
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.mft
File: nt5PWK8pvMEDuQUn99LJpwu_eFs.mft (raw, json)
Hash identifier: PkMgbUfahEyk0c81EXn2/CFe4/sx3nTnVmVoZMDQKCo=
Subject key identifier: 4A:DD:C2:27:84:E2:32:EB:B6:36:CC:F5:34:70:C5:C5:F5:39:B2:2C
Authority key identifier: 9E:DE:4F:58:AF:29:BC:C1:03:B9:05:27:F7:D2:C9:A7:0B:BF:78:5B
Certificate issuer: /CN=A912E8F6/serialNumber=9EDE4F58AF29BCC103B90527F7D2C9A70BBF785B
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nt5PWK8pvMEDuQUn99LJpwu_eFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.mft
Manifest number: 78
Signing time: Wed 19 Aug 2026 08:29:49 +0000
Manifest this update: Wed 19 Aug 2026 08:29:48 +0000
Manifest next update: Wed 26 Aug 2026 08:29:48 +0000
Files and hashes: 1: nt5PWK8pvMEDuQUn99LJpwu_eFs.crl (hash: rGVQ1WMFLxJgVDRmhFhbuLZW1g2xdX9B3pxLQ9UHPbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.crl
rsync://rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nt5PWK8pvMEDuQUn99LJpwu_eFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E8F6, serialNumber=9EDE4F58AF29BCC103B90527F7D2C9A70BBF785B
Validity
Not Before: Aug 19 08:29:48 2026 GMT
Not After : Aug 26 08:29:48 2026 GMT
Subject: CN=6a85697d-8a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:4f:b1:74:e0:09:01:7d:3d:7e:0b:96:ca:
91:73:00:14:60:eb:d9:de:24:df:6f:cb:6b:c1:58:
cd:dd:13:86:c8:cd:75:a7:95:de:db:79:8c:a0:17:
09:6b:c3:fb:9b:62:c0:a4:38:f0:a7:ab:e7:13:46:
c8:08:ac:4b:46:6e:52:b8:a4:0d:81:21:ee:0c:da:
3f:9a:6f:0b:74:14:3e:cf:70:cd:c8:1b:89:af:1b:
e8:54:64:46:02:38:99:6f:59:02:48:5e:e5:59:1e:
6f:21:5d:fb:39:69:0b:a2:7e:e3:03:8c:1c:5a:70:
d0:97:a6:c0:18:7a:5f:9f:e7:9c:97:64:ef:91:5c:
24:a8:ff:8e:99:a5:27:80:90:66:00:a4:6c:9d:11:
75:fd:c1:6f:0a:1b:ad:f9:64:ef:22:60:48:59:54:
88:e6:9b:94:3a:c2:de:0d:d4:e9:87:47:8d:01:bc:
e7:40:fa:3e:44:93:cd:d0:29:82:22:76:58:74:59:
9e:9f:f5:5f:5b:43:e8:13:e6:a9:1d:5d:ec:58:34:
7d:89:2a:df:84:36:84:1a:d4:61:90:9f:a2:8a:ad:
f2:5a:2c:22:21:17:aa:da:b6:cc:69:cf:aa:e6:f8:
c4:14:66:2f:72:6b:d7:5d:26:ab:2c:16:85:e5:ec:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:C2:27:84:E2:32:EB:B6:36:CC:F5:34:70:C5:C5:F5:39:B2:2C
X509v3 Authority Key Identifier:
keyid:9E:DE:4F:58:AF:29:BC:C1:03:B9:05:27:F7:D2:C9:A7:0B:BF:78:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nt5PWK8pvMEDuQUn99LJpwu_eFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:da:0c:d7:e4:b8:4f:1d:38:7f:67:a2:b7:7c:78:f7:7f:e6:
