
$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json)
Hash identifier: 34gtvBs7UWw70p0mivPbYEYd2xxYH48koPCbZNNbT1Y=
Subject key identifier: AA:1B:00:03:FF:15:82:A1:65:5F:9F:C4:0A:68:64:EB:00:81:E2:39
Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
Manifest number: 0143
Signing time: Wed 19 Aug 2026 06:04:03 +0000
Manifest this update: Wed 19 Aug 2026 06:04:02 +0000
Manifest next update: Wed 26 Aug 2026 06:04:02 +0000
Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: 6+Dnn3uZQSoRStzlw6Wjqgy5Mb2udCCzuxUM5lt/3PU=)
2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: v5s1QxIIpULAPj0sszFm1uj5Kywffv0SxSN9l4noDFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Validity
Not Before: Aug 19 06:04:02 2026 GMT
Not After : Aug 26 06:04:02 2026 GMT
Subject: CN=6a854753-3208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:ac:d8:b4:4d:05:27:1f:35:76:9a:6e:9f:
ca:51:6b:29:4e:c8:f4:ef:3b:9a:9d:19:d7:b6:e2:
dc:ec:a1:71:03:00:35:0c:a0:45:27:cd:36:d2:e6:
8f:c8:67:05:d9:63:02:48:61:b4:8e:9b:64:98:64:
0e:05:82:ca:ee:7a:bb:7b:ba:61:ea:7d:89:23:76:
b2:52:2f:12:57:79:3c:07:21:89:82:4b:d1:a6:62:
32:e2:01:37:9f:eb:8e:64:80:a8:a5:2f:dd:13:34:
8a:7c:df:3e:92:0d:6c:01:5d:82:1a:f5:16:68:95:
ea:41:ee:2e:e2:ae:2b:e4:49:58:d0:51:3b:1b:5e:
ba:d2:52:02:11:ae:25:e2:17:c4:9d:14:85:de:c6:
2f:f9:55:ff:e8:e3:ba:99:b1:71:77:89:58:ba:ba:
eb:c3:93:4b:71:3e:fc:c7:65:a0:c0:15:2a:eb:2a:
89:24:f2:77:2b:1f:6c:1f:7a:29:0b:59:e3:d1:d9:
09:f0:4a:93:79:59:33:6e:55:3e:41:ed:fc:ae:90:
52:2a:3f:25:54:55:ab:46:bd:59:69:f3:0b:22:4c:
2e:50:37:40:90:24:cd:ef:35:e2:08:a4:97:53:ae:
a2:61:c3:5c:89:b4:c8:10:c2:83:16:fe:7d:de:c0:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:00:03:FF:15:82:A1:65:5F:9F:C4:0A:68:64:EB:00:81:E2:39
X509v3 Authority Key Identifier:
keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:e6:65:92:95:1d:c3:98:a3:d2:a7:4e:ca:0e:6f:e4:55:fa:
c0:f9:6a:2a:4e:a9:f3:a8:06:dd:f5:aa:f7:a1:b3:57:01:22:
21:14:f5:a4:0c:89:fb:fe:fd:37:82:9f:68:13:2f:12:0e:45:
eb:ac:49:a0:63:f3:0a:9e:14:29:45:7d:0e:40:40:60:66:08:
7a:91:2d:e3:ec:85:25:35:08:20:46:17:ce:b7:7a:54:b0:08:
e8:e1:e2:f8:a3:99:dd:b4:3a:0b:24:90:3e:82:56:0e:a2:0b:
97:62:c0:7b:c0:e4:de:8d:92:45:70:e3:99:c2:57:4b:41:c9:
9e:4b:eb:a9:61:91:0c:0b:0f:0d:3e:48:5d:0e:f6:24:3d:32:
12:a1:28:1f:85:24:40:ad:d7:9a:72:ce:8e:d0:58:6f:64:1f:
d1:91:a6:e8:a6:5c:dc:e3:a1:3b:f7:ca:57:96:be:69:41:1e:
c6:32:e1:bc:b6:f6:ba:d0:d1:b0:69:2d:04:77:76:5c:a1:4f:
86:e6:92:db:f4:a7:a4:a8:12:18:c9:a0:41:49:47:17:e1:67:
0d:2e:3d:87:4a:ac:fd:6b:49:16:8f:75:21:a9:0d:25:8b:b1:
d5:d8:8e:5a:11:8a:fc:c7:f6:58:09:73:d3:50:4a:5b:49:5d:
00:59:87:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:59 2026 by rpki-client