
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json)
Hash identifier: AjA8ESW8pZqdGyt+HXV3FhG8k5Ahgu4lhxf1kzBDpuo=
Subject key identifier: E1:34:08:41:EE:9B:D0:E6:43:6A:74:39:03:80:E0:CD:EB:D5:09:3C
Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
Certificate serial: 0C20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
Manifest number: 0C13
Signing time: Tue 18 Aug 2026 19:05:45 +0000
Manifest this update: Tue 18 Aug 2026 19:05:44 +0000
Manifest next update: Tue 25 Aug 2026 19:05:44 +0000
Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: HKwz0vc4SfE/JhrCgJy1uskP8u93UVQQWiqYhlH0cKw=)
2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: 5PMpMbiDvOrHyA2aZdrK2EqToeI6RWLqz3P1054gczc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl
rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3104 (0xc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
Validity
Not Before: Aug 18 19:05:44 2026 GMT
Not After : Aug 25 19:05:44 2026 GMT
Subject: CN=6a84ad09-b4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:b9:56:fb:a6:bf:c7:92:c7:30:fe:0f:b6:
78:b4:95:fb:a9:d8:09:ed:cb:61:c2:e4:13:7d:bb:
e1:00:02:22:45:b2:31:ea:21:3a:38:0a:97:70:92:
c6:7a:12:19:d1:6e:87:05:ff:9b:20:fa:78:00:4b:
d4:07:bc:75:c1:b0:99:ca:c4:8b:e2:f4:0a:b3:d2:
5b:72:64:89:f0:ff:51:91:36:6e:87:b3:ca:60:07:
5f:06:92:f1:96:e8:5d:02:d7:59:d8:a7:87:bd:f0:
c9:d0:4d:08:a1:0f:ac:12:ca:f3:34:b1:1e:4a:7a:
c9:71:11:f6:3c:ae:b9:c7:c3:eb:ee:28:f3:f6:b4:
48:1c:b3:6a:67:8d:34:8a:0e:35:5e:a5:f8:c5:ae:
4f:33:ac:ce:74:75:42:61:48:c6:5e:dd:2f:e0:5a:
6a:e8:a8:70:ba:3e:f5:63:f8:b6:c2:b9:76:33:33:
59:48:bf:b2:5c:3d:49:b8:88:5f:8e:26:8d:88:62:
22:2b:94:f7:c4:e7:7a:fa:64:e8:5b:16:f5:0b:b8:
54:cb:2c:26:17:95:b2:6a:f5:b9:fd:89:e0:f2:9e:
39:9c:8f:03:a5:81:3f:89:a0:2c:4e:73:79:02:5b:
0b:a3:1d:2d:a9:71:43:4e:59:55:2e:a8:62:87:a7:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:34:08:41:EE:9B:D0:E6:43:6A:74:39:03:80:E0:CD:EB:D5:09:3C
X509v3 Authority Key Identifier:
keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:d0:0b:b0:bb:dd:bd:f9:a8:bc:f8:d3:00:af:76:4c:1f:45:
1f:3e:4a:3e:2c:bd:9b:a0:4f:6b:22:c9:63:b0:e7:e2:6f:cf:
68:f8:a3:f0:41:79:71:b6:06:c3:ca:b8:96:0f:69:12:82:97:
46:22:de:6d:6f:bb:b4:3e:8f:be:6b:52:59:97:fc:2b:c8:8a:
de:64:b0:61:0e:c5:45:d5:64:7b:b7:48:9e:0a:9c:27:b1:ea:
6b:88:11:78:da:69:18:73:98:d5:05:dc:d6:3d:24:b7:3e:f8:
a7:bb:64:5a:6b:a5:70:c3:14:0d:2c:67:a5:5e:fb:4e:0f:ae:
bb:81:97:1b:fd:a1:30:1c:ce:b0:30:4d:d9:1c:a5:cb:a6:62:
14:99:d4:ba:85:79:67:27:43:5b:78:9a:ea:86:99:44:dc:50:
10:c8:76:c4:3b:d0:c7:50:27:45:74:33:cf:1a:0f:7a:40:77:
7c:76:72:94:db:95:bb:f2:fb:83:aa:17:87:bb:82:82:09:70:
58:a0:e8:b7:d9:d9:e8:99:88:dd:40:12:85:36:d6:5d:73:fd:
a8:8e:b1:b3:50:41:bb:ce:73:3d:80:c0:14:49:ae:7d:ae:1a:
3b:ad:7b:b4:7a:37:71:88:35:91:31:f7:be:92:93:9a:ef:38:
00:f3:51:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz
MzQ4NzNEQUQwHhcNMjYwODE4MTkwNTQ0WhcNMjYwODI1MTkwNTQ0WjAYMRYwFAYD
VQQDEw02YTg0YWQwOS1iNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr265Vvumv8eSxzD+D7Z4tJX7qdgJ7cthwuQTfbvhAAIiRbIx6iE6OAqXcJLG
ehIZ0W6HBf+bIPp4AEvUB7x1wbCZysSL4vQKs9JbcmSJ8P9RkTZuh7PKYAdfBpLx
luhdAtdZ2KeHvfDJ0E0IoQ+sEsrzNLEeSnrJcRH2PK65x8Pr7ijz9rRIHLNqZ400
ig41XqX4xa5PM6zOdHVCYUjGXt0v4Fpq6Khwuj71Y/i2wrl2MzNZSL+yXD1JuIhf
jiaNiGIiK5T3xOd6+mToWxb1C7hUyywmF5WyavW5/Yng8p45nI8DpYE/iaAsTnN5
AlsLox0tqXFDTllVLqhih6ewawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOE0CEHu
m9DmQ2p0OQOA4M3r1Qk8MB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND
MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy
WUJTM2hnR2FDYWd6U0hQYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA9ALsLvdvfmovPjTAK92TB9FHz5KPiy9m6BPayLJY7Dn4m/PaPij8EF5cbYG
w8q4lg9pEoKXRiLebW+7tD6PvmtSWZf8K8iK3mSwYQ7FRdVke7dIngqcJ7Hqa4gR
eNppGHOY1QXc1j0ktz74p7tkWmulcMMUDSxnpV77Tg+uu4GXG/2hMBzOsDBN2Ryl
y6ZiFJnUuoV5ZydDW3ia6oaZRNxQEMh2xDvQx1AnRXQzzxoPekB3fHZylNuVu/L7
g6oXh7uCgglwWKDot9nZ6JmI3UAShTbWXXP9qI6xs1BBu85zPYDAFEmufa4aO617
tHo3cYg1kTH3vpKTmu84APNR6w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:59 2026 by rpki-client