
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft
File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json)
Hash identifier: Z58F+OZDDCMm1NCidsd0Q5ANxlshA7UqGJoMd9YmnKE=
Subject key identifier: 2D:6A:28:3F:3E:72:DB:60:EB:B9:01:19:87:CA:79:8E:8E:5D:14:59
Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28
Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228
Certificate serial: 04E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft
Manifest number: 04DD
Signing time: Wed 19 Aug 2026 00:06:52 +0000
Manifest this update: Wed 19 Aug 2026 00:06:51 +0000
Manifest next update: Wed 26 Aug 2026 00:06:51 +0000
Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: YFBzlnKhrbIN3xzOSWCsK383n4HhUOY+cJdyrC9RtzY=)
2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: 0VJSSuNZNqd6Mi6Fcfyrw/oW75/x9p5H40HqIw6BOBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl
rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228
Validity
Not Before: Aug 19 00:06:51 2026 GMT
Not After : Aug 26 00:06:51 2026 GMT
Subject: CN=6a84f39b-4d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:cf:e2:db:df:03:ea:0b:36:e2:8c:6c:08:
64:1e:25:be:05:48:38:29:7e:5b:36:83:89:7c:77:
1d:2b:6c:95:70:1d:a0:b9:00:64:bf:a7:dd:31:4d:
e6:45:cb:3a:a3:fb:c6:8d:b1:c2:83:80:81:8f:fa:
17:be:6c:53:19:d1:6f:b6:38:9e:88:65:79:6b:73:
f2:1a:d4:9e:50:a4:c5:4c:ae:da:ed:3b:ae:5e:fb:
7f:6d:c8:02:59:9a:1e:f2:bb:80:e2:df:6e:10:ac:
e6:d2:37:e5:f0:9c:31:f8:1e:32:78:02:7d:b3:4a:
dd:15:e5:8f:a5:93:c0:a7:38:80:5b:71:8b:d4:ba:
1e:7a:28:f1:ff:0b:62:f3:d4:70:0f:d8:af:bc:0a:
28:4a:1a:2a:43:cc:bc:30:b4:ed:95:99:ae:c7:01:
af:9f:31:01:6f:be:8d:1b:26:db:3d:d8:7e:62:df:
b9:39:f7:f9:e2:28:16:9d:7d:6d:8c:0c:7c:0a:31:
2a:54:2e:3f:6c:d8:b6:c9:0d:1b:8b:40:8b:c0:b9:
7f:d8:e5:ce:7e:cc:14:a0:0a:11:53:af:59:49:81:
ef:00:86:fb:a6:c3:03:93:d8:50:cb:14:9f:ea:f1:
9e:db:70:25:14:4c:15:1a:63:ce:d3:6b:22:20:30:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6A:28:3F:3E:72:DB:60:EB:B9:01:19:87:CA:79:8E:8E:5D:14:59
X509v3 Authority Key Identifier:
keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b4:bd:ef:23:c4:14:42:19:a6:28:5c:2d:7f:30:74:93:5e:
24:33:52:9d:85:4d:b5:4b:98:a1:e4:74:ea:81:ab:80:63:01:
60:16:dd:d1:c9:dc:a3:07:b4:0b:f4:83:de:c5:12:0a:bb:cb:
87:35:16:23:9f:e8:94:de:2f:03:de:56:33:c8:89:30:f9:ae:
21:a5:1c:93:cc:a3:b0:98:b9:dc:54:85:f7:0f:bb:50:da:37:
94:84:46:5d:cd:71:88:92:19:44:5d:f2:f6:5f:6c:87:4c:27:
91:5e:68:69:70:a7:6b:c2:b8:10:b6:af:3d:f3:c8:ad:30:b9:
33:83:28:16:40:1e:5d:30:73:24:f5:e5:e2:55:3a:77:01:3e:
12:4f:c4:19:fa:f0:99:ba:13:42:00:2b:94:a5:42:19:d4:8a:
e9:55:53:e3:70:60:d0:32:4f:67:0f:6e:c7:ae:b0:34:b9:f9:
2c:08:cc:8e:8c:ca:4c:47:5b:bd:72:03:57:6f:33:86:30:91:
35:b8:81:b5:25:13:79:33:a0:35:f3:92:b4:a8:82:33:bd:4a:
d0:97:26:eb:1c:70:f2:d6:c1:82:b6:ea:89:97:23:54:b6:aa:
f5:3e:92:be:5b:71:ba:c3:74:2d:51:62:35:a6:72:45:12:ae:
c3:2a:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:02 2026 by rpki-client