
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
File: NjEWXebubQcy5I-6Klzn3KjUA3w.mft (raw, json)
Hash identifier: SO/4Lko6zXPMLh0yVFVEMy2hxzKV0mlSI/NhACtgbHw=
Subject key identifier: 04:D7:E6:7A:D1:18:4E:C2:9C:C3:32:8D:D4:07:A5:C7:3D:DE:86:16
Authority key identifier: 36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C
Certificate issuer: /CN=A913BBCF/serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
Manifest number: 1C
Signing time: Thu 03 Sep 2026 09:10:11 +0000
Manifest this update: Thu 03 Sep 2026 09:10:10 +0000
Manifest next update: Thu 10 Sep 2026 09:10:10 +0000
Files and hashes: 1: NjEWXebubQcy5I-6Klzn3KjUA3w.crl (hash: UyaSnCHhWnbXzPGsqQ4+GBakIIiQu9xMzC++MrVGx0s=)
2: A8386F1880BA11F199241D7E93A30FBC.roa (hash: X3b6yFfF3a4hrZ2AmVdCmz6pbLFnZ96Z+2HaXzQujlk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.crl
rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BBCF, serialNumber=3631165DE6EE6D0732E48FBA2A5CE7DCA8D4037C
Validity
Not Before: Sep 3 09:10:10 2026 GMT
Not After : Sep 10 09:10:10 2026 GMT
Subject: CN=6a993972-bb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:c4:0d:e5:e0:44:52:cd:12:78:c2:5b:d0:
38:d3:4d:41:13:ac:a6:aa:ed:28:2c:cd:f2:77:cf:
48:f6:d2:bf:57:3f:1f:a7:72:fc:53:b2:8c:f1:1e:
6e:7c:b9:70:52:82:b6:44:07:a0:82:eb:74:ae:e7:
db:01:95:d0:19:6d:dd:60:f6:0a:27:ba:6f:bd:8c:
99:e1:2f:bc:44:66:d2:2e:b7:0d:29:0c:3e:d4:d9:
39:d9:48:a7:dd:9a:d6:c3:03:c6:c2:01:dc:71:b1:
57:28:40:d2:cf:9a:1a:9d:6a:5f:db:2e:87:6e:64:
4b:c6:14:56:c8:72:4c:3b:98:ab:da:12:04:70:f8:
ed:8e:9e:10:c7:c9:53:6e:65:c0:1a:87:c2:d1:74:
1b:15:e6:4e:02:fc:71:57:f1:0d:79:96:e9:59:75:
66:41:88:c5:35:c6:ac:00:53:5e:e1:1d:92:75:a2:
55:37:bb:86:54:88:9b:da:1d:92:2a:af:1f:b2:9c:
d1:4d:87:15:3a:5f:3f:1c:b0:05:78:82:bf:13:67:
b3:7c:64:49:60:47:73:83:8e:ad:d4:af:ea:73:3c:
09:42:38:86:f7:35:e2:dd:de:39:8e:c6:d5:bf:14:
b1:e4:b2:f7:df:e0:18:dc:6f:0a:29:7e:86:e2:d7:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D7:E6:7A:D1:18:4E:C2:9C:C3:32:8D:D4:07:A5:C7:3D:DE:86:16
X509v3 Authority Key Identifier:
keyid:36:31:16:5D:E6:EE:6D:07:32:E4:8F:BA:2A:5C:E7:DC:A8:D4:03:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjEWXebubQcy5I-6Klzn3KjUA3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBCF/0E308A2280BA11F1B541E84693A30FBC/NjEWXebubQcy5I-6Klzn3KjUA3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:76:ce:24:55:b4:08:32:c4:9b:3a:ad:ba:03:7b:e2:dd:2c:
