
$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
File: nxsx-ncAt0WPwYibhiVBzp1IJMo.mft (raw, json)
Hash identifier: f6Bq5FlRda0RXlMEbRw/vhLQjNhsmddg9QvuAt12Zug=
Subject key identifier: 4F:85:5A:79:D3:5C:82:5E:89:7D:5F:A4:D0:62:7B:CD:C8:01:E4:3D
Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
Certificate issuer: /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
Manifest number: 1073
Signing time: Fri 10 Jul 2026 17:38:45 +0000
Manifest this update: Fri 10 Jul 2026 17:38:45 +0000
Manifest next update: Fri 17 Jul 2026 17:38:45 +0000
Files and hashes: 1: nxsx-ncAt0WPwYibhiVBzp1IJMo.crl (hash: +GME4DkT4lVlnH2I99nC273cR07LPqND5UtUu44c3oQ=)
2: B2F3EE3C12C911F1AFB167917BEE528E.roa (hash: VhqZnu8kzqQxVrcP2wLUdoKfWprmpAgRyy5IRUHDzoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Jul 2026 17:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Validity
Not Before: Jul 10 17:38:45 2026 GMT
Not After : Jul 17 17:38:45 2026 GMT
Subject: CN=6a512e25-7566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:44:88:28:0a:56:b1:ce:ac:bc:08:68:f6:
06:cb:65:11:98:66:d3:aa:ed:d0:98:e6:b8:19:bc:
e7:a5:61:f9:42:8c:a4:58:f5:e8:bf:b7:8c:ca:5a:
37:9e:6b:50:c9:4b:83:c4:9c:e7:63:5f:cb:10:d8:
70:ff:38:39:d0:03:ff:39:47:ac:28:73:ed:be:97:
14:0a:dc:97:29:47:ab:e7:73:66:b0:48:e9:da:13:
28:b8:b3:44:b2:4b:53:15:11:58:02:dd:10:eb:b5:
b1:67:f1:34:03:27:a3:77:33:ed:cf:c5:dd:93:d3:
b3:3d:64:fc:2d:a0:9e:74:38:0d:19:69:3f:5f:07:
c8:f7:83:03:d5:3c:94:27:a8:b3:e6:e6:49:d9:66:
6f:03:36:55:ec:e4:da:9a:99:e5:95:3b:28:e7:b3:
7f:16:0f:7b:7f:5f:9f:8a:0f:05:fa:38:d3:b5:3c:
b8:6b:55:b0:7b:46:d5:25:05:02:35:ff:4f:bb:0a:
32:ad:83:09:98:72:bc:f0:dc:14:ac:0b:a7:6d:7d:
3d:64:4e:be:0f:7a:95:b6:fd:9e:e5:fa:ec:9f:92:
76:b5:fd:09:c6:82:72:f5:cc:3f:4c:98:b1:dd:bb:
98:d6:32:42:8e:6e:8d:d6:06:52:3b:43:67:b2:cf:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:5A:79:D3:5C:82:5E:89:7D:5F:A4:D0:62:7B:CD:C8:01:E4:3D
X509v3 Authority Key Identifier:
keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:c2:06:97:07:90:cc:13:13:2f:59:22:16:ae:39:29:31:7c:
73:6e:23:49:9f:ee:c5:9d:34:03:28:ac:7d:0a:8a:fa:51:ba:
c2:33:a6:71:23:b8:5b:52:d2:27:96:2d:3f:80:e7:56:2f:4b:
b1:2b:26:80:af:8f:74:82:ae:77:f9:fe:3c:00:7d:8d:1f:57:
c4:4c:57:4a:3a:07:6d:97:af:1a:eb:4b:70:2f:ac:a3:58:51:
d1:1d:70:88:8c:bd:ed:22:e9:d3:b0:89:4e:8c:79:79:cb:36:
d9:dc:2e:82:7e:19:1b:cb:60:8a:c0:f3:f6:3d:a2:4c:75:bb:
89:72:dc:8e:16:14:ec:fe:e3:0e:c1:d1:a0:96:be:72:5c:26:
a3:53:6c:ff:9e:a4:c3:f8:cc:ce:56:0a:19:c8:5d:32:e5:0d:
48:83:65:fa:67:8a:c3:fc:83:1b:43:5c:3d:82:5b:84:17:1d:
fd:90:0a:bf:0f:5b:ac:4e:91:54:a9:ad:a6:3f:03:16:bc:b5:
b4:ea:d6:1a:ab:ef:11:91:e3:57:0d:52:db:69:6c:59:1b:0a:
21:27:8e:26:31:3c:8e:c7:f1:13:e4:74:4d:08:16:6b:70:44:
e0:99:f3:d3:61:6d:f3:8e:02:12:f9:cb:0f:ef:e5:12:0f:2a:
e5:38:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 12:06:11 2026 by rpki-client