
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json)
Hash identifier: 0BrcyUvq1gY6g46jgk9JHHTFkEYrmWDawBoafdsKXu4=
Subject key identifier: E5:E2:97:F5:6A:97:7B:83:16:9E:08:42:1A:B4:FB:D3:A7:08:9C:8A
Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Certificate serial: 0754
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
Manifest number: 074C
Signing time: Sat 04 Apr 2026 21:31:50 +0000
Manifest this update: Sat 04 Apr 2026 21:31:50 +0000
Manifest next update: Sat 11 Apr 2026 21:31:50 +0000
Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: T2N5FHd7INQZzhHAexggNkBCUS4OTZlw+LWO7ED3Dhw=)
2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: degQa76ry1qg50W9u2/YZGG6PCGmrbOjwy5QlyzcKog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Validity
Not Before: Apr 4 21:31:50 2026 GMT
Not After : Apr 11 21:31:50 2026 GMT
Subject: CN=69d18346-56e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:f6:f3:13:e2:bb:65:07:7f:4e:cf:16:a5:
56:bd:7c:aa:b2:8e:bf:29:b8:85:4c:7a:73:77:5e:
ef:05:e2:50:42:b2:21:6f:7b:f6:94:3c:5c:e6:6f:
06:59:48:39:8c:cf:94:d6:f0:9c:9d:44:9a:7c:e7:
fc:0b:89:9c:2f:c0:7d:bd:61:bc:7e:4a:cb:a6:99:
e8:8f:a8:db:92:07:26:aa:02:49:9f:98:dc:dd:86:
3f:fd:a1:32:ca:fc:0d:f7:63:82:59:d8:aa:ba:52:
90:f6:46:68:1e:8d:0c:da:04:bd:e4:6a:a2:ed:22:
14:b0:f4:52:44:40:86:59:62:78:e3:5d:cf:37:8a:
1c:84:5f:6a:1b:d0:9d:1e:47:b8:20:19:49:11:e4:
c5:83:e0:ca:d3:a8:44:7c:8b:ce:c7:a9:95:c7:d2:
38:2e:53:ae:59:df:bd:ad:6c:80:79:79:c0:2f:fa:
d6:ec:94:16:94:f1:9d:62:a1:25:6d:8e:38:78:b2:
ae:c3:65:cd:e2:e3:00:54:8d:c9:df:02:bb:7a:83:
e7:86:b3:0d:1b:f4:71:4a:12:c8:77:bf:89:3f:06:
fd:03:94:7c:7b:f1:82:40:b4:86:53:a9:14:c8:e6:
34:ec:f8:9c:37:65:be:2b:84:5f:ae:50:34:6f:43:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:97:F5:6A:97:7B:83:16:9E:08:42:1A:B4:FB:D3:A7:08:9C:8A
X509v3 Authority Key Identifier:
keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:93:11:bf:c3:3d:8c:13:2e:6a:1e:d9:2d:b7:9e:2a:db:60:
26:40:c9:97:30:3e:e1:83:b4:ab:c0:7e:c6:96:67:5b:c1:ee:
ec:c9:71:18:c5:a9:fe:71:6c:91:e6:ef:a9:74:69:28:cb:10:
3b:18:2c:48:02:18:0f:ad:af:27:de:31:83:dd:bf:9b:66:4f:
86:1d:ba:53:f5:ec:6b:02:a9:d1:7c:1d:a6:3b:e9:86:74:00:
05:8d:b9:6d:a1:8e:b4:3a:e7:af:07:63:50:d0:3c:7d:e3:5d:
e6:8a:88:49:93:fc:e3:96:ca:44:f9:84:cc:ce:1f:b6:c8:08:
89:4c:3c:ee:d5:7e:33:fd:f1:62:c1:c6:85:78:c8:13:4c:73:
43:c5:97:5e:07:fd:8a:dd:16:8c:9c:d0:15:0f:7f:4c:47:6b:
8a:10:33:84:30:ce:ff:40:fc:ef:ff:d4:0e:5e:f5:7c:22:43:
dd:9a:12:dd:0f:f5:3f:77:0d:a2:91:a7:47:23:c4:ee:d6:0a:
19:79:0f:9f:a1:2e:76:52:16:a2:06:73:cf:83:35:56:4b:b7:
02:a1:45:fe:01:1e:d0:54:56:a2:e9:d2:71:37:27:38:f2:6a:
93:50:06:82:61:2b:e5:b9:cb:38:01:7c:1e:ee:5c:7c:cd:7a:
e2:c2:15:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:29 2026 by rpki-client