
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier: VgozEwdx924IX0vZkBDCLAQTrgchr2z9dfxOl+b+mZg=
Subject key identifier: 6C:40:00:0B:BE:D4:67:65:CB:65:5F:24:BC:C4:C0:A2:10:94:AC:EC
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer: /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial: 090B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number: 08EE
Signing time: Wed 20 May 2026 20:23:41 +0000
Manifest this update: Wed 20 May 2026 20:23:41 +0000
Manifest next update: Wed 27 May 2026 20:23:41 +0000
Files and hashes: 1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: uP4VoLJpxbnDUCgPPS4o6lVNrkccuWbtzOemI1/CZWU=)
2: 56AD05C0D8F711F09DAB56B975D3641D.roa (hash: 6GOomTQthZ+KrQw+RXFQOYpc/6H0zxAQ+hBCBHNginE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Validity
Not Before: May 20 20:23:41 2026 GMT
Not After : May 27 20:23:41 2026 GMT
Subject: CN=6a0e184d-36ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:00:22:78:0a:26:be:47:c0:0c:b4:ca:dc:
32:da:4d:49:fc:b9:7c:ae:94:56:a1:67:cd:21:22:
ac:10:2c:1c:9a:52:05:a5:f4:55:2d:14:0a:37:89:
93:5c:34:7d:63:d0:7c:50:8f:d0:9e:e9:49:43:73:
df:c0:63:d1:34:4a:c0:ac:3e:d0:5b:61:b8:13:dc:
d2:27:d5:a5:f7:de:65:06:2f:a5:db:3e:80:d8:da:
dd:d8:23:c7:ac:2e:6d:8d:86:e1:9c:cb:65:82:67:
77:5d:6f:3b:d8:dc:82:4b:83:69:c0:40:bc:df:ee:
02:26:cf:49:ee:a0:e7:4e:bc:a2:53:2f:20:5d:17:
dd:a3:45:16:26:92:bc:b1:6b:0d:67:48:67:49:5c:
c3:d4:e6:94:33:33:b5:4a:bd:f0:ba:87:3b:c4:b9:
53:8c:80:c3:64:2b:02:26:dc:01:44:dc:aa:6b:f4:
11:e0:27:34:e2:25:4a:53:59:ec:ed:09:42:10:d0:
e1:c1:44:95:9b:1e:35:db:83:57:60:e7:bb:2a:10:
47:3c:b1:d4:cc:ea:79:88:ad:d6:16:1b:c3:9a:a5:
91:77:1e:aa:3b:3d:cd:96:d5:0b:74:13:0c:29:89:
15:dc:4e:10:cc:4b:7f:aa:d5:53:ad:41:c9:04:f5:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:40:00:0B:BE:D4:67:65:CB:65:5F:24:BC:C4:C0:A2:10:94:AC:EC
X509v3 Authority Key Identifier:
keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:db:88:51:e4:f5:70:82:bf:94:f7:16:ec:a9:b7:6d:de:e8:
77:ae:4c:81:73:94:67:1c:77:ef:cd:76:21:69:2f:07:4a:d6:
45:ae:01:b5:54:08:f6:80:c8:4d:ac:38:8d:87:49:4e:16:da:
a2:1c:82:55:94:0a:56:f4:39:fe:be:70:39:dc:89:c2:57:95:
57:c0:83:33:8f:23:19:84:31:55:ba:84:65:21:9a:65:76:ec:
ad:b0:69:59:9d:00:93:69:37:fd:69:c1:89:cd:d4:23:be:44:
ac:73:99:14:15:78:52:93:76:4a:10:ac:ec:2b:48:7c:3e:f0:
02:ff:85:90:d7:50:46:d4:2e:16:71:bb:6e:1e:26:63:c7:74:
8b:63:38:29:1d:34:94:9f:04:d3:26:43:12:dd:71:e9:e0:72:
b1:7c:a9:6c:0c:6f:84:69:75:e5:12:d7:c4:80:ac:be:00:eb:
74:07:c5:ca:cf:9a:db:78:97:a0:5c:47:7b:22:28:f4:c6:a9:
23:f5:fd:c1:16:7c:d2:7d:23:ae:51:9a:ff:06:c3:14:30:90:
69:da:0b:4e:fe:87:79:cf:ae:c7:b8:31:70:82:96:f1:fb:ce:
91:8f:0c:37:91:84:95:dc:d4:32:17:d2:de:e2:e0:b5:79:88:
d3:67:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:22 2026 by rpki-client