
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
File: N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json)
Hash identifier: oQ8BZ1CgPgZwWqxkMNoM626D1kW0CIQkWq1hYrk+sDI=
Subject key identifier: 5B:B6:A8:4E:98:39:37:C8:C5:E4:19:B7:53:66:E3:E6:D2:7C:D5:38
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial: 0651
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
Manifest number: 0633
Signing time: Sun 04 Oct 2026 22:49:13 +0000
Manifest this update: Sun 04 Oct 2026 22:49:12 +0000
Manifest next update: Sun 11 Oct 2026 22:49:12 +0000
Files and hashes: 1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: dhRpTU6VzDwmVVpKNBWMFjTRjKS+G6TBCU1k3ZEEHxE=)
2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: jiJ/Apxk0RCnezc8z5hn0e9XoDw9lt0qYbyy+Q1Gh0Q=)
3: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: JJ5ZiLh38XYP4D8yimnjxevWv+FpQHjzlnERYLydtT4=)
4: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: UnloyJqO5mDJNTuFL9b9idDNwOwv5RK3dGrtJoBgFTQ=)
5: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: 7uquT9D1sV2YgdxdolpJDoZ9g+QO6lmrDAgSjgdq8+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1617 (0x651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Validity
Not Before: Oct 4 22:49:12 2026 GMT
Not After : Oct 11 22:49:12 2026 GMT
Subject: CN=6ac2d7e8-29ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:49:23:d5:ce:b2:b9:e8:71:75:87:bb:ec:
d8:53:7f:29:8c:8e:45:a6:3c:cd:a9:d5:c5:f5:81:
9b:08:dc:ca:de:94:bf:08:d4:54:89:cc:c2:9f:08:
0e:2c:e1:5b:7b:ce:4b:c3:d7:bc:48:c3:42:1e:12:
99:a1:e5:46:d9:de:c3:9d:1b:c0:54:ae:00:24:43:
4f:1b:de:2e:7c:8d:95:e7:d4:34:25:c8:b6:e1:55:
19:17:43:2a:2e:a1:9a:66:0c:09:a0:9a:75:d2:28:
b7:a5:42:6e:e3:f7:65:7b:b8:9d:91:af:5a:3c:5e:
7c:b3:84:c0:46:1d:e2:52:f1:e0:3f:60:a5:1b:da:
4d:68:6e:58:e4:a1:af:e9:1c:9e:70:5f:71:35:20:
e0:84:36:4b:c5:87:bc:a6:01:fd:97:83:e2:34:e6:
c6:64:29:e2:3d:6d:81:7c:a4:7e:b8:21:f2:11:0b:
42:85:8a:21:be:9c:d8:78:7c:54:a8:0b:af:a6:78:
25:13:07:29:65:d2:b2:31:1c:6a:a3:21:55:d4:3b:
0a:05:4b:fb:56:bd:b4:a3:c2:6c:75:e2:24:bd:7f:
6c:29:7c:32:cc:75:69:62:78:ae:3f:b2:e2:ae:da:
c9:62:42:39:18:e0:1b:37:86:79:c0:7e:64:b7:5c:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B6:A8:4E:98:39:37:C8:C5:E4:19:B7:53:66:E3:E6:D2:7C:D5:38
X509v3 Authority Key Identifier:
keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cd:8d:26:d8:50:dc:83:21:6c:e7:c8:43:77:76:e6:08:39:
5c:87:09:6c:f3:79:8c:88:6a:68:a0:92:eb:61:b7:b4:15:dc:
71:2b:d6:cc:2d:e1:c8:00:fb:7b:43:c2:de:f9:85:ba:e2:42:
e6:4f:3d:ec:ba:ee:3d:d3:25:16:f1:ec:9d:d1:a1:ee:14:91:
27:f5:d3:e8:0c:f6:aa:fc:96:77:bf:48:4b:56:6c:b8:47:4a:
c4:09:1b:cc:35:ed:34:fe:b7:06:71:68:3f:b1:fe:bf:55:b0:
2d:77:26:df:a2:f5:92:e6:96:ad:fa:6d:76:0f:c9:27:44:9f:
51:cc:bd:b3:4b:1c:44:18:b3:e3:96:e6:fb:99:f7:74:68:8b:
e7:11:3c:32:ef:8d:e4:62:71:31:c6:b7:b5:d3:dd:d9:e8:b9:
20:82:88:93:8e:d7:9e:02:7a:de:49:be:5d:6c:2a:83:a7:ee:
2a:8f:7e:d9:b5:31:56:4a:3b:76:97:84:bf:d5:fd:af:02:86:
6c:93:cd:a9:c4:bf:dc:aa:c1:d9:72:a7:31:f7:23:31:33:f8:
b0:af:98:d1:e7:42:6a:7e:b0:83:57:23:b1:9c:66:84:61:3c:
e7:41:f3:dc:de:aa:49:ed:66:86:8c:dc:a0:05:e6:6f:09:b0:
40:80:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:16:16 2026 by rpki-client