
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
File: nxsx-ncAt0WPwYibhiVBzp1IJMo.mft (raw, json)
Hash identifier: 8QWkFeY/h6gEumts+vo0Jfsc7eqpmnQvQsDCmumzDTI=
Subject key identifier: 9A:46:A7:45:2F:41:25:00:93:F7:82:10:7A:9B:61:42:2B:C6:18:E3
Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
Certificate issuer: /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
Manifest number: 10A6
Signing time: Wed 26 Aug 2026 17:24:17 +0000
Manifest this update: Wed 26 Aug 2026 17:24:16 +0000
Manifest next update: Wed 02 Sep 2026 17:24:16 +0000
Files and hashes: 1: nxsx-ncAt0WPwYibhiVBzp1IJMo.crl (hash: qKkG3EwRVZiPYONVYT6u+bXA/BCLjb6gahGMQKlWdlc=)
2: B2F3EE3C12C911F1AFB167917BEE528E.roa (hash: rUVLvoA7SCWobHv8rQIiOZULoL/+BvRsb/mC77XzI5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 17:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Validity
Not Before: Aug 26 17:24:16 2026 GMT
Not After : Sep 2 17:24:16 2026 GMT
Subject: CN=6a8f2141-8fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:25:ea:e8:45:36:6c:2d:32:48:4a:5f:8d:
14:8d:51:99:03:6e:b1:6f:29:9d:01:55:87:9b:02:
ce:8d:55:09:14:a3:29:14:7e:c3:b6:ce:f9:20:05:
29:b8:33:4b:15:a0:93:b5:c2:a9:89:69:89:78:64:
64:80:28:40:67:06:18:34:e5:87:00:69:28:f0:21:
07:13:d9:04:08:f7:27:fb:aa:08:10:f2:57:f6:13:
54:53:90:70:c1:64:96:09:76:4c:f5:15:ea:86:23:
79:b9:68:ce:9a:2b:a4:97:7c:3c:29:a2:8c:ef:ce:
8d:5e:0e:e6:5e:2b:95:85:1e:7e:dc:3f:aa:56:0b:
14:07:8f:77:65:6a:94:d6:bb:a6:1a:2f:dd:ec:92:
18:64:e1:db:27:00:fb:98:05:47:32:3c:b6:ce:b2:
08:a3:2a:d0:cd:60:3e:72:2b:d7:df:25:cf:2e:fd:
74:02:0d:08:66:7e:74:4c:ba:14:fc:fc:8b:cb:48:
3f:e5:03:ec:0e:5a:bd:f0:5b:56:2c:53:48:d1:37:
cb:37:c6:b0:e7:0b:9a:50:4f:bd:e3:03:2b:3e:99:
19:91:c1:db:ae:91:e2:7a:47:d7:94:d5:cc:0a:9c:
5c:9e:32:b6:5d:8b:18:09:cc:49:a7:92:71:93:e4:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:46:A7:45:2F:41:25:00:93:F7:82:10:7A:9B:61:42:2B:C6:18:E3
X509v3 Authority Key Identifier:
keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a9:34:bb:e2:89:02:4c:81:b7:5a:c7:91:c7:79:5e:f4:05:
8c:89:7f:78:f2:c1:9e:61:1f:e6:37:a3:b2:5e:c4:29:75:36:
cd:c1:cf:1c:e6:87:18:8b:16:94:2b:60:05:46:40:73:6d:94:
e0:e2:d0:41:f7:36:82:f9:0e:f1:e6:99:e1:8c:d5:54:ec:58:
3a:a6:75:ef:0a:f4:a4:76:71:39:13:3c:53:46:bf:b7:ee:04:
e9:2b:70:62:0f:1a:32:29:84:28:a8:f7:b7:88:31:6f:ef:9e:
52:69:20:e9:f7:d5:a5:5b:2b:27:7b:23:fb:f4:f5:31:99:f1:
b4:04:d6:dd:da:2b:39:49:38:57:44:e4:04:20:b9:83:76:91:
75:ef:7d:0b:d0:90:85:4e:10:7e:5c:05:f5:76:92:24:4b:59:
15:89:95:fb:4b:d8:00:79:1f:4f:48:0b:65:2b:fd:02:62:a1:
93:b5:00:f7:d4:38:78:2f:f1:54:22:5d:0c:eb:05:fa:6a:87:
25:d1:ca:b0:9d:d1:fc:18:dd:de:3f:20:c0:ae:fb:9c:af:0a:
71:b9:c8:2d:47:31:5d:3a:e6:0d:18:10:ba:2f:0e:80:a4:37:
1d:45:35:98:8e:cb:85:cd:6d:fb:a3:93:54:6a:60:31:6a:98:
6a:e6:a4:ed
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTYzRDExMC8GA1UEBRMoOUYxQjMxRkE3NzAwQjc0NThGQzE4ODlCODYyNTQxQ0U5
RDQ4MjRDQTAeFw0yNjA4MjYxNzI0MTZaFw0yNjA5MDIxNzI0MTZaMBgxFjAUBgNV
BAMTDTZhOGYyMTQxLThmY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCscCXq6EU2bC0ySEpfjRSNUZkDbrFvKZ0BVYebAs6NVQkUoykUfsO2zvkgBSm4
M0sVoJO1wqmJaYl4ZGSAKEBnBhg05YcAaSjwIQcT2QQI9yf7qggQ8lf2E1RTkHDB
ZJYJdkz1FeqGI3m5aM6aK6SXfDwpoozvzo1eDuZeK5WFHn7cP6pWCxQHj3dlapTW
u6YaL93skhhk4dsnAPuYBUcyPLbOsgijKtDNYD5yK9ffJc8u/XQCDQhmfnRMuhT8
/IvLSD/lA+wOWr3wW1YsU0jRN8s3xrDnC5pQT73jAys+mRmRwduukeJ6R9eU1cwK
nFyeMrZdixgJzEmnknGT5HkHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmkanRS9B
JQCT94IQepthQivGGOMwHwYDVR0jBBgwFoAUnxsx+ncAt0WPwYibhiVBzp1IJMow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NjNEL0Y5Qzk3NjZDNzI2
NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBXUHdZaWJoaVZCenAxSUpN
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbnhzeC1uY0F0MFdQd1lpYmhpVkJ6cDFJSk1vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5
NjNEL0Y5Qzk3NjZDNzI2NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBX
UHdZaWJoaVZCenAxSUpNby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA/qTS74okCTIG3WseRx3le9AWMiX948sGeYR/mN6OyXsQpdTbNwc8c5ocYixaU
K2AFRkBzbZTg4tBB9zaC+Q7x5pnhjNVU7Fg6pnXvCvSkdnE5EzxTRr+37gTpK3Bi
DxoyKYQoqPe3iDFv755SaSDp99WlWysneyP79PUxmfG0BNbd2is5SThXROQEILmD
dpF1730L0JCFThB+XAX1dpIkS1kViZX7S9gAeR9PSAtlK/0CYqGTtQD31Dh4L/FU
Il0M6wX6aocl0cqwndH8GN3ePyDArvucrwpxucgtRzFdOuYNGBC6Lw6ApDcdRTWY
jsuFzW37o5NUamAxaphq5qTt
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:09:21 2026 by rpki-client