
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier: V5W33AJjpdIrjT7L/tjjc/BKdR475NWV3JG/2J724ys=
Subject key identifier: D0:6B:EB:2A:E0:5F:0F:70:2A:60:1A:26:3A:EB:64:18:2B:AB:F0:6F
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial: 0718
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number: 0710
Signing time: Thu 16 Jul 2026 22:30:04 +0000
Manifest this update: Thu 16 Jul 2026 22:30:04 +0000
Manifest next update: Thu 23 Jul 2026 22:30:04 +0000
Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: U1WKjMY+mEhirGKSfkkJRyouwrJWUwzVHNZp7rSUBIw=)
2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 22:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816 (0x718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Validity
Not Before: Jul 16 22:30:04 2026 GMT
Not After : Jul 23 22:30:04 2026 GMT
Subject: CN=6a595b6c-25ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:dd:99:96:9c:83:76:7e:19:eb:7e:a0:32:
b1:df:e2:e3:ee:71:fe:bb:7c:8a:82:d3:7a:ae:ef:
8b:14:72:54:a9:d3:97:56:17:3d:61:a9:9e:6a:df:
c2:23:97:75:24:75:ea:3b:18:28:7b:07:e9:73:74:
e8:03:6c:85:99:e8:91:b1:b6:a3:d2:45:56:4d:c9:
eb:e7:f4:eb:3c:aa:2b:10:5a:e4:11:61:6e:29:42:
9b:bd:3c:1b:a7:de:af:9b:d3:f6:8a:f7:11:ff:f1:
1c:04:43:ac:d6:b3:26:5c:2c:2b:f1:c6:f6:58:87:
83:3f:57:5a:ef:ca:52:4e:9d:35:e9:00:a7:2d:22:
a0:08:59:a4:a3:7c:82:4d:90:55:13:92:73:b7:c6:
c7:1d:67:88:78:ca:de:d2:f5:de:a1:83:ba:2c:59:
41:77:b0:10:d5:26:60:aa:7e:53:1f:44:21:69:51:
bd:db:5e:b9:3a:e5:13:3e:f7:0e:12:8a:d1:e1:e2:
5a:29:25:5e:2e:99:38:84:19:59:35:14:f7:26:a0:
26:08:09:9a:06:b3:2b:18:75:92:1f:69:8f:77:d2:
d4:df:ad:b9:6d:d4:74:1f:16:34:78:95:fd:90:fe:
35:ab:85:16:e6:a1:7e:e8:3d:a7:78:37:dd:9f:e6:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6B:EB:2A:E0:5F:0F:70:2A:60:1A:26:3A:EB:64:18:2B:AB:F0:6F
X509v3 Authority Key Identifier:
keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:57:aa:36:0f:48:0a:7e:b2:dd:f0:97:12:fe:bc:62:55:f5:
67:bf:38:54:bf:2f:86:31:0c:10:84:e5:9a:eb:7f:d0:cf:10:
be:df:15:96:75:02:97:72:c1:b1:6e:13:1f:51:31:eb:e6:1a:
28:ea:cd:78:13:91:b5:66:fa:62:7b:06:38:66:51:91:1b:dd:
31:fc:b5:45:78:f4:71:6a:b2:db:4b:11:1e:fb:b5:45:ff:73:
e2:33:de:18:8c:5f:23:01:30:86:89:43:86:f7:3b:0d:ed:a4:
46:ed:5f:fe:c3:4d:c6:03:a8:01:4b:0b:e3:82:f2:3a:b4:da:
d6:14:88:fe:28:77:0d:a2:27:c9:18:06:46:6a:02:5f:ef:33:
af:5a:08:52:fb:91:c0:d6:3d:9e:d8:b2:10:bb:0d:3e:58:2c:
b8:fb:93:bd:9c:76:9d:71:49:99:b7:65:fd:e0:ca:0b:c0:9a:
fc:05:62:d9:6c:f4:f4:ac:08:7e:29:57:d9:24:d9:5b:7f:35:
4e:22:6d:fe:60:1c:93:95:4f:6d:3a:ba:8f:2a:82:2e:4c:cf:
12:92:cb:a9:82:5a:af:69:f2:cc:a9:3d:28:3f:06:09:09:c3:
e4:31:f9:49:0e:72:0f:dc:86:2a:a3:40:b3:f1:d8:19:87:ae:
8d:40:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:42:10 2026 by rpki-client