
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier: DaCdx9Gwhnn32FcJmzUpXcze5cN2YFSIFrgwBoTUsoI=
Subject key identifier: E7:1B:DC:38:E4:41:83:23:6A:65:C2:37:01:A3:EB:D9:12:66:94:BB
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number: 06F3
Signing time: Wed 20 May 2026 22:10:59 +0000
Manifest this update: Wed 20 May 2026 22:10:58 +0000
Manifest next update: Wed 27 May 2026 22:10:58 +0000
Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: 56JOn0fzoEqz4IobzNS38mQAkZkOc/O6tP2Q6ckdMBc=)
2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Validity
Not Before: May 20 22:10:58 2026 GMT
Not After : May 27 22:10:58 2026 GMT
Subject: CN=6a0e3173-4fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:2a:d5:89:a4:35:8e:83:3d:34:16:46:d0:
b2:45:7d:67:02:f4:21:ad:be:91:a8:ae:e5:0b:7a:
f3:0a:cc:21:ec:26:a7:1e:73:f3:54:92:55:a4:82:
99:65:f7:3a:9b:90:5a:e7:aa:61:e5:92:13:8b:6e:
a3:92:5e:1c:60:ab:0a:57:4d:d6:a3:a0:44:be:42:
c8:c8:4d:2b:07:d1:68:5b:9c:89:1c:1b:d7:d8:2c:
f4:d4:41:f0:60:ef:75:e9:2b:b0:ac:e1:2c:2b:4c:
aa:b5:8d:69:68:58:19:c7:fc:d7:76:f0:8b:63:0f:
ff:83:25:18:0f:22:45:77:91:18:5d:43:b9:fd:20:
9b:53:6a:7c:ba:23:25:4a:26:68:4c:bf:f7:9f:84:
d4:20:2a:d9:45:24:b3:35:04:dc:e6:98:38:0c:40:
b0:b8:16:d2:5e:e8:2f:dc:e2:55:15:d5:48:28:82:
f5:f0:8a:62:1b:5d:2d:b6:27:ac:ac:76:ee:1c:3c:
68:01:3d:bf:20:84:f5:ba:60:c4:0f:dc:47:51:25:
d7:ee:75:62:ef:e0:af:92:5c:16:9b:54:06:0d:fd:
f6:ea:27:a5:68:db:d1:ab:07:9f:cd:59:cd:66:02:
66:67:aa:75:32:a8:f7:26:33:e5:de:48:b8:70:32:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1B:DC:38:E4:41:83:23:6A:65:C2:37:01:A3:EB:D9:12:66:94:BB
X509v3 Authority Key Identifier:
keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8a:3e:21:a2:09:26:a5:7f:8d:08:58:32:21:9c:a2:e6:bf:
04:3d:f2:b6:27:f7:39:b5:ca:27:d6:e7:81:6d:da:8d:e9:f7:
c7:eb:f9:a8:a3:42:bc:ba:d0:bd:7f:e8:2a:20:b2:38:e5:81:
94:6b:52:fd:57:fa:5a:a0:f1:da:7a:42:f7:27:83:36:f6:52:
7d:7f:f8:0b:5b:e3:4c:80:6c:de:12:81:04:66:16:cc:a2:53:
21:a1:cb:ee:e8:5e:18:dc:59:a4:0a:f7:47:20:20:ed:30:e7:
05:08:71:3b:0e:2a:8b:ba:62:a0:43:8c:8e:c2:61:a5:12:7a:
5d:3b:0c:a2:45:a6:9e:62:ad:c0:f5:5f:08:29:79:2d:19:ad:
55:78:f7:af:1f:08:e4:3a:f1:6b:2c:3a:ed:29:63:a9:4c:06:
04:3b:b9:f2:67:49:ca:7f:02:6e:37:45:a2:b6:6a:a2:ef:23:
15:78:79:4e:3f:db:dd:cd:4c:9d:c7:f0:5b:5d:10:27:96:6d:
76:4a:a3:75:16:cb:4d:f2:1f:c6:ca:40:c0:7a:7f:a3:1f:9a:
61:c3:16:f3:73:b8:00:d0:97:07:45:41:8e:13:be:b4:55:d7:
02:96:cf:31:b2:69:18:c3:df:59:3c:ff:4e:ed:e3:a9:e9:da:
33:3e:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:26:01 2026 by rpki-client