
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
File: NuogEr2z5hGaWu-_Zs7rOLWTHek.mft (raw, json)
Hash identifier: N8tEutjwacMMqY63F2pWgCuFc355AD3Fp+BKK0hy1SE=
Subject key identifier: E4:0A:DB:4B:01:05:AB:3A:C1:83:3A:ED:E8:9A:4F:1D:10:59:AA:82
Authority key identifier: 36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9
Certificate issuer: /CN=A914BE8E/serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
Manifest number: A5
Signing time: Thu 05 Nov 2026 08:13:32 +0000
Manifest this update: Thu 05 Nov 2026 08:13:32 +0000
Manifest next update: Thu 12 Nov 2026 08:13:32 +0000
Files and hashes: 1: NuogEr2z5hGaWu-_Zs7rOLWTHek.crl (hash: ryjjU6dgM0SuhX3O7Vf+8VPmEOfDP5Iqd0cSgkccIuY=)
2: tE5E0PkBfHVlVOO6PcH2dLYRhBI.asa (hash: YGuI35c5wnKOlIeWJVRZR0sBJzmCUuehkgBmplavslo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl
rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 08:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE8E, serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9
Validity
Not Before: Nov 5 08:13:32 2026 GMT
Not After : Nov 12 08:13:32 2026 GMT
Subject: CN=6aec3aac-c75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:08:3a:fd:27:e9:1e:c7:e4:62:f5:d7:3a:
bf:fc:c7:47:ab:88:b6:29:f0:da:30:73:67:41:d1:
cc:be:8d:7a:f9:ba:ad:0b:83:af:0a:4c:32:5e:3b:
17:72:3c:a6:5b:e4:7f:15:92:b2:5a:45:dd:5c:17:
07:d6:ad:f8:6e:9f:9b:13:49:44:df:b2:f5:69:62:
eb:6a:63:27:d8:ec:4b:29:f1:34:3b:79:eb:7f:7d:
16:7e:22:fe:47:0c:69:eb:e9:8d:72:c9:9d:d5:18:
4c:4f:c1:e6:27:e8:8d:79:d1:0a:c7:5f:a0:10:04:
61:b3:79:15:0b:8e:23:3f:c9:b0:42:b8:33:87:a5:
81:66:03:47:b7:a4:57:ac:3e:84:32:38:1f:c5:58:
71:d7:79:56:32:88:df:cc:87:e7:f3:db:99:78:11:
13:c4:37:1c:99:84:34:d5:92:3b:cd:39:b7:ae:ef:
b0:aa:6f:c8:58:85:b2:a7:26:5f:bc:36:09:fe:6b:
1c:a3:4c:79:cd:b9:ee:39:38:ae:22:25:9b:67:27:
50:c1:9d:64:e1:d8:6b:57:58:b4:c9:49:3e:98:29:
c7:c1:46:85:49:12:44:85:75:d3:1e:30:1b:59:82:
83:86:44:de:fe:2e:22:5e:01:3f:ad:41:e4:cb:e2:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0A:DB:4B:01:05:AB:3A:C1:83:3A:ED:E8:9A:4F:1D:10:59:AA:82
X509v3 Authority Key Identifier:
keyid:36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:88:2e:98:8b:4d:d2:10:f1:7e:df:6d:b7:e5:75:ec:9c:57:
28:fe:88:12:9f:24:ed:33:fa:ec:e3:f5:10:ce:c8:54:a6:d5:
65:8c:b2:79:d0:e1:55:6b:ce:2e:36:16:bb:93:8c:14:d8:92:
c0:4b:2c:ea:8d:40:3e:34:ce:d9:29:06:3a:c8:2c:15:a4:98:
52:6b:62:1a:7d:44:2f:41:7a:04:b1:3a:a9:01:4f:35:bc:41:
b4:fa:9a:75:ae:90:37:1d:dc:46:3b:84:1a:cc:8f:52:65:a8:
13:0e:f1:04:81:5a:b7:42:32:6c:52:59:df:6f:15:18:5f:45:
fd:8f:90:20:aa:94:63:fb:f3:f1:bc:e1:35:93:ab:22:95:f9:
82:e7:dd:ca:42:2d:fe:c9:16:a9:ed:c8:02:25:7b:e6:b5:56:
fc:98:b3:29:0a:89:22:e8:e0:34:a4:8d:c6:18:9b:b2:c4:2d:
d7:13:ab:7c:83:4d:7c:2e:b8:fc:fb:96:a6:26:65:f6:60:6b:
f4:92:df:24:43:12:24:87:a6:5f:31:b8:0f:4b:97:a9:fd:52:
b7:7a:e6:05:b8:a7:a6:e3:94:48:09:6c:ba:23:23:6f:fc:d0:
69:45:bc:6f:9e:25:25:7a:9a:d2:a6:02:74:3f:f0:47:ea:c2:
8b:76:9f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:21:10 2026 by rpki-client