
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
File: NItUz_eZZeIbLbq5nyEB4xpWDps.mft (raw, json)
Hash identifier: wGQ9289nDmQmIt4IQ+GEjuJlRqVMJSpG21film5kAns=
Subject key identifier: 65:FD:D3:FE:02:55:A7:D1:AF:41:08:2D:2A:E6:06:B2:FD:EA:7F:E1
Authority key identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B
Certificate issuer: /CN=A9145E01/serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
Manifest number: 87
Signing time: Wed 19 Aug 2026 08:18:14 +0000
Manifest this update: Wed 19 Aug 2026 08:18:14 +0000
Manifest next update: Wed 26 Aug 2026 08:18:14 +0000
Files and hashes: 1: NItUz_eZZeIbLbq5nyEB4xpWDps.crl (hash: 44bTAC4xjAM+ufTtE0plBCDlbMpvYAEOsj3So18j+0A=)
2: 03B7FB8CCF5A11F09B61EF16C4F9AE02.roa (hash: zPwsBxrk2TWYKMwX9feT4glmgUpbLrsFWyQ2jB0oPio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl
rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E01, serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B
Validity
Not Before: Aug 19 08:18:14 2026 GMT
Not After : Aug 26 08:18:14 2026 GMT
Subject: CN=6a8566c6-8324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:73:a5:54:1d:04:91:23:68:19:83:d5:fe:
60:5f:e8:34:bd:16:71:80:67:db:da:bc:8e:34:8d:
09:d0:f2:7c:0d:16:10:20:b8:17:98:ae:9e:b7:04:
6b:51:dd:63:44:dd:76:c0:59:ce:95:28:cf:3f:58:
86:75:7d:91:68:b2:92:d8:98:9b:fa:09:f4:93:aa:
0a:0f:d0:bd:88:e0:52:fc:96:61:87:0d:14:a1:92:
54:b3:54:6e:40:af:01:c2:e9:d5:cf:de:19:6b:9b:
35:9e:c4:62:fc:61:19:55:3f:b6:2a:c6:76:92:e3:
ba:e5:7a:c9:23:1b:49:3d:f7:98:e3:c1:c9:85:18:
09:93:a0:01:17:13:57:ee:8a:02:21:10:08:69:2d:
76:b5:17:30:55:5e:a2:34:b7:a0:7c:bf:d8:37:fd:
a0:cc:4e:98:ec:7d:1c:c5:56:ad:b3:bd:f1:f2:d4:
20:16:04:b0:ae:5a:32:a1:e0:01:13:65:20:98:16:
dd:79:40:73:f0:cb:4e:61:4d:78:50:05:52:e3:fc:
f8:b7:aa:7d:f4:40:1a:68:ef:82:07:f4:b7:4c:69:
dc:af:32:7d:1a:f4:6b:e6:ed:4c:16:1d:35:b8:70:
8c:81:bd:22:89:6f:28:1e:4d:2a:cf:ff:84:98:53:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FD:D3:FE:02:55:A7:D1:AF:41:08:2D:2A:E6:06:B2:FD:EA:7F:E1
X509v3 Authority Key Identifier:
keyid:34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:52:14:91:f1:dd:5e:03:74:cc:08:0b:83:18:df:d9:d6:
e7:fe:de:72:37:ed:51:04:92:11:1b:79:ca:8b:51:aa:53:37:
b2:f3:13:37:ae:f8:cc:97:b3:60:9e:d0:30:7b:85:9c:d6:a7:
ec:71:30:37:86:a5:3c:2b:ef:ca:86:d2:16:c1:7f:38:8e:15:
a3:e6:10:46:18:af:b3:44:c6:f0:fb:44:b9:88:90:3d:08:d0:
3e:56:70:57:e4:6c:e3:bc:e4:17:21:9f:ea:9a:63:05:3d:03:
18:c6:ff:ff:48:86:fe:7d:f3:f0:78:bd:2e:0f:01:35:aa:a2:
9a:1e:ef:69:be:bc:f7:3b:cd:31:df:31:ee:52:44:68:dd:4c:
7f:12:fa:d6:a2:62:e2:62:7c:0b:b9:78:60:15:fe:70:6c:87:
1c:fc:6c:35:df:8b:54:1d:37:f9:0e:fe:8f:cf:ed:bd:9a:ca:
79:db:47:18:14:01:8d:f3:13:f3:34:c6:14:74:8c:a1:9f:e3:
02:43:22:b4:7d:d8:40:b0:0c:2b:3f:b9:33:ad:5e:fa:9e:0e:
2f:de:1e:15:75:d2:89:15:0e:eb:01:d1:df:83:4a:25:dc:91:
a3:6e:fc:d0:63:ec:1c:5a:d6:be:da:73:ac:ca:a7:71:dc:cb:
5e:01:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:56:35 2026 by rpki-client