
$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
File: NYQa4z32kxIBQGeYrmT8wIf1oeU.mft (raw, json)
Hash identifier: c2n1us8ei1jjO5zQv/P9tS/rnhSwhfPaohJ9rxs5/q8=
Subject key identifier: F9:F0:0D:0C:EF:44:D3:3C:9E:8B:F2:F3:B0:0C:79:7D:4C:DA:44:20
Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
Manifest number: 012C
Signing time: Sun 05 Jul 2026 06:20:23 +0000
Manifest this update: Sun 05 Jul 2026 06:20:23 +0000
Manifest next update: Sun 12 Jul 2026 06:20:23 +0000
Files and hashes: 1: NYQa4z32kxIBQGeYrmT8wIf1oeU.crl (hash: kk4iKDgKVWD2Jhb6HDAQhdRo2XWESXBczjO0Ja+/vic=)
2: AC205A92B13011EFB45E6B3BC4F9AE02.roa (hash: v5s1QxIIpULAPj0sszFm1uj5Kywffv0SxSN9l4noDFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912929D, serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Validity
Not Before: Jul 5 06:20:23 2026 GMT
Not After : Jul 12 06:20:23 2026 GMT
Subject: CN=6a49f7a7-9322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:b2:31:50:e0:9a:af:08:7d:f6:3d:8d:04:
99:0a:ed:d5:18:a7:5b:9c:e4:f8:d6:a9:1f:19:bc:
6a:27:0b:76:83:34:ef:84:90:0b:2e:3a:06:eb:ab:
58:cc:3d:4a:16:a7:75:d4:8c:09:6f:30:2d:0e:ba:
c0:8b:d1:9c:47:12:d9:7a:a6:27:84:4e:c4:3c:01:
8e:7e:90:d0:46:2e:92:f4:4e:77:86:58:f3:d5:89:
a6:7c:35:6d:60:53:2d:79:24:72:3c:53:cf:6e:bd:
1c:3f:94:83:39:35:76:71:09:07:6c:e3:89:a7:ed:
9a:06:60:70:f3:64:d4:38:46:4b:70:34:6c:4e:15:
c1:2c:23:9f:f8:e5:4e:ad:bd:63:ce:98:41:6f:d8:
c1:92:74:a0:4c:b3:89:84:59:d4:2b:ec:67:41:62:
c2:6c:27:5b:06:14:a0:b6:4d:2a:9a:06:0a:8b:4a:
f2:b0:77:8e:6c:4a:0b:ab:37:30:09:41:bd:92:5d:
20:3b:a1:55:9d:32:f8:38:9f:ff:ec:39:09:63:5d:
5b:97:4c:c9:ac:f0:82:78:2e:6f:26:75:39:2a:11:
cf:ff:20:80:1f:9d:29:02:53:82:89:b7:aa:d9:c0:
20:1b:09:ed:cf:2c:9a:2a:38:29:1b:d2:a4:52:3c:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:0D:0C:EF:44:D3:3C:9E:8B:F2:F3:B0:0C:79:7D:4C:DA:44:20
X509v3 Authority Key Identifier:
keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:4e:6e:21:f6:24:b6:45:6d:6b:b7:75:79:89:93:91:c6:
f3:ff:6d:12:1a:a5:1d:8b:1a:f9:a3:d4:cd:8d:bf:59:23:77:
bb:d9:d3:67:e6:4c:e4:a2:b7:05:0b:d3:0b:1c:02:da:e8:11:
cf:48:6e:c2:7f:90:33:7d:09:ca:e4:e7:00:cb:d8:7d:2b:54:
9b:51:ab:d5:96:f3:b1:7f:5f:f0:b1:7b:99:b5:fa:b2:88:a2:
55:ba:53:45:f1:47:05:3e:33:91:ff:61:90:cb:4c:c7:a6:8d:
81:51:5d:0d:67:7b:fb:d5:ee:fc:4f:8e:53:9d:2f:39:57:93:
a3:28:2f:8e:6b:a4:83:c4:ca:cb:f8:db:47:22:e6:5c:63:7c:
bb:cf:c9:07:de:9a:b1:46:39:3c:0c:59:fd:79:c6:50:6f:f4:
73:ab:10:5c:7e:b2:68:8a:bd:56:1f:18:27:55:ae:ac:89:36:
82:d6:2a:77:69:70:3f:db:64:3d:62:d7:77:cf:a7:a5:5b:fa:
28:9d:20:e6:1c:9f:64:fb:aa:3c:bf:e5:69:e0:c9:57:7b:62:
68:b0:fe:c9:80:01:62:18:aa:d2:c1:02:12:4c:ca:07:06:d2:
86:ad:02:51:29:50:55:76:7d:b8:a3:54:5e:36:8f:08:6a:5c:
f3:ef:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:41:05 2026 by rpki-client