
$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json)
Hash identifier: TdlFyaSUli7JtzpS9p2flQ+DyL7nv781/TZSaxg9Bsg=
Subject key identifier: 02:C0:46:76:AB:02:B2:2A:73:3F:76:63:03:54:B7:7C:29:E1:FA:E3
Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E
Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
Certificate serial: 0B22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
Manifest number: 0B18
Signing time: Wed 20 May 2026 19:19:12 +0000
Manifest this update: Wed 20 May 2026 19:19:11 +0000
Manifest next update: Wed 27 May 2026 19:19:11 +0000
Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: SI8un5teaVQkwuX3iFIcGJT0+VOm0buBgKWYkmsCkwg=)
2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: Dk339imNFOip5Ywpt/0EfK35LYjSFKAUXhrmv8n0CpU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl
rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2850 (0xb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
Validity
Not Before: May 20 19:19:11 2026 GMT
Not After : May 27 19:19:11 2026 GMT
Subject: CN=6a0e0930-55c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:6c:c6:10:e2:61:d3:34:1a:99:64:34:05:
2a:e8:14:ac:38:82:93:12:37:54:7b:d7:49:45:7b:
91:fa:08:f1:28:73:24:41:27:f4:32:1d:8d:4f:2e:
5c:a7:c4:f3:7a:b4:85:da:cd:33:1d:58:10:6d:b4:
54:01:e4:d5:b0:c3:73:12:f9:62:51:09:ae:d7:6a:
76:d0:1c:d3:17:c6:b7:37:e5:e1:c8:e6:de:a6:87:
c1:92:bb:69:08:8f:ce:45:92:a0:b5:08:b9:8e:b7:
f1:50:b9:88:5b:a0:e5:d7:30:7d:e2:80:91:f7:49:
b7:30:50:72:8e:4e:b2:79:78:46:78:64:ea:b0:fd:
c2:0b:ee:66:fe:a3:32:bc:b4:8d:57:f6:d9:a1:26:
1b:94:18:de:fb:8a:f6:4c:8e:a0:4c:c1:0c:fa:89:
a9:06:47:a6:df:a1:1a:d8:85:3a:09:e0:bb:aa:cd:
3c:69:60:36:ff:a4:1d:7a:7a:70:65:3d:a7:15:1c:
a7:ef:6b:31:94:5e:55:3a:93:ac:88:4e:ad:7a:59:
75:20:48:ef:80:1e:44:e6:89:36:e4:30:d1:a5:a5:
44:6f:fc:6f:de:70:5a:1f:74:57:72:9c:f3:3d:5d:
c6:c3:fa:3b:d1:b9:52:94:ab:e8:2a:1f:01:8f:30:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C0:46:76:AB:02:B2:2A:73:3F:76:63:03:54:B7:7C:29:E1:FA:E3
X509v3 Authority Key Identifier:
keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:45:c2:1c:45:24:e0:fc:a0:48:55:da:a1:0d:3f:c7:05:48:
94:c9:8e:d6:e0:2a:f5:da:ad:6b:16:0f:75:7b:dd:1f:df:33:
f1:19:7e:33:12:6b:1d:6c:22:ed:54:0a:b6:df:8c:08:1f:c0:
5b:e4:9f:b8:a8:c3:80:aa:a8:4b:7f:b3:39:5a:0e:d5:e3:3a:
b9:6e:c9:25:73:eb:d5:53:c6:d6:2f:f5:b4:99:da:01:61:a6:
63:37:6a:cf:59:c4:31:5d:a2:65:5c:95:fb:ba:45:5d:d6:b1:
a5:af:47:af:20:09:db:23:97:78:16:31:a8:d2:32:0e:d9:4c:
6e:fe:01:c4:f6:96:4f:7c:92:76:de:55:62:29:b5:cd:75:ac:
34:ab:32:2d:b7:6c:8b:f3:ac:80:d7:0f:2d:1f:19:d8:60:a5:
7c:e7:47:f3:84:1c:57:de:7a:ff:77:8f:d6:8e:60:4f:22:51:
06:0d:0d:73:33:84:43:ac:50:80:b3:a7:9e:1e:a0:b7:cb:f1:
c3:26:b0:bc:42:ff:18:bd:21:98:c5:42:e7:a6:5c:a2:68:a8:
17:11:07:b4:4c:fd:c9:d7:3d:52:64:12:1d:ca:2d:91:79:a4:
07:7c:79:34:ca:98:e6:14:5e:9b:cc:cd:7c:8c:e3:43:c9:3b:
2d:f7:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:20 2026 by rpki-client