
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json)
Hash identifier: gVp8cTGQrCIi7TSmmUGEZo5MzCRIHFP6qPlZuHd4UeI=
Subject key identifier: FE:21:CC:91:BA:F5:D2:86:11:EF:93:0D:DD:9F:06:86:E4:2A:17:56
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial: 049A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
Manifest number: 047F
Signing time: Mon 20 Apr 2026 23:59:04 +0000
Manifest this update: Mon 20 Apr 2026 23:59:04 +0000
Manifest next update: Mon 27 Apr 2026 23:59:04 +0000
Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: lYxVXknH4RLZXyw7BzLBS/KpnRlDHk3LoSAPuvKHzeE=)
2: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: Pmqjaf05ZJypDFe8YtfZZnEUHZ02b2LTX1bmYry5Vhw=)
3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: rB0rGnSozJU8NojAc45M//byk+WcellFqqyoYGAw7jI=)
4: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: T3sBWx7WsASIvXJipD/8/WgUdUsv5wiiZndfgeUi8xY=)
5: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: HLjD7Dlj4QNO0JkX6mdLipIuyOmY6BPG8xeaEhp4ZP8=)
6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: CKul+kVwMWY4jLfuuuUbRh3TQkde1chI2jW7GmtTDpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Validity
Not Before: Apr 20 23:59:04 2026 GMT
Not After : Apr 27 23:59:04 2026 GMT
Subject: CN=69e6bdc8-f3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:2c:6a:21:46:48:99:fb:b7:8c:51:4d:a8:
4e:b9:c2:ca:f4:cf:35:c5:c2:8f:9e:d3:4b:c1:fc:
4d:c9:77:39:fb:f4:35:d9:51:f3:be:86:07:fb:af:
59:83:73:45:76:33:59:b2:81:8e:78:24:47:e3:75:
05:31:ad:6f:1c:5d:1e:ba:b2:db:28:04:17:e8:51:
f5:73:9b:56:e1:3e:7b:62:13:9e:3d:5c:c3:d9:43:
a1:58:3b:fe:aa:02:02:f7:74:23:c9:cc:22:0a:c2:
0a:54:7d:a9:59:5c:fc:68:93:fc:0b:08:62:be:54:
17:a4:87:0f:2d:46:d3:92:74:06:08:7d:e3:6c:01:
e1:1a:1a:43:44:81:90:72:e4:96:cb:66:49:61:38:
d1:5e:6f:de:a1:34:41:9e:5f:97:e2:5b:f1:53:99:
91:4a:61:0d:55:76:17:19:aa:5e:11:6c:9f:d5:f0:
8c:50:f9:8d:f4:dc:96:2a:82:fb:3c:76:f5:e3:22:
9e:80:f0:56:8a:64:79:23:c5:37:36:28:04:6f:b8:
b4:24:fc:9b:f2:d4:65:15:99:84:b7:a4:43:fa:45:
44:3a:01:d4:59:11:a7:c6:3a:2f:49:74:39:f0:2c:
8a:e8:35:90:e4:ec:3c:bc:49:64:96:4f:5a:df:ba:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:CC:91:BA:F5:D2:86:11:EF:93:0D:DD:9F:06:86:E4:2A:17:56
X509v3 Authority Key Identifier:
keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:de:a3:a5:28:aa:af:89:4f:db:44:aa:8b:ab:f6:1c:3f:72:
42:5e:db:df:8a:b5:72:32:ba:89:6f:36:55:c3:45:4b:0b:80:
1f:d5:5d:cd:e1:bd:90:7a:e6:59:a2:05:50:17:64:ba:45:d4:
7e:85:bf:a9:0c:d0:0f:64:a3:6c:cd:56:52:7b:78:f7:a2:80:
c2:00:37:89:97:24:70:35:05:fa:1f:b7:35:0a:48:f0:1e:a2:
19:9f:dd:4d:b5:49:24:c8:15:d6:99:76:21:8d:f7:ac:89:27:
8b:c9:d1:06:d5:15:23:1d:ee:dd:f2:c5:69:45:fe:4d:89:4e:
6f:0a:20:4b:0e:ec:5f:1a:e2:7b:48:96:cd:bf:46:24:48:cc:
5e:1f:14:b5:4c:f2:9e:f9:0e:97:4e:38:8e:8d:c8:c3:9e:e6:
2d:de:50:95:df:23:f2:3c:f3:4f:32:e9:1d:7f:01:68:7e:12:
06:36:6f:e4:dc:dd:4e:a3:38:80:5f:4e:e2:a3:64:de:bf:6b:
ba:f8:df:1a:14:a8:0b:61:a3:de:14:38:18:35:67:20:df:d1:
03:a0:ff:57:88:8c:e3:52:59:74:7c:51:04:6a:a9:ce:6e:73:
33:df:21:5d:8f:82:67:50:1f:61:94:9b:4c:3c:73:cd:8a:47:
ba:e3:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:28:22 2026 by rpki-client