
$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
File: nxsx-ncAt0WPwYibhiVBzp1IJMo.mft (raw, json)
Hash identifier: Qhqao7LVC49vb3gqM6IWUlZBvsVWUhCrJiXhBX0i2+Y=
Subject key identifier: 43:84:06:93:E7:89:5D:5E:7D:94:D4:B1:C3:19:15:EF:1B:8F:C6:15
Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
Certificate issuer: /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
Manifest number: 103F
Signing time: Wed 20 May 2026 17:29:52 +0000
Manifest this update: Wed 20 May 2026 17:29:51 +0000
Manifest next update: Wed 27 May 2026 17:29:51 +0000
Files and hashes: 1: nxsx-ncAt0WPwYibhiVBzp1IJMo.crl (hash: SbvOfbzHncaf8QEiOelsFioxJUpcTJr0KHT7YfuhD7E=)
2: B2F3EE3C12C911F1AFB167917BEE528E.roa (hash: VhqZnu8kzqQxVrcP2wLUdoKfWprmpAgRyy5IRUHDzoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Validity
Not Before: May 20 17:29:51 2026 GMT
Not After : May 27 17:29:51 2026 GMT
Subject: CN=6a0def8f-9b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:ec:3d:d8:0a:9e:84:c2:86:40:a9:f2:74:
39:fc:e4:14:a2:97:1c:cb:a4:ab:30:b5:31:2d:38:
98:db:b6:c0:b3:55:79:2f:7a:6e:55:68:99:c6:fc:
8e:82:2f:3d:69:b7:97:86:e2:05:bb:36:c6:26:d6:
86:95:2a:e7:d0:c7:a9:bf:c8:33:4e:0e:09:6e:1f:
16:ce:98:84:8e:6d:0e:23:cf:aa:7a:da:dc:28:08:
7c:b3:80:e0:ee:54:62:93:ee:19:70:6e:6d:16:6c:
15:b0:ee:1d:c7:31:88:9a:9c:55:02:be:09:50:ca:
58:08:83:2f:51:4e:ae:4b:ff:73:7f:a4:47:8d:aa:
f4:dd:bd:61:c2:6f:ac:25:d1:15:f6:33:cd:bd:d9:
85:72:6f:87:13:b3:4e:54:2d:9a:14:60:6f:7e:3d:
21:27:6f:04:db:aa:a4:13:ea:1a:5b:f2:07:58:86:
a6:fd:71:8f:f4:06:67:1f:3e:ad:8f:d2:0e:82:77:
54:53:e5:ec:1b:f4:de:9b:3f:de:4a:16:f1:88:0d:
a4:ce:63:24:a5:ea:e6:db:41:ce:9c:ef:bc:11:cf:
2c:c8:5b:5c:95:4a:47:e9:57:2e:39:c2:1e:7c:89:
21:a7:0f:57:2e:c5:97:5b:61:d7:80:56:09:0c:c1:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:06:93:E7:89:5D:5E:7D:94:D4:B1:C3:19:15:EF:1B:8F:C6:15
X509v3 Authority Key Identifier:
keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ca:24:ea:36:ba:9e:8a:9e:c1:6b:fd:ab:3c:56:7e:e0:57:
3e:e3:de:3d:17:fa:44:14:65:03:76:9b:cb:f9:54:6e:f1:f0:
ff:f9:7b:d6:61:6b:49:d6:2e:98:8d:f6:c4:e8:55:5d:9d:23:
e9:91:5f:66:93:8a:9f:63:79:c7:7f:64:0e:03:a0:e6:ed:ce:
0d:f6:83:a5:99:f8:33:f4:cf:fe:59:df:e9:95:e0:ac:b6:93:
c3:bc:7c:01:ae:34:e8:14:9b:e6:a8:54:5d:af:06:78:48:0e:
5e:a1:63:4f:f8:9a:92:a4:da:2e:d3:75:5d:da:3d:49:7d:33:
93:55:fe:6b:d7:c3:5c:98:9d:a6:0f:fe:1a:a9:3e:2b:a4:6a:
9f:0c:59:ad:59:da:64:57:dc:b1:bd:8a:ce:1d:2b:59:94:e4:
42:10:ab:50:ee:49:2f:6f:0b:3e:6e:9b:b4:2f:ab:6e:cd:34:
66:45:5d:8f:d3:26:7b:85:20:3f:e9:5d:9b:8f:42:7f:53:42:
aa:f4:ac:9c:26:31:76:0e:6a:a1:96:22:6b:56:16:fa:2c:26:
38:0c:f1:bd:2f:5b:91:41:c1:b2:46:4d:08:20:74:c5:6b:4c:
d3:4d:9f:f8:69:65:9d:28:94:9b:5f:1c:8c:c4:b0:c5:dd:fe:
ad:38:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:23:34 2026 by rpki-client