e5:0f:38:a6:ef:51:89:f5:60:c5:e9:1e:a4:b3:6d:05:74:42:
af:24:88:bc:b2:bb:9e:4d:5f:21:d6:3e:a7:9f:a5:cf:74:ea:
23:e4:b7:83:e0:44:f3:60:da:00:7d:e2:de:9f:4c:27:b6:c6:
44:3a:ba:0e:80:01:d5:0b:f6:21:fc:b1:f1:36:22:ec:51:72:
fd:a9:18:b9:fc:cd:49:2e:fa:1d:d0:7f:a7:4e:5c:9b:71:f4:
96:83:95:b2:b7:f1:29:6b:02:68:f1:37:97:67:66:74:3d:25:
64:b1:8c:42:fd:ff:93:b6:30:86:8c:59:83:8b:8c:92:49:9a:
18:cc:89:26:a6:64:0e:86:da:5f:e0:5f:88:84:08:60:11:05:
a6:92:31:c1:e5:aa:60:0c:54:ed:7e:68:99:1b:3c:3c:e0:34:
18:c2:63:bd:b9:7b:dc:57:2e:e5:65:c2:97:77:65:04:fb:45:
6f:50:8d:c7:42:b5:47:b5:60:41:c9:71:30:92:a9:48:6d:d9:
78:68:54:47:0c:c2:f4:b6:a4:1f:f5:54:c1:b2:9b:7a:b8:31:
01:6c:93:ed:62:44:84:f6:fd:4a:15:f9:20:56:ad:2c:c3:62:
2c:bd:88:e5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QkJDRjExMC8GA1UEBRMoMzYzMTE2NURFNkVFNkQwNzMyRTQ4RkJBMkE1Q0U3RENB
OEQ0MDM3QzAeFw0yNjA5MDMwOTEwMTBaFw0yNjA5MTAwOTEwMTBaMBgxFjAUBgNV
BAMTDTZhOTkzOTcyLWJiNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8SMQN5eBEUs0SeMJb0DjTTUETrKaq7SgszfJ3z0j20r9XPx+ncvxTsozxHm58
uXBSgrZEB6CC63Su59sBldAZbd1g9gonum+9jJnhL7xEZtIutw0pDD7U2TnZSKfd
mtbDA8bCAdxxsVcoQNLPmhqdal/bLoduZEvGFFbIckw7mKvaEgRw+O2OnhDHyVNu
ZcAah8LRdBsV5k4C/HFX8Q15lulZdWZBiMU1xqwAU17hHZJ1olU3u4ZUiJvaHZIq
rx+ynNFNhxU6Xz8csAV4gr8TZ7N8ZElgR3ODjq3Ur+pzPAlCOIb3NeLd3jmOxtW/
FLHksvff4Bjcbwopfobi11mBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBNfmetEY
TsKcwzKN1Aelxz3ehhYwHwYDVR0jBBgwFoAUNjEWXebubQcy5I+6Klzn3KjUA3ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCQkNGLzBFMzA4QTIyODBC
QTExRjFCNTQxRTg0NjkzQTMwRkJDL05qRVdYZWJ1YlFjeTVJLTZLbHpuM0tqVUEz
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTmpFV1hlYnViUWN5NUktNktsem4zS2pVQTN3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC
QkNGLzBFMzA4QTIyODBCQTExRjFCNTQxRTg0NjkzQTMwRkJDL05qRVdYZWJ1YlFj
eTVJLTZLbHpuM0tqVUEzdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBQds4kVbQIMsSbOq26A3vi3SzlDzim71GJ9WDF6R6ks20FdEKvJIi8srueTV8h
1j6nn6XPdOoj5LeD4ETzYNoAfeLen0wntsZEOroOgAHVC/Yh/LHxNiLsUXL9qRi5
/M1JLvod0H+nTlybcfSWg5Wyt/EpawJo8TeXZ2Z0PSVksYxC/f+TtjCGjFmDi4yS
SZoYzIkmpmQOhtpf4F+IhAhgEQWmkjHB5apgDFTtfmiZGzw84DQYwmO9uXvcVy7l
ZcKXd2UE+0VvUI3HQrVHtWBByXEwkqlIbdl4aFRHDML0tqQf9VTBspt6uDEBbJPt
YkSE9v1KFfkgVq0sw2IsvYjl
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:20:47 2026 by rpki-client