
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier: yt2DJ0I9bo6cK5jMO+2S+BPvmdOxNk62DD/ndrqy4Ck=
Subject key identifier: 6B:D1:D4:18:4A:4B:17:48:0D:3D:A3:C7:28:1F:D6:4C:13:7B:0D:FF
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial: 1E9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number: 1E8D
Signing time: Sat 04 Apr 2026 15:59:07 +0000
Manifest this update: Sat 04 Apr 2026 15:59:06 +0000
Manifest next update: Sat 11 Apr 2026 15:59:06 +0000
Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: HIODw9YChDyZSrOJ6IQWvRH4DAj+rezwbU96wlUtem0=)
2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: eCYFvmibmPBlkZfZuVIvvu3GZJAAha/tKB/Zp7DAtUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7837 (0x1e9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Validity
Not Before: Apr 4 15:59:06 2026 GMT
Not After : Apr 11 15:59:06 2026 GMT
Subject: CN=69d1354b-c153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:5f:a0:c5:c4:39:d9:2a:5c:4c:5c:ba:24:
3f:dd:62:7d:6c:82:d5:2f:16:e2:18:78:43:06:0b:
1f:4e:47:ed:b0:f8:f2:1d:16:67:e4:11:7b:47:1d:
81:c0:6a:e9:c1:08:f2:0a:b2:5d:9a:ad:08:72:18:
7e:c9:70:43:e4:f1:0c:a6:38:9c:77:85:cc:17:47:
e2:d6:a4:3d:8e:e3:3e:db:23:c4:5c:cb:d4:f5:99:
80:76:fb:c5:ee:d6:f4:43:54:48:59:a1:89:e5:1b:
f9:0a:24:cb:5c:1e:3a:f0:31:56:70:bb:b1:f1:29:
af:16:38:8e:98:5c:b5:7a:98:33:2e:85:2e:0c:e4:
29:11:69:1d:87:38:20:7e:da:99:bd:3d:8b:99:8e:
3a:26:91:89:1b:e7:d0:4e:9b:6b:64:32:5c:ea:58:
34:24:a9:5a:27:85:64:a1:7d:9d:0a:5e:cf:92:1b:
3d:6e:ad:4d:0a:eb:73:48:55:dc:a3:e6:68:aa:7f:
97:d3:76:c6:ec:f8:b3:02:4d:cb:16:2d:cd:f5:6d:
39:7d:ca:23:5a:b1:70:98:c2:85:cb:33:21:ad:9f:
29:f4:89:fb:64:17:56:bf:63:b0:0b:7b:10:63:02:
03:26:64:75:c9:9c:f1:c9:d9:2d:1e:76:6a:81:26:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:D4:18:4A:4B:17:48:0D:3D:A3:C7:28:1F:D6:4C:13:7B:0D:FF
X509v3 Authority Key Identifier:
keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:62:5c:77:9e:c3:86:a2:c5:5d:c7:f3:e7:7f:20:6d:5e:77:
bc:de:ca:89:c0:5d:78:bc:b7:b4:1e:3d:b5:63:87:49:5b:07:
1d:16:3b:f0:9b:92:60:95:17:04:fd:87:4c:25:38:25:b1:df:
32:16:71:79:cd:03:72:9a:1c:8f:c4:4e:78:cb:48:6a:1d:48:
0b:7c:aa:75:c3:6a:a8:ab:b4:30:eb:43:7b:eb:22:74:e5:75:
6f:d0:e4:7d:57:f5:3a:20:f3:a1:2f:6e:00:cb:5b:87:67:57:
ee:82:d7:ea:ba:10:ad:93:a9:dd:b1:6e:4c:c7:c2:26:a2:49:
5b:f8:58:3c:42:ca:11:59:72:a4:b6:4b:36:35:a3:cb:82:15:
79:32:6e:11:45:36:87:4c:4b:44:df:5a:d7:89:8a:1e:c4:aa:
f5:8a:85:2c:78:cb:46:86:27:f4:3a:e9:01:6b:4e:45:85:15:
08:a3:b2:f4:ee:04:4c:e4:4b:bc:5a:ec:a6:23:34:b3:87:c0:
07:a5:53:74:d8:14:82:4b:31:e3:d2:2d:ac:b7:36:9e:e1:55:
80:05:5a:a4:6b:c0:52:67:de:86:a9:79:62:32:1c:01:55:51:
39:9b:1d:84:b5:a0:f6:a0:6d:03:47:b3:28:d7:a8:3e:e0:dc:
bc:ca:98:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4
NDQyMzY2NzkwHhcNMjYwNDA0MTU1OTA2WhcNMjYwNDExMTU1OTA2WjAYMRYwFAYD
VQQDEw02OWQxMzU0Yi1jMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4RfoMXEOdkqXExcuiQ/3WJ9bILVLxbiGHhDBgsfTkftsPjyHRZn5BF7Rx2B
wGrpwQjyCrJdmq0Ichh+yXBD5PEMpjicd4XMF0fi1qQ9juM+2yPEXMvU9ZmAdvvF
7tb0Q1RIWaGJ5Rv5CiTLXB468DFWcLux8SmvFjiOmFy1epgzLoUuDOQpEWkdhzgg
ftqZvT2LmY46JpGJG+fQTptrZDJc6lg0JKlaJ4VkoX2dCl7Pkhs9bq1NCutzSFXc
o+Zoqn+X03bG7PizAk3LFi3N9W05fcojWrFwmMKFyzMhrZ8p9In7ZBdWv2OwC3sQ
YwIDJmR1yZzxydktHnZqgSYs1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvR1BhK
SxdIDT2jxygf1kwTew3/MB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG
NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm
MjRUZU8ybVBaMjZFUWpabmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACWJcd57DhqLFXcfz538gbV53vN7KicBdeLy3tB49tWOHSVsHHRY78JuSYJUX
BP2HTCU4JbHfMhZxec0Dcpocj8ROeMtIah1IC3yqdcNqqKu0MOtDe+sidOV1b9Dk
fVf1OiDzoS9uAMtbh2dX7oLX6roQrZOp3bFuTMfCJqJJW/hYPELKEVlypLZLNjWj
y4IVeTJuEUU2h0xLRN9a14mKHsSq9YqFLHjLRoYn9DrpAWtORYUVCKOy9O4ETORL
vFrspiM0s4fAB6VTdNgUgksx49ItrLc2nuFVgAVapGvAUmfehql5YjIcAVVROZsd
hLWg9qBtA0ezKNeoPuDcvMqYww==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:54:24 2026 by rpki-client