
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json)
Hash identifier: n8uBy9mPfAoovhqYwthZbN59C9GRn1r/ux3FJHeuYX8=
Subject key identifier: C4:4F:B5:C0:8F:0B:B3:D3:15:7A:21:0C:8A:96:3F:35:88:83:25:83
Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
Manifest number: 020C
Signing time: Wed 19 Aug 2026 03:39:25 +0000
Manifest this update: Wed 19 Aug 2026 03:39:24 +0000
Manifest next update: Wed 26 Aug 2026 03:39:24 +0000
Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: DbOpIFd5MLS4iFyWHJfg2AEynF8Df7TkFBx+SK7ktKo=)
2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: a1wzRh8XwhAFQd8Ja2EntSNyYcs9nQlwwooXA0U/t20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:39:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Validity
Not Before: Aug 19 03:39:24 2026 GMT
Not After : Aug 26 03:39:24 2026 GMT
Subject: CN=6a85256c-7117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:c0:82:11:eb:ed:12:25:68:14:d9:e0:6b:
31:c5:b6:47:d3:3e:73:ff:3c:7a:f7:46:d1:ae:1e:
26:37:c5:d9:75:9e:00:68:02:61:ed:48:cd:d6:a8:
24:73:73:47:59:c1:52:39:81:45:59:6e:f5:b1:e5:
20:37:92:af:ff:27:d7:37:7c:63:7f:cc:6c:72:81:
8a:98:2f:1f:9c:e8:35:e5:13:73:10:a4:13:38:83:
9a:dc:3d:49:62:fa:d2:b6:76:64:62:66:21:72:2b:
61:ea:88:f1:99:a8:99:90:37:53:1a:01:76:1d:f6:
31:6b:e6:d3:4d:b9:19:f7:a3:72:8e:ed:e7:a1:3e:
87:bd:8b:a0:29:13:80:4d:a1:ee:9d:ac:65:60:2d:
98:1f:6f:05:63:29:29:fd:15:94:46:4b:54:a0:4f:
2c:f9:c5:f7:4a:46:ca:77:6f:ee:14:15:8e:4e:66:
c2:42:77:5d:9f:9e:eb:00:df:ca:9f:b9:a8:dd:c1:
a5:15:ef:6b:bb:94:0b:4a:bf:c7:cb:b0:3b:05:a3:
57:f6:72:ba:86:da:b2:67:61:1d:f5:0d:7a:b7:77:
e6:95:a0:55:c6:e0:be:42:34:fd:aa:dd:bc:8c:9c:
d5:da:b1:73:ab:54:61:b7:a2:cc:cb:9d:db:42:ea:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4F:B5:C0:8F:0B:B3:D3:15:7A:21:0C:8A:96:3F:35:88:83:25:83
X509v3 Authority Key Identifier:
keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:e4:0f:e2:d9:a5:11:28:87:13:3a:b6:6b:ee:fd:2c:7d:
88:94:0a:6b:96:31:ef:e4:19:4f:ec:5e:93:ce:e5:4a:90:9f:
45:f6:77:2d:16:88:d9:e7:8f:20:a7:cb:7e:3b:f4:4a:48:a3:
8e:bf:b9:87:d6:1e:88:8e:6b:6c:70:16:c0:af:4a:c7:8c:1f:
56:d0:e6:f4:3b:74:83:52:d0:73:ed:db:ed:d4:78:c7:34:79:
72:03:0f:b9:fe:cf:c8:db:bd:b7:e5:3c:74:e5:52:2b:39:57:
0c:12:d7:67:3c:2c:66:67:38:43:13:0b:fa:e9:16:69:99:00:
9d:36:30:7c:a3:79:fe:2f:f4:31:8a:99:5e:f7:9a:96:1b:e6:
4f:1e:bf:5b:bf:87:7a:0b:fb:fd:18:e5:4b:0f:99:ca:4d:68:
90:df:10:69:92:fd:a0:9c:9a:c4:6e:ec:42:c4:40:fd:c8:65:
00:f8:ba:2b:af:bd:c0:8e:fb:b5:f0:29:a8:13:b2:4e:2b:c1:
4d:ff:a2:45:24:d6:37:47:b9:95:df:e3:a2:84:bd:e1:e2:dd:
3f:0d:23:b3:9d:55:8e:3a:38:a1:d8:95:ec:31:43:91:4b:33:
56:54:67:e0:00:a0:b8:6b:f1:7e:84:a7:08:1f:5d:37:b7:b8:
a2:ba:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:23 2026 by rpki-client