5b:d6:e1:41:8b:51:4e:75:29:e1:84:39:fa:df:06:b7:6b:f6:
f3:3e:81:ad:07:27:3a:cf:fe:da:4e:fd:d4:5c:81:64:f7:c9:
00:6b:7b:d1:0a:0b:ac:9c:6f:05:34:85:58:cd:3f:af:02:8e:
21:fd:5f:af:6e:21:ec:8d:3b:83:b1:57:b8:6b:ae:51:01:be:
2f:7a:d4:cc:92:30:4b:55:0b:87:49:9a:04:d6:64:ea:a7:bf:
ae:5c:9f:78:72:0e:ef:a3:f6:8f:78:bf:e5:e0:48:20:b7:99:
bb:85:a1:46:02:d0:3c:ec:cd:9a:bc:f1:f9:38:4b:43:e1:83:
5f:73:c0:09:a5:34:de:09:f9:71:db:e6:b5:a0:ea:9c:e5:02:
63:4b:bb:80:9b:80:92:53:0e:13:70:09:49:47:2c:ad:e0:75:
4c:25:8f:c2:39:db:eb:e9:5b:55:0e:11:a6:56:b5:ca:ba:6b:
fa:6e:dc:a2:b2:eb:6c:07:cd:fb:5a:bc:56:fc:3c:e2:15:41:
fa:3c:da:ad:f9:90:c8:28:34:d6:bf:d5:b7:e8:72:47:63:7a:
79:12:7c:06:98:74:a4:31:a7:3c:45:36:0a:b2:58:14:8f:25:
bb:de:12:3c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
RThGNjExMC8GA1UEBRMoOUVERTRGNThBRjI5QkNDMTAzQjkwNTI3RjdEMkM5QTcw
QkJGNzg1QjAeFw0yNjA4MTkwODI5NDhaFw0yNjA4MjYwODI5NDhaMBgxFjAUBgNV
BAMTDTZhODU2OTdkLThhNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxFk+xdOAJAX09fguWypFzABRg69neJN9vy2vBWM3dE4bIzXWnld7beYygFwlr
w/ubYsCkOPCnq+cTRsgIrEtGblK4pA2BIe4M2j+abwt0FD7PcM3IG4mvG+hUZEYC
OJlvWQJIXuVZHm8hXfs5aQuifuMDjBxacNCXpsAYel+f55yXZO+RXCSo/46ZpSeA
kGYApGydEXX9wW8KG635ZO8iYEhZVIjmm5Q6wt4N1OmHR40BvOdA+j5Ek83QKYIi
dlh0WZ6f9V9bQ+gT5qkdXexYNH2JKt+ENoQa1GGQn6KKrfJaLCIhF6ratsxpz6rm
+MQUZi9ya9ddJqssFoXl7NDnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSt3CJ4Ti
Muu2Nsz1NHDFxfU5siwwHwYDVR0jBBgwFoAUnt5PWK8pvMEDuQUn99LJpwu/eFsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFOEY2LzQ2MEU0MUFFRTdB
RjExRjA5QjA2QTM0MjUzNkY1NkJDL250NVBXSzhwdk1FRHVRVW45OUxKcHd1X2VG
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbnQ1UFdLOHB2TUVEdVFVbjk5TEpwd3VfZUZzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF
OEY2LzQ2MEU0MUFFRTdBRjExRjA5QjA2QTM0MjUzNkY1NkJDL250NVBXSzhwdk1F
RHVRVW45OUxKcHd1X2VGcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCR2gzX5LhPHTh/Z6K3fHj3f+Zb1uFBi1FOdSnhhDn63wa3a/bzPoGtByc6z/7a
Tv3UXIFk98kAa3vRCgusnG8FNIVYzT+vAo4h/V+vbiHsjTuDsVe4a65RAb4vetTM
kjBLVQuHSZoE1mTqp7+uXJ94cg7vo/aPeL/l4Eggt5m7haFGAtA87M2avPH5OEtD
4YNfc8AJpTTeCflx2+a1oOqc5QJjS7uAm4CSUw4TcAlJRyyt4HVMJY/COdvr6VtV
DhGmVrXKumv6btyisutsB837WrxW/DziFUH6PNqt+ZDIKDTWv9W36HJHY3p5EnwG
mHSkMac8RTYKslgUjyW73hI8
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:46 2026 by rpki-client