
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
File: NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json)
Hash identifier: 3j4GODhL92px6Z0AFL3t7f0FQFuT4ynJe1qv/pvTS4k=
Subject key identifier: A8:D0:E6:A7:F5:0B:FC:CA:E1:D1:F5:F5:B1:B1:C1:E0:D7:5D:31:20
Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Certificate issuer: /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
Manifest number: 87
Signing time: Tue 03 Mar 2026 00:57:54 +0000
Manifest this update: Tue 03 Mar 2026 00:57:54 +0000
Manifest next update: Tue 10 Mar 2026 00:57:54 +0000
Files and hashes: 1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: oyPjGnIk7+HqvyFYzg+02yD/A4ThcPYNgDeYpRzkTYo=)
2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: sqaF/L7BkPPx01J6zjZJOWgkKgNdgKGuBKXecAoTrY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 00:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Validity
Not Before: Mar 3 00:57:54 2026 GMT
Not After : Mar 10 00:57:54 2026 GMT
Subject: CN=69a63212-14c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:ed:17:3c:d3:10:41:0e:d6:19:2d:64:0c:
63:82:04:d2:98:25:cc:77:6e:ec:ca:76:fe:32:e1:
30:b2:e7:0d:b7:c9:75:2b:f6:1b:d6:24:94:ec:7f:
64:8b:26:32:74:66:c0:0b:ca:db:87:0f:f0:e6:da:
36:17:ac:08:f3:bb:da:1d:b5:1e:44:f9:f1:72:e8:
32:c5:76:28:8c:6f:63:8d:08:2d:71:31:3c:5c:94:
f4:39:53:42:5b:38:24:3c:16:7e:d7:23:4c:ef:d8:
67:ee:98:8f:67:20:a5:e4:87:a2:54:f5:5e:e0:2a:
e1:f9:2b:65:78:5c:1b:e9:72:27:d9:12:61:87:28:
bc:3b:22:98:a1:24:68:7e:8f:e0:a6:10:02:95:ef:
ec:e1:13:6b:be:20:58:0c:f4:61:b6:69:7d:01:43:
6f:f4:bc:0d:18:e8:df:39:30:46:0b:f4:99:2c:b1:
32:af:10:d8:55:c4:aa:a2:8f:09:d7:33:cf:6a:be:
10:e5:71:ff:bb:47:31:1b:c0:55:7d:4b:cd:8d:9e:
b7:39:0f:23:14:4d:7e:3c:7e:f1:76:9a:8d:cc:c2:
28:10:20:fa:43:0d:da:d1:db:fa:e4:a4:4e:37:5f:
29:31:7d:b5:3d:dc:b1:d6:41:88:7a:6d:19:89:8b:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:E6:A7:F5:0B:FC:CA:E1:D1:F5:F5:B1:B1:C1:E0:D7:5D:31:20
X509v3 Authority Key Identifier:
keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:21:03:81:62:ea:d1:d5:c3:79:2d:11:43:d8:4d:24:45:14:
52:af:24:0f:05:3c:3c:76:ee:1b:7a:06:67:d7:db:42:f5:fd:
8d:5f:b6:15:c5:6b:74:0b:4c:c6:16:c1:73:d5:2d:92:61:a4:
12:e3:fb:9d:58:74:cd:c0:62:bb:c9:2e:2d:45:2e:e6:32:53:
93:2f:21:3e:a8:c6:ae:5c:43:86:bc:5d:56:6e:3e:f9:5e:65:
74:40:e2:b6:f5:89:6a:f8:84:40:73:e6:14:a6:6a:05:6d:a5:
27:04:63:a2:12:cf:41:b0:40:42:b3:be:c2:d1:a5:a2:f8:12:
37:c8:1b:b9:3e:2c:3b:91:4b:c4:f1:24:90:46:ef:aa:1d:98:
02:eb:e8:f0:b3:ab:c8:f8:14:26:e7:04:28:3d:2b:d7:35:71:
2d:2f:83:fd:fd:a2:c3:65:2b:e2:89:77:f4:e0:19:92:73:93:
80:c5:31:69:e4:31:b7:9c:5c:68:e5:18:ee:bb:68:02:62:2d:
ad:28:23:f0:54:82:bb:c2:a7:33:79:f3:d7:b2:01:9a:5f:26:
5c:2e:2c:dd:d7:c4:3c:34:8d:7d:a2:5b:67:73:1f:a2:b1:ec:
43:f6:aa:63:f8:03:9d:e9:71:a1:04:a2:8d:57:4a:d0:94:a0:
75:47:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:31:59 2026 by rpki-client