
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier: 8wnh06qFDvuAgYL3zz5048DmDumSEcQQhINuR4m6vn4=
Subject key identifier: 8E:00:48:6A:70:B4:C3:F8:46:C2:06:CD:D6:30:58:C8:0E:72:6F:C6
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial: 0B80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number: 0B77
Signing time: Tue 02 Jun 2026 19:09:14 +0000
Manifest this update: Tue 02 Jun 2026 19:09:14 +0000
Manifest next update: Tue 09 Jun 2026 19:09:14 +0000
Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: vQA/9W34QrNZFa0Hh87YVxv1Wu8cNE8RwodRgALhGts=)
2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: sh5UH2ZBn9wBTa697FDn0y/l7y45xFGnVGbIE4BxV4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2944 (0xb80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
Validity
Not Before: Jun 2 19:09:14 2026 GMT
Not After : Jun 9 19:09:14 2026 GMT
Subject: CN=6a1f2a5a-91d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:10:da:99:f5:e9:e8:a7:37:06:ab:4a:2c:
f3:e8:df:69:7c:d7:4d:8f:c3:f4:85:16:29:2e:79:
a0:56:91:f3:9f:5b:8d:89:dd:84:e5:f6:76:cb:7c:
6c:6c:65:27:19:b3:29:a3:99:7e:59:1a:a4:dd:07:
ca:bf:4d:44:6b:c7:04:3f:81:d4:f2:98:f0:07:d7:
4b:ae:95:ca:68:76:2c:ae:5a:f8:05:e7:ca:d5:00:
e9:fb:4a:c7:f0:60:c1:a9:d1:c1:4e:93:3f:95:c0:
f9:50:6b:b2:f2:c4:52:1d:05:ae:ec:f3:d9:91:f3:
89:07:8c:8d:5a:e9:83:8e:f2:d6:3c:fb:c2:82:e7:
01:eb:f8:10:c8:d0:90:be:a6:87:89:b8:23:d6:13:
96:43:6b:42:3b:2b:33:dc:07:4f:44:d3:17:a3:12:
75:47:07:a2:b9:db:07:07:32:9d:e0:de:87:42:60:
d0:e3:f0:1a:da:a8:ee:3f:fc:a2:bb:a9:05:8c:62:
ce:77:22:42:f3:0e:49:e5:47:9c:f9:03:ae:df:3b:
4e:59:90:74:9b:b0:f5:97:b6:98:4a:b2:3b:1c:a5:
59:a0:b3:ba:1e:35:b8:e8:92:e6:3a:e1:1d:e7:3f:
99:8b:c1:4f:0c:fd:3d:d0:8f:6e:84:69:4a:bc:ee:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:00:48:6A:70:B4:C3:F8:46:C2:06:CD:D6:30:58:C8:0E:72:6F:C6
X509v3 Authority Key Identifier:
keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:eb:77:29:ae:b7:2a:c8:65:fe:0c:8c:e1:35:bb:1a:81:8a:
c9:7d:65:ea:1a:35:7a:ac:dd:41:39:9b:9c:c6:ca:ac:a4:69:
5c:f1:5d:e7:a5:d7:f5:ce:51:46:80:de:8b:3c:76:a6:b1:ff:
ea:66:ba:79:c2:5a:9e:f5:c3:15:85:ad:cd:b4:79:cb:82:d2:
62:60:5a:71:a7:e5:27:fd:39:74:15:f2:5d:ef:1b:23:7b:d2:
d8:51:04:43:9b:b0:87:9c:ef:c9:cf:d3:d2:fe:90:09:62:ff:
25:14:ac:6f:08:5f:6c:31:4e:38:d4:8d:de:3a:80:ce:50:8b:
ba:d3:29:00:0a:ed:88:54:b6:de:86:ef:8e:f4:d7:39:17:29:
de:6c:6b:14:be:e0:5d:30:a3:f9:b7:5e:45:3f:6a:83:8a:a9:
0b:e9:55:fc:4a:06:fd:32:ba:73:04:a7:af:db:3a:d8:d6:6c:
85:8b:7b:d0:9c:1c:ee:d1:07:24:5b:cc:ef:ce:c4:ec:dd:d6:
05:8a:d9:1f:40:79:08:ae:a2:2a:68:3a:d8:7b:45:84:84:25:
5c:20:04:4b:9c:43:ae:85:99:55:e8:28:01:6f:1e:42:33:9d:
95:ea:1f:c6:c7:0e:ac:ab:df:41:24:b7:37:3f:05:34:e2:5f:
1a:b4:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:44:00 2026 by rpki-client