
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
File: NuogEr2z5hGaWu-_Zs7rOLWTHek.mft (raw, json)
Hash identifier: JILsEQeha9BQ6OVAfEsvR3mObDzo3JoodYzPkN6a5eU=
Subject key identifier: BA:C8:30:33:29:7E:B0:00:28:8B:BA:06:E3:1E:1B:7B:09:81:B8:03
Authority key identifier: 36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9
Certificate issuer: /CN=A914BE8E/serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
Manifest number: 4E
Signing time: Tue 19 May 2026 08:09:58 +0000
Manifest this update: Tue 19 May 2026 08:09:57 +0000
Manifest next update: Tue 26 May 2026 08:09:57 +0000
Files and hashes: 1: NuogEr2z5hGaWu-_Zs7rOLWTHek.crl (hash: 95QncjXc7WeUC92Z8yAGa18VAUqxdgC4W53zjg3kgjc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl
rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE8E, serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9
Validity
Not Before: May 19 08:09:57 2026 GMT
Not After : May 26 08:09:57 2026 GMT
Subject: CN=6a0c1ad6-79de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:da:09:5a:5b:fd:96:88:e6:43:7a:2d:ba:
18:b7:5c:b9:c2:da:e6:dc:d4:3a:1e:53:8b:24:bb:
d8:61:7e:45:d1:f6:d9:25:a0:16:5a:de:9c:07:f6:
c1:a8:01:5e:86:27:d1:7d:10:0d:74:04:b4:ef:28:
a3:6a:47:b7:ef:e2:65:77:dc:01:30:c3:65:2f:b9:
56:bf:4f:2f:29:67:f9:02:79:b5:dd:4b:97:14:3f:
b6:fb:33:38:52:de:0b:20:05:0f:5a:83:1b:e9:5b:
e9:2c:b9:20:ba:dd:0b:98:d6:5c:2d:6a:0d:15:b8:
4e:b6:48:c3:0b:ef:1c:49:e0:fb:19:c4:82:61:42:
83:c3:6e:9a:38:5f:dc:54:cd:cb:d9:f8:53:7c:ab:
23:9d:0e:d7:ff:27:94:c8:11:c2:bb:f8:bb:a2:36:
7f:87:a8:cc:36:91:42:8b:95:47:ff:60:f3:d9:78:
99:ec:ae:e0:45:f6:f7:46:60:be:63:3b:15:a8:95:
e6:7d:2c:6d:57:3f:da:85:1b:ef:38:e0:4c:56:42:
f3:47:42:ae:64:a8:51:f5:3f:b7:cf:56:21:f6:a3:
26:ad:00:1d:05:8d:28:53:3e:d3:41:15:6b:ed:f2:
c9:2c:57:9d:4f:62:a0:e2:d5:a6:00:30:dc:61:1b:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C8:30:33:29:7E:B0:00:28:8B:BA:06:E3:1E:1B:7B:09:81:B8:03
X509v3 Authority Key Identifier:
keyid:36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1a:da:61:9e:66:7c:af:70:21:7d:d2:ae:52:02:26:e2:c5:
0c:28:33:7f:af:aa:96:76:56:9e:f3:11:77:2e:63:3f:b6:fb:
c0:5c:9d:a8:a4:34:47:1d:77:d9:55:8e:6f:a2:e8:da:fa:4d:
87:e4:21:60:cd:a1:f3:09:25:6b:41:8a:f4:14:db:bb:2b:93:
f1:c9:d6:84:a5:92:6d:10:63:13:33:f0:dc:a7:4d:34:c5:b7:
8b:87:59:00:67:81:fc:ee:ae:f7:29:a9:7a:ab:10:c7:c5:1a:
1b:f6:17:eb:03:de:66:f1:cc:f4:4a:8d:ab:9c:40:2f:a9:02:
95:db:c9:5b:cc:2c:71:3b:b2:a3:93:ae:7c:ea:17:84:c1:97:
b0:fe:1c:b0:b2:8f:95:97:75:dc:70:0e:7e:ea:09:88:61:f4:
b1:03:0c:c0:41:2a:94:55:f2:64:72:84:b0:14:3a:bb:15:77:
6b:93:bf:56:99:12:b3:df:0b:1f:6e:17:3d:d9:af:7b:b4:bb:
1a:35:8e:e2:62:90:1b:fd:4e:67:c2:46:d7:e2:95:08:b2:03:
bd:ab:56:9d:9a:41:aa:fb:b2:04:57:5e:fb:08:85:3a:0b:82:
86:f5:b6:72:26:d9:75:49:38:9a:e9:60:f7:ba:c7:29:a3:6a:
05:3d:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:46 2026 by rpki-client