
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File: 1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier: NhHuLoePxpA9L2+IlZcfzutEl5vAvVjhU+3BqDxhJVA=
Subject key identifier: 2A:EE:9C:BE:1F:08:E4:C8:B4:16:D7:02:F0:DF:F1:C9:E4:CB:6F:E0
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial: 09B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number: 097E
Signing time: Wed 26 Aug 2026 19:59:52 +0000
Manifest this update: Wed 26 Aug 2026 19:59:52 +0000
Manifest next update: Wed 02 Sep 2026 19:59:52 +0000
Files and hashes: 1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: ihpB/Mg/MdgZG/AOFVfXUs+QzhGy/bn0g1/rVURCEc4=)
2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: 5dm2GJppnwQLxyI+/KHCtnHpzvdwIeBlG+Uq2+xIBLk=)
3: F814A546C01411EA912AC365C4F9AE02.roa (hash: Oa+XnWmZj8lxQOoLBB41DoIKtq0PD+QvaiWHN0dWav0=)
4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: UWr4jClnskvEkH2pyPlCLtQv8iZhDdQZrPSFj3GjKQU=)
5: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: svm3b+FOjudEmEh2mFcFyLkRp8VLD/CgHWYS2Xs5k8k=)
6: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: h0YLWYdnVREKaC12vkuCYnG4Bbp86dz3rIXpiR27EcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 19:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481 (0x9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Validity
Not Before: Aug 26 19:59:52 2026 GMT
Not After : Sep 2 19:59:52 2026 GMT
Subject: CN=6a8f45b8-636a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:18:69:bb:55:ae:1d:d0:0e:fc:8c:43:13:
4b:0b:2e:6f:04:c5:05:2d:71:69:ce:39:b4:37:f2:
5a:86:b3:e2:ae:80:7a:95:da:b7:d6:09:03:32:47:
30:6a:0f:f8:bf:c3:7a:e3:33:17:4b:75:06:f4:c4:
34:71:b8:d8:62:eb:fd:2a:19:5a:a0:13:e6:7e:cd:
5d:0e:af:2b:c9:d3:ab:61:f3:64:5a:8f:65:f8:56:
58:12:18:4a:32:11:e3:2c:b0:9b:a8:73:f1:2f:0c:
7f:67:b6:36:53:2a:cf:35:99:2a:d6:99:1b:cd:15:
48:99:23:69:8b:58:c5:d2:07:82:31:a2:c2:e5:2d:
8d:db:39:1e:e6:b8:4a:fc:ba:be:08:84:dd:21:5f:
fa:dc:ee:84:5e:a8:cf:ca:06:11:6e:18:99:72:c0:
56:9c:12:82:7c:44:03:33:38:6f:42:65:a5:3c:91:
53:7c:e8:6a:f8:aa:25:e2:22:19:f1:e1:fa:19:27:
cf:bb:cb:39:10:e9:4e:06:06:08:3c:04:b6:25:44:
55:68:2f:af:91:b6:d2:21:95:5f:52:f5:c8:97:c9:
06:23:1f:3d:ef:8e:80:46:06:a5:38:ef:db:5c:47:
60:64:22:5e:04:d1:b9:22:8e:15:99:63:d1:44:e5:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:9C:BE:1F:08:E4:C8:B4:16:D7:02:F0:DF:F1:C9:E4:CB:6F:E0
X509v3 Authority Key Identifier:
keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:9d:3c:92:99:42:28:4d:97:01:00:18:b6:11:f7:34:89:a7:
36:8c:cf:a1:fa:1e:19:8f:c7:f8:d3:01:03:75:23:8c:21:b2:
76:f8:6d:97:cd:0e:89:7d:dc:23:82:d8:ee:a8:b0:a8:4f:78:
14:31:a6:f3:d1:5b:d6:7c:58:25:e7:a3:3d:73:e8:11:ee:5e:
8d:d1:0a:70:a3:b9:4c:3a:e4:f4:21:84:7c:28:b3:44:d2:6c:
1f:fe:98:74:40:83:df:c3:da:e0:28:54:0e:8a:a8:8a:f0:8d:
3d:72:d4:d3:c8:7d:17:e8:7a:cb:bc:97:59:68:40:3e:07:a9:
ac:78:ab:1c:b9:8e:7c:f1:01:94:02:c6:81:fc:94:19:b0:e4:
0c:ce:04:a1:64:19:8b:d5:29:69:b5:70:52:c1:a6:e3:e1:45:
4d:0d:9b:17:7e:9b:46:f0:03:0d:80:c7:d7:1e:b7:af:8b:48:
62:6e:d6:f2:65:0e:b2:7c:cb:13:5c:cd:03:ed:e1:24:3b:50:
24:3e:d4:cb:85:a6:d8:de:4a:af:14:ec:35:ee:40:46:dd:58:
ef:6c:18:28:a6:bd:b8:e7:d5:ab:db:aa:08:3a:7c:73:21:62:
88:85:93:4c:e3:63:d5:7b:3a:da:0b:a7:99:e4:5d:e6:08:df:
90:99:a0:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw
REE2NTJERTQwHhcNMjYwODI2MTk1OTUyWhcNMjYwOTAyMTk1OTUyWjAYMRYwFAYD
VQQDEw02YThmNDViOC02MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtGwYabtVrh3QDvyMQxNLCy5vBMUFLXFpzjm0N/JahrPiroB6ldq31gkDMkcw
ag/4v8N64zMXS3UG9MQ0cbjYYuv9KhlaoBPmfs1dDq8rydOrYfNkWo9l+FZYEhhK
MhHjLLCbqHPxLwx/Z7Y2UyrPNZkq1pkbzRVImSNpi1jF0geCMaLC5S2N2zke5rhK
/Lq+CITdIV/63O6EXqjPygYRbhiZcsBWnBKCfEQDMzhvQmWlPJFTfOhq+Kol4iIZ
8eH6GSfPu8s5EOlOBgYIPAS2JURVaC+vkbbSIZVfUvXIl8kGIx89746ARgalOO/b
XEdgZCJeBNG5Io4VmWPRROUDAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCrunL4f
COTItBbXAvDf8cnky2/gMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw
MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2
bFZUUE5TMlRLX2dOcGxMZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzZ08kplCKE2XAQAYthH3NImnNozPofoeGY/H+NMBA3UjjCGydvhtl80OiX3c
I4LY7qiwqE94FDGm89Fb1nxYJeejPXPoEe5ejdEKcKO5TDrk9CGEfCizRNJsH/6Y
dECD38Pa4ChUDoqoivCNPXLU08h9F+h6y7yXWWhAPgeprHirHLmOfPEBlALGgfyU
GbDkDM4EoWQZi9UpabVwUsGm4+FFTQ2bF36bRvADDYDH1x63r4tIYm7W8mUOsnzL
E1zNA+3hJDtQJD7Uy4Wm2N5KrxTsNe5ARt1Y72wYKKa9uOfVq9uqCDp8cyFiiIWT
TONj1Xs62gunmeRd5gjfkJmgWg==
-----END CERTIFICATE-----
Generated at Fri Aug 28 17:28:39 2026 by rpki-client