:26:84:d8:1d:21:
07:90:4d:8b:3b:be:b4:b1:4d:97:d2:57:44:41:53:
64:1b:94:cf:99:7e:91:2b:cc:d5:d8:50:bf:86:7f:
3c:1f:b2:bc:ad:6f:c0:85:d5:6f:56:2e:b4:94:c1:
6f:3e:48:1f:3c:e2:23:2d:09:fb:7c:9f:9d:c5:18:
31:8b:25:e9:ed:94:50:80:4c:d5:e9:2e:56:09:6c:
2c:21:19:05:57:f7:5f:c5:d6:38:59:34:50:0b:ac:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:00:D2:8B:00:C4:39:E6:55:56:27:7C:6D:33:23:0E:AD:40:9E:F9
X509v3 Authority Key Identifier:
keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:93:8f:85:17:bd:4f:35:59:39:d9:f7:6c:5e:80:67:d8:f8:
27:ec:37:e3:7d:56:91:b0:6b:19:12:aa:c2:16:18:2a:4e:36:
0c:83:62:06:01:f7:65:32:67:fc:7a:fb:80:69:ea:4b:0e:bf:
23:ca:53:37:64:90:75:cf:b3:10:a1:16:a9:ef:c7:28:98:ea:
19:b3:4c:f1:53:03:42:e1:72:00:a6:3c:19:0e:d2:29:5f:36:
46:d8:6b:80:1d:66:0e:01:f1:04:52:c3:f6:5d:7e:c2:2c:70:
22:8e:a5:54:16:64:7f:f8:49:e6:4e:02:cf:ce:ea:2c:9a:4b:
9e:86:0c:6d:02:7f:2a:91:a7:5a:04:c0:ab:21:56:7c:37:fc:
5f:1c:56:e4:4b:00:37:fd:71:a6:3f:d2:c4:65:76:c8:7b:ee:
56:9f:b8:52:f8:c9:ba:00:aa:ae:0f:cc:ee:03:48:c3:cf:57:
e1:13:e7:bd:60:a4:45:cf:be:c8:d5:48:b8:2b:0d:5a:de:56:
da:e4:9e:0e:9b:c3:58:0a:4a:8b:79:54:dc:0e:b6:c0:73:8c:
56:2d:6c:fd:a8:1c:4f:6a:dc:0b:3e:2a:02:5d:21:a1:47:23:
30:61:31:88:1f:0d:4e:70:a9:39:71:86:35:a7:04:07:e2:f2:
e9:c9:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:29:39 2026 by rpki-client