
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier: fvLsj9lNtLnuc3htpCDs6Py8ZAbSE0ZPNqPTCjSWbp0=
Subject key identifier: 80:57:A7:D4:5A:C0:C3:DA:03:64:5C:B7:11:F2:42:51:1F:45:19:98
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial: 1EEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number: 1EDA
Signing time: Wed 26 Aug 2026 16:00:27 +0000
Manifest this update: Wed 26 Aug 2026 16:00:26 +0000
Manifest next update: Wed 02 Sep 2026 16:00:26 +0000
Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: xoBrLl2fvQyGbGoaGR9DyV6OeXpE62kcpIH7k7kdA3w=)
2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: OwaX0UG7/hJcFPCKxkwtoBgH6ACvrE1k7J8ZbYuydvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7916 (0x1eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Validity
Not Before: Aug 26 16:00:26 2026 GMT
Not After : Sep 2 16:00:26 2026 GMT
Subject: CN=6a8f0d9b-5e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:26:64:e1:10:83:62:9d:e1:bf:7a:b7:44:
79:a5:ed:94:c1:d0:9f:33:20:c3:ac:6f:f6:c3:f5:
d9:46:25:a2:1b:cc:72:e2:46:93:96:e2:bf:4e:8a:
7b:de:3c:e2:d7:75:1a:7c:25:36:0b:be:54:73:19:
75:c4:5b:1f:9e:51:b5:4b:2c:5d:b7:fe:b4:f5:33:
15:49:d3:98:63:ba:b7:6e:ac:67:20:2e:83:50:38:
b9:bb:2e:0b:80:71:d2:5a:94:25:2a:0c:d6:c6:90:
4a:6e:67:bd:29:97:fe:78:d1:b8:b2:51:c3:3b:d5:
8c:f2:a6:ac:6a:d4:67:d4:24:dc:09:4d:f2:87:64:
50:cd:4e:fc:5b:02:49:e0:d0:49:f6:68:b5:1d:b2:
22:72:f1:b4:0c:14:b3:d9:b1:cc:26:d3:eb:02:b1:
0d:cf:f1:6b:9e:ce:0a:d1:7f:c5:a5:98:14:85:40:
fc:51:cc:cf:0f:e0:58:6f:b7:e9:f0:b5:47:e5:2b:
5c:f4:d3:27:86:ef:93:3a:05:11:a2:31:eb:74:56:
37:97:b0:46:14:36:e3:f2:87:b1:32:15:07:f4:50:
e5:89:7c:47:34:53:df:e5:b7:22:40:35:a7:3c:94:
93:1b:6e:fd:e8:b7:ac:50:4a:7c:2a:23:33:a5:ab:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:57:A7:D4:5A:C0:C3:DA:03:64:5C:B7:11:F2:42:51:1F:45:19:98
X509v3 Authority Key Identifier:
keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e6:76:8b:ea:c5:70:ce:b6:de:61:3d:ac:a6:d0:5d:50:e4:
03:09:92:62:e3:48:98:12:d9:cc:e2:a3:3f:07:34:8b:43:b3:
94:d5:c6:53:e9:20:04:23:67:33:84:f7:6a:fd:7f:f5:14:c6:
f0:6c:45:96:e2:d1:a6:92:74:a0:09:73:f8:d2:ed:2c:ca:02:
26:28:f2:af:46:18:87:1e:8b:17:6c:b0:d7:b2:e8:1f:cc:75:
19:c3:60:06:21:71:5e:81:c1:b9:5d:6a:c6:f5:fb:b7:c3:8b:
62:78:9f:ae:4d:5a:c3:39:80:bb:02:aa:93:5b:1b:cc:be:2d:
ed:62:73:60:61:fe:57:ab:5a:48:3a:c0:a4:22:ee:76:61:a8:
ce:1c:29:aa:eb:fb:c8:3d:9b:4d:c8:8c:84:dd:7b:cb:e5:0b:
2f:9d:25:0e:35:cc:8f:9a:32:43:2e:51:8d:75:4a:5e:3d:4d:
43:9c:5c:ae:4a:e3:fa:82:eb:94:84:2c:a6:b4:35:60:2d:0c:
88:70:4e:5a:da:02:40:64:9a:62:96:95:aa:bd:18:ea:8d:d9:
8c:5a:93:58:6a:ae:5f:f2:36:63:92:bc:01:18:5d:4b:1b:22:
ec:e0:87:a8:6c:87:ec:6c:45:91:88:3f:7b:5f:36:fa:b1:55:
c1:50:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:07:46 2026 by rpki-client