
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json)
Hash identifier: nZEsuXmeY6ubvTpJsIjNqq6/De9t5gtWfQi+VD/Dq28=
Subject key identifier: 43:20:4C:4B:43:C9:E5:48:81:23:39:2C:84:9B:06:2D:51:79:B1:C5
Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Certificate serial: 2B6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
Manifest number: 2B26
Signing time: Thu 16 Jul 2026 15:35:47 +0000
Manifest this update: Thu 16 Jul 2026 15:35:47 +0000
Manifest next update: Thu 23 Jul 2026 15:35:47 +0000
Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: mE0GB8QoNMyFxjaOWYLn73Uz9A8+/a/ck947Zd6UPwI=)
2: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: tDcO3gAeV3vTmIvIAIx8rJ91i0PU7YIxp3dKxE3Ka/Q=)
3: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Mml/GDHtSEelqn0CLVtWVAulYa1xZrTOLXsNy4rC6ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11114 (0x2b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Validity
Not Before: Jul 16 15:35:47 2026 GMT
Not After : Jul 23 15:35:47 2026 GMT
Subject: CN=6a58fa53-4247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:bd:36:d5:27:47:e8:dc:4e:b0:b7:4f:59:
98:da:90:fa:31:2c:39:63:1b:97:66:ff:ac:b1:4c:
43:d9:07:70:49:44:57:cb:0f:e3:9e:73:16:0f:18:
8e:a5:69:01:16:e6:50:17:13:4c:a9:14:f7:c1:07:
6a:ba:d0:03:78:9d:23:7f:1e:c8:76:2b:eb:a1:54:
dd:13:b0:a4:18:53:2f:b3:14:8a:79:3e:12:f4:36:
46:a0:9f:22:64:2a:bd:fe:28:a6:cf:f4:b0:4b:7b:
40:3d:db:77:62:9e:34:9f:fe:a8:b4:4f:1f:f9:70:
c8:32:96:e2:00:69:35:63:58:15:c2:86:3a:da:b5:
fd:d6:06:8f:23:61:2d:89:97:37:c3:06:21:cf:2a:
8a:b3:74:fb:e9:ed:19:24:35:33:9b:08:b4:26:c3:
ac:5d:9e:4a:1b:0b:a8:67:e1:71:0d:66:9c:38:31:
19:be:53:4d:91:49:46:53:45:ec:32:8e:28:b0:1d:
28:2f:71:ef:b5:3b:7a:79:41:ec:63:55:86:c0:5a:
4d:49:bc:db:23:2e:08:a6:53:50:af:11:c3:36:a5:
3d:19:62:15:7a:ac:6e:5a:b7:7e:00:b5:5f:5d:f2:
f5:c5:b3:3b:a6:d5:93:35:ec:3a:48:32:40:5c:f9:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:4C:4B:43:C9:E5:48:81:23:39:2C:84:9B:06:2D:51:79:B1:C5
X509v3 Authority Key Identifier:
keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:11:2a:54:1c:92:17:8b:04:fd:4c:d9:e1:8a:9a:ca:3f:a3:
0d:9f:02:cb:64:c2:24:a1:7a:4d:4e:29:79:a9:87:5b:56:fc:
50:60:10:99:bd:9e:1b:8a:02:3e:ef:8d:b3:af:34:bf:02:1d:
2f:18:dc:d8:3d:89:3f:f5:61:ee:93:f5:db:03:25:55:9d:49:
44:d5:4a:4d:32:67:73:87:90:48:64:aa:20:7e:fb:b5:8a:6e:
4d:b6:e6:14:d4:90:e6:d3:0f:26:5e:ea:7f:b4:92:95:23:d0:
0c:d9:0b:7f:0d:ef:c0:66:5d:d5:f9:ca:78:d7:29:55:f1:a4:
a1:3d:d8:62:ba:d3:bf:63:90:40:0d:42:cb:c4:8d:47:af:37:
ff:e3:55:3c:71:fe:a6:f8:02:50:0d:63:c7:db:9b:05:f0:97:
4a:09:2e:09:32:09:6c:fc:33:69:85:e1:87:52:9b:24:46:5f:
71:5e:b4:7c:bf:fa:fb:91:07:cc:18:f7:d6:7c:14:ff:e6:72:
c8:6d:ab:f1:4c:c9:89:d2:f0:fb:a2:f4:79:fd:89:01:3a:f5:
50:5b:eb:7b:c3:9d:ed:2f:d4:1b:38:5e:91:d8:76:42:b2:65:
62:c0:b8:82:b2:4c:4c:60:c5:12:c8:8b:d0:b3:a1:6b:4e:a5:
e6:34:41:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:13:17 2026 by rpki-client