
$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier: aubdp/kVVqy/3fSy74gaDGnXOmhkiZP5NJ/8tihZjjc=
Subject key identifier: DC:0B:C0:EE:C6:1D:DE:C0:E2:1C:01:73:D1:B2:CF:B3:FC:C3:15:72
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number: 0151
Signing time: Tue 21 Jul 2026 06:42:32 +0000
Manifest this update: Tue 21 Jul 2026 06:42:32 +0000
Manifest next update: Tue 28 Jul 2026 06:42:32 +0000
Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: KdInD6oEg0iHIT9W2o10T1LBNwk5wO2FRbwcPSDXsXQ=)
2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: V872BKoP+6xA+AKHKazK8vltDdfADU0ViwH62hx/F6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 06:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Validity
Not Before: Jul 21 06:42:32 2026 GMT
Not After : Jul 28 06:42:32 2026 GMT
Subject: CN=6a5f14d8-e9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:f5:6b:a7:54:29:e4:bc:bf:52:04:bb:cc:
45:dc:80:d7:30:b9:33:37:48:b9:7e:ec:4b:33:bd:
12:53:67:50:b8:45:49:33:4b:51:98:32:cc:b4:4f:
4a:ec:36:45:60:10:15:f8:16:19:a3:e7:19:7e:22:
7c:51:17:e6:4d:d7:02:56:bb:6d:d1:1a:83:f2:6d:
90:e8:57:ad:b9:43:6a:60:48:a0:f2:45:30:01:eb:
2b:0c:65:b6:1b:94:a6:61:94:53:c5:1c:43:a9:0d:
4e:3c:e6:10:0f:bf:c2:69:96:48:54:d3:8a:7a:f2:
da:f2:99:9f:38:f7:67:36:4f:3f:64:68:87:61:ce:
b0:7f:9a:29:ad:ef:b2:96:4e:8d:b6:aa:14:d0:19:
a2:f9:0e:cc:c6:36:6d:04:93:bc:7a:c9:05:ad:f3:
f3:20:e0:37:91:52:52:56:af:72:da:8a:17:08:18:
3c:18:2f:fb:89:e5:c9:3a:9a:f2:4a:64:15:ce:29:
0b:11:1f:6a:68:98:ca:7c:2f:93:7f:ef:f7:05:b8:
7b:39:fa:8e:e7:ba:f0:42:b8:fe:84:61:ff:e0:02:
79:09:f9:8d:c0:27:47:d6:22:f6:fd:fd:42:99:18:
45:cc:5e:a1:5d:28:9e:31:b4:eb:df:6b:ab:7d:5e:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0B:C0:EE:C6:1D:DE:C0:E2:1C:01:73:D1:B2:CF:B3:FC:C3:15:72
X509v3 Authority Key Identifier:
keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:65:5f:df:0d:db:54:f4:58:58:5e:43:c1:d3:0a:8e:83:0c:
12:d4:a9:bf:5b:f8:1d:33:76:69:7c:22:2a:ae:03:ba:6f:96:
0e:fd:ff:c0:9b:63:18:b9:11:e3:e6:71:0c:72:09:2d:ca:bf:
d3:ff:da:ba:01:41:40:84:f9:aa:7d:b0:04:38:41:9e:bc:f0:
83:d1:0b:5b:85:94:ad:ca:09:44:c9:cc:24:79:ae:4f:b9:31:
5d:0e:8c:96:b3:0d:70:be:e8:c7:d7:fa:b1:9e:72:a0:9b:42:
67:f8:2d:37:6e:ac:80:fa:a6:5e:90:39:4f:e8:06:20:3a:17:
76:e3:f2:43:44:16:e2:7e:57:71:b2:4b:81:17:24:8c:c9:46:
98:c4:84:19:89:5e:41:41:31:a7:ea:e0:4c:04:c4:3e:39:54:
05:b9:bb:82:e2:34:5a:28:74:e9:03:73:95:74:1d:0e:56:07:
c2:e7:ca:d2:5c:3a:35:98:5e:0d:01:27:bc:b2:56:1f:c7:9f:
c3:3f:5e:45:48:5c:f6:d4:d1:08:0a:bf:da:a6:97:c3:8a:1e:
a3:8d:d1:af:a0:09:76:2a:2f:10:77:63:16:ea:e1:99:25:2d:
7a:5d:18:b9:aa:97:52:84:0e:8c:4b:ec:d5:ba:f4:ed:15:63:
eb:8b:8b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:31:02 2026 by rpki-client