
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AB2B/52C39F9C672111F18DD248217647A888/n5khc6A-LOqaA_wbzEsgpAOCPls.mft
File: n5khc6A-LOqaA_wbzEsgpAOCPls.mft (raw, json)
Hash identifier: BOd1lY76MJ/wR2LxWi2k4O4Nt7ho5mTU9HR9jUcqOgs=
Subject key identifier: 17:6C:2A:11:B9:7A:D9:55:13:39:11:4F:03:A9:BC:53:ED:9B:30:40
Authority key identifier: 9F:99:21:73:A0:3E:2C:EA:9A:03:FC:1B:CC:4B:20:A4:03:82:3E:5B
Certificate issuer: /CN=A913AB2B/serialNumber=9F992173A03E2CEA9A03FC1BCC4B20A403823E5B
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5khc6A-LOqaA_wbzEsgpAOCPls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AB2B/52C39F9C672111F18DD248217647A888/n5khc6A-LOqaA_wbzEsgpAOCPls.mft
Manifest number: 2B
Signing time: Thu 03 Sep 2026 08:59:21 +0000
Manifest this update: Thu 03 Sep 2026 08:59:21 +0000
Manifest next update: Thu 10 Sep 2026 08:59:21 +0000
Files and hashes: 1: n5khc6A-LOqaA_wbzEsgpAOCPls.crl (hash: QbYB4DCJYRiqMfiXqDbwHk+WKvwb4zTIlDdqlXEPqwo=)
2: C98F6BF6672111F1933C10877647A888.roa (hash: 8mVlUUIMuM+88BsSEsllhfFTepGTMzUkmhkzow32dJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AB2B/52C39F9C672111F18DD248217647A888/n5khc6A-LOqaA_wbzEsgpAOCPls.crl
rsync://rpki.apnic.net/member_repository/A913AB2B/52C39F9C672111F18DD248217647A888/n5khc6A-LOqaA_wbzEsgpAOCPls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5khc6A-LOqaA_wbzEsgpAOCPls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AB2B, serialNumber=9F992173A03E2CEA9A03FC1BCC4B20A403823E5B
Validity
Not Before: Sep 3 08:59:21 2026 GMT
Not After : Sep 10 08:59:21 2026 GMT
Subject: CN=6a9936e9-49e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:77:c4:e6:60:83:67:ce:5a:96:ee:88:47:
6d:bb:ef:b2:90:05:a5:c4:ba:87:0a:b6:07:f8:ed:
63:9e:d7:c3:de:8e:13:c2:74:88:13:f6:46:af:f6:
9f:d1:fd:05:8c:86:f7:54:f6:02:e6:b5:79:b1:5d:
e5:0f:dd:49:f2:78:f9:de:f4:b3:65:4f:b2:e1:a3:
f1:1f:bd:80:91:52:75:11:8c:13:2e:62:88:47:40:
3d:00:23:0d:d1:7d:13:a2:0e:57:0d:63:da:cd:ac:
81:10:28:f1:e2:3a:fa:75:6f:3e:40:d5:86:07:ac:
db:75:f4:6e:f8:67:17:94:30:56:eb:17:f9:9e:d3:
f2:c1:42:1b:68:db:62:81:ab:87:9c:32:84:d1:66:
7f:3a:ac:f2:c1:f2:29:71:e4:e6:e5:0e:22:2a:f3:
3e:d4:fa:03:ca:a8:7f:70:9d:79:8f:30:ae:e8:9c:
98:59:9b:77:3f:76:c9:df:5e:82:d0:10:b4:56:9c:
42:a2:3a:37:0c:65:d8:0f:72:68:d4:ce:d7:c6:78:
df:01:a7:0e:7d:01:00:d5:30:92:30:7d:c4:a2:01:
71:76:c0:c4:f7:f3:64:a2:3e:4f:f2:c9:49:61:3d:
7e:eb:d3:3e:50:da:bb:74:ad:4f:b1:79:cb:6f:df:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:2A:11:B9:7A:D9:55:13:39:11:4F:03:A9:BC:53:ED:9B:30:40
X509v3 Authority Key Identifier:
