
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
File: NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json)
Hash identifier: 7k/K1wL+38yFEcjO0I+ODsOZz0GEGDAL79U576zEFig=
Subject key identifier: 06:BD:AC:54:76:6F:12:31:DB:EE:CE:74:EC:84:0D:38:EA:A7:B8:4D
Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Certificate issuer: /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
Manifest number: B5
Signing time: Mon 01 Jun 2026 01:29:32 +0000
Manifest this update: Mon 01 Jun 2026 01:29:32 +0000
Manifest next update: Mon 08 Jun 2026 01:29:32 +0000
Files and hashes: 1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: FHIvaoYSGrgYHyioCrrHtVAmEI/GbgPNgRFKKnPsdKE=)
2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: sqaF/L7BkPPx01J6zjZJOWgkKgNdgKGuBKXecAoTrY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 01:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Validity
Not Before: Jun 1 01:29:32 2026 GMT
Not After : Jun 8 01:29:32 2026 GMT
Subject: CN=6a1ce07c-48e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:1e:2d:77:7d:33:11:ff:97:6b:26:ab:85:
cc:33:89:24:57:73:d3:8c:c8:7e:86:b7:30:96:8f:
a6:73:b9:2d:6e:aa:24:5c:6b:e1:1d:7a:2c:d2:72:
02:a1:e3:0c:59:36:6f:f1:f0:aa:cb:9e:23:42:e5:
16:a5:c4:81:a9:b1:fc:26:20:22:88:56:b2:e9:f0:
4e:b5:54:3b:23:f5:00:ca:f8:37:c5:1e:85:6e:56:
c8:47:f7:bd:6f:a3:64:1d:2e:53:dc:fe:c7:84:98:
34:81:d0:94:e8:71:a6:0b:c9:31:be:11:c2:6f:42:
e6:da:95:01:26:48:f1:5f:a4:fa:e1:7a:41:5a:d5:
46:0a:2a:ec:2c:de:e2:62:3f:7a:b4:c8:5f:17:28:
0b:dc:0e:b9:45:d2:73:f3:d2:76:b6:c7:56:20:a9:
8a:90:73:5d:be:60:cd:c0:bd:7d:ba:26:7e:9a:df:
98:69:b9:28:5d:b4:e1:43:d9:0c:85:d7:44:a4:3e:
2d:f4:2c:ba:c0:c7:a9:8e:31:04:15:93:04:0a:d9:
6c:b7:72:b5:ee:6f:14:a9:54:f9:61:d8:f3:44:67:
69:81:9a:60:b1:be:a2:78:43:5d:76:ee:5b:55:41:
a0:80:51:62:78:de:d9:f3:21:e8:07:63:4b:f9:b2:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BD:AC:54:76:6F:12:31:DB:EE:CE:74:EC:84:0D:38:EA:A7:B8:4D
X509v3 Authority Key Identifier:
keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:01:9c:53:83:18:89:24:4b:83:f8:0e:e7:b5:72:80:12:c4:
35:2c:3f:47:01:81:43:f2:4f:b7:e4:c9:b7:01:39:0f:00:ce:
05:8b:7d:36:14:b4:0f:3b:d6:67:28:ca:be:05:24:7e:52:a1:
e3:75:ea:3f:83:dc:7d:a5:10:82:dc:11:af:1a:c7:a4:30:1e:
b7:07:95:3d:a8:ff:06:da:d7:67:57:9d:b7:34:41:fb:a7:ce:
37:db:8e:b5:9f:08:7b:2f:75:df:e3:6d:2b:34:be:43:bb:bf:
9f:1e:8c:45:0f:1f:c3:02:45:28:ae:fe:9c:17:9c:94:aa:cd:
46:bc:bf:4f:ac:22:94:57:46:09:53:db:08:31:86:80:d2:16:
a6:88:78:20:d4:00:34:bd:e5:8f:de:1c:84:c1:9d:40:ec:5d:
f7:47:db:de:a3:32:ed:77:f8:12:15:1c:21:21:50:fc:13:16:
cb:41:8e:03:4e:f9:53:e3:69:cd:cf:0a:0c:e0:4b:8a:11:69:
55:99:a3:8d:6e:f8:f3:04:c0:28:a8:6d:65:ff:32:02:cc:f2:
78:9e:60:9b:3b:fe:74:50:b6:ed:1c:44:f7:fe:e9:7b:47:50:
c3:0b:9e:e4:df:30:bd:5f:ec:30:e5:88:a1:34:1c:d7:a5:93:
15:84:78:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDM1NEUzMkI5REUwRTU2OUExOTUxQTk3QjkzMjAxOUY2
ODhBMzUwQUMwHhcNMjYwNjAxMDEyOTMyWhcNMjYwNjA4MDEyOTMyWjAYMRYwFAYD
VQQDEw02YTFjZTA3Yy00OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwcQeLXd9MxH/l2smq4XMM4kkV3PTjMh+hrcwlo+mc7ktbqokXGvhHXos0nIC
oeMMWTZv8fCqy54jQuUWpcSBqbH8JiAiiFay6fBOtVQ7I/UAyvg3xR6FblbIR/e9
b6NkHS5T3P7HhJg0gdCU6HGmC8kxvhHCb0Lm2pUBJkjxX6T64XpBWtVGCirsLN7i
Yj96tMhfFygL3A65RdJz89J2tsdWIKmKkHNdvmDNwL19uiZ+mt+YabkoXbThQ9kM
hddEpD4t9Cy6wMepjjEEFZMECtlst3K17m8UqVT5YdjzRGdpgZpgsb6ieENddu5b
VUGggFFieN7Z8yHoB2NL+bIgWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAa9rFR2
bxIx2+7OdOyEDTjqp7hNMB8GA1UdIwQYMBaAFDVOMrneDlaaGVGpe5MgGfaIo1Cs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS81NUVCQjg1ODRF
M0IxMUYwOUMxMjU1NDdDNEY5QUUwMi9OVTR5dWQ0T1Zwb1pVYWw3a3lBWjlvaWpV
S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05VNHl1ZDRPVnBvWlVhbDdreUFaOW9palVLdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS81NUVCQjg1ODRFM0IxMUYwOUMxMjU1NDdDNEY5QUUwMi9OVTR5dWQ0T1Zw
b1pVYWw3a3lBWjlvaWpVS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQAGcU4MYiSRLg/gO57VygBLENSw/RwGBQ/JPt+TJtwE5DwDOBYt9NhS0DzvW
ZyjKvgUkflKh43XqP4PcfaUQgtwRrxrHpDAetweVPaj/BtrXZ1edtzRB+6fON9uO
tZ8Iey913+NtKzS+Q7u/nx6MRQ8fwwJFKK7+nBeclKrNRry/T6wilFdGCVPbCDGG
gNIWpoh4INQANL3lj94chMGdQOxd90fb3qMy7Xf4EhUcISFQ/BMWy0GOA075U+Np
zc8KDOBLihFpVZmjjW748wTAKKhtZf8yAszyeJ5gmzv+dFC27RxE9/7pe0dQwwue
5N8wvV/sMOWIoTQc16WTFYR4aQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:38 2026 by rpki-client