keyid:9F:99:21:73:A0:3E:2C:EA:9A:03:FC:1B:CC:4B:20:A4:03:82:3E:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AB2B/52C39F9C672111F18DD248217647A888/n5khc6A-LOqaA_wbzEsgpAOCPls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5khc6A-LOqaA_wbzEsgpAOCPls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AB2B/52C39F9C672111F18DD248217647A888/n5khc6A-LOqaA_wbzEsgpAOCPls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:d6:e4:57:16:f8:c5:8a:f4:04:99:d4:c7:50:7d:4f:fe:
c7:4d:67:19:1b:0f:3f:61:01:a3:2b:85:3b:03:f7:88:49:87:
a5:ad:5b:0c:4e:d3:d8:cc:9b:bf:c0:a2:e6:41:88:24:31:25:
8c:32:21:56:40:2a:d3:8d:82:64:e1:82:3c:21:2e:d8:d8:57:
3f:20:1e:5f:d9:28:6e:72:09:cb:f4:e9:6b:02:e9:28:84:46:
5d:c0:dc:6f:0a:32:18:2e:ce:a9:d9:67:72:34:2c:f3:8f:4c:
65:b1:81:a5:69:5f:49:b8:e8:ae:52:6e:9e:9f:89:1e:b7:11:
2e:4d:4b:5b:6f:c1:50:c2:5a:3f:be:8e:4e:9f:95:83:cf:08:
cc:dc:aa:d7:9f:dc:cb:34:30:57:f9:03:3f:7f:e2:e9:a7:fb:
be:87:f4:48:3d:e7:ac:c3:1b:91:7e:a2:76:e9:27:83:c5:09:
54:32:9f:eb:ef:c6:92:5a:95:b9:28:54:1a:95:f0:6c:a4:7e:
95:a1:fc:b5:94:e0:27:92:d7:2c:33:58:01:1d:9d:83:e5:c6:
8b:08:b5:7a:fe:5e:24:d6:97:5d:d6:7f:84:e7:b1:9b:65:5a:
2e:84:49:af:db:d7:a3:ee:94:bd:94:3d:fb:02:c3:ce:1e:fb:
da:37:b1:4b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QUIyQjExMC8GA1UEBRMoOUY5OTIxNzNBMDNFMkNFQTlBMDNGQzFCQ0M0QjIwQTQw
MzgyM0U1QjAeFw0yNjA5MDMwODU5MjFaFw0yNjA5MTAwODU5MjFaMBgxFjAUBgNV
BAMTDTZhOTkzNmU5LTQ5ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcL3fE5mCDZ85alu6IR22777KQBaXEuocKtgf47WOe18PejhPCdIgT9kav9p/R
/QWMhvdU9gLmtXmxXeUP3UnyePne9LNlT7Lho/EfvYCRUnURjBMuYohHQD0AIw3R
fROiDlcNY9rNrIEQKPHiOvp1bz5A1YYHrNt19G74ZxeUMFbrF/me0/LBQhto22KB
q4ecMoTRZn86rPLB8ilx5OblDiIq8z7U+gPKqH9wnXmPMK7onJhZm3c/dsnfXoLQ
ELRWnEKiOjcMZdgPcmjUztfGeN8Bpw59AQDVMJIwfcSiAXF2wMT382SiPk/yyUlh
PX7r0z5Q2rt0rU+xectv31N3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF2wqEbl6
2VUTORFPA6m8U+2bMEAwHwYDVR0jBBgwFoAUn5khc6A+LOqaA/wbzEsgpAOCPlsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBQjJCLzUyQzM5RjlDNjcy
MTExRjE4REQyNDgyMTc2NDdBODg4L241a2hjNkEtTE9xYUFfd2J6RXNncEFPQ1Bs
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbjVraGM2QS1MT3FhQV93YnpFc2dwQU9DUGxzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB
QjJCLzUyQzM5RjlDNjcyMTExRjE4REQyNDgyMTc2NDdBODg4L241a2hjNkEtTE9x
YUFfd2J6RXNncEFPQ1Bscy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAyn9bkVxb4xYr0BJnUx1B9T/7HTWcZGw8/YQGjK4U7A/eISYelrVsMTtPYzJu/
wKLmQYgkMSWMMiFWQCrTjYJk4YI8IS7Y2Fc/IB5f2ShucgnL9OlrAukohEZdwNxv
CjIYLs6p2WdyNCzzj0xlsYGlaV9JuOiuUm6en4ketxEuTUtbb8FQwlo/vo5On5WD
zwjM3KrXn9zLNDBX+QM/f+Lpp/u+h/RIPeeswxuRfqJ26SeDxQlUMp/r78aSWpW5
KFQalfBspH6Vofy1lOAnktcsM1gBHZ2D5caLCLV6/l4k1pdd1n+E57GbZVouhEmv
29ej7pS9lD37AsPOHvvaN7FL
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:21:58 2026 by rpki-client