
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json)
Hash identifier: 91uS70VWNtkwUySb4XMsqdMzlPAiqKVCJZcPwDLXG8s=
Subject key identifier: 91:04:3F:76:89:EB:20:C7:F5:07:C7:9C:90:5E:6A:B6:55:9E:3B:C5
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
Manifest number: 54
Signing time: Thu 16 Jul 2026 16:24:53 +0000
Manifest this update: Thu 16 Jul 2026 16:24:52 +0000
Manifest next update: Thu 23 Jul 2026 16:24:52 +0000
Files and hashes: 1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: B26Zx8Kin0DLB0U/WBn19aJe/vPNcA7cybe1J32LGWo=)
2: 2D89A3B4139A11F182E65A043E3D8C67.roa (hash: 6rniMe/YVWGY7c5EcQQMPJgDsNhBjwIFHtLtGoYlhn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 16:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Validity
Not Before: Jul 16 16:24:52 2026 GMT
Not After : Jul 23 16:24:52 2026 GMT
Subject: CN=6a5905d5-5713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:b2:1c:84:7a:4d:42:4e:7a:d7:62:3b:86:
79:92:a4:c5:d8:5f:8f:14:f3:0e:a5:fb:4a:5a:11:
c4:63:80:36:86:a9:58:aa:e4:9e:2a:e0:f4:72:3f:
76:4d:7d:de:c4:83:96:de:62:a4:3f:4a:6b:1e:dd:
3c:67:5a:0c:07:9c:cd:a0:6f:b0:11:88:8f:e5:cb:
b5:12:2a:1e:87:3d:ae:b4:e0:2a:70:dd:8a:09:9a:
00:71:1b:30:73:43:4b:26:03:d1:1a:65:dd:53:73:
f3:ca:af:ea:cf:8e:2d:30:bb:da:d2:6b:34:71:ec:
23:70:52:a1:3b:ba:44:c1:39:c8:e3:d0:b5:fd:62:
98:91:89:e6:bf:03:07:fa:88:2c:06:fe:10:ea:30:
e5:36:bd:2f:6a:3e:00:99:3b:d7:b4:46:75:45:ab:
27:9a:b1:f4:a9:d3:9f:32:90:65:cf:7a:50:d4:da:
2e:74:9a:f2:3a:28:58:7f:f6:60:f7:6b:f2:40:cc:
24:28:af:0c:6d:b0:5c:58:d8:67:9a:28:97:bc:61:
ad:44:94:8a:43:99:16:22:e9:56:e4:d4:4e:1e:7a:
e1:87:cc:38:ab:5b:45:27:04:0c:24:61:f8:2b:ad:
8f:4f:39:70:8c:99:b9:d5:2e:7c:88:c2:05:3c:54:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:04:3F:76:89:EB:20:C7:F5:07:C7:9C:90:5E:6A:B6:55:9E:3B:C5
X509v3 Authority Key Identifier:
keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:5b:74:63:35:2e:24:a9:55:92:17:4e:7a:38:86:38:46:b6:
83:8d:ce:43:53:1c:69:91:9c:30:2c:8f:8e:5c:20:5b:ac:d0:
23:88:5e:86:a9:42:e6:d9:37:84:99:b2:9e:f9:0c:da:7b:65:
e5:29:ba:0c:27:1f:15:d0:b8:09:f0:7c:fb:79:e3:fb:86:37:
25:84:8c:ce:99:eb:1a:c6:e4:f0:58:a3:24:43:39:a6:9a:cc:
21:fb:75:9d:5d:5f:a0:e0:93:03:d2:28:b5:f0:1b:ba:6d:cc:
f5:c8:67:6c:40:27:27:37:74:cf:84:b2:f2:44:ed:07:fd:7d:
8f:22:01:42:30:cd:d3:77:2d:e7:cc:90:69:7a:21:e1:be:3f:
cc:f3:e2:24:f1:f2:c5:6f:ac:74:39:d1:68:bf:4f:6b:81:83:
a9:7c:99:8f:b8:42:be:8e:38:4e:87:69:1b:ef:ad:18:f4:dd:
6f:7a:46:94:d0:a6:37:75:f8:7d:4b:b0:6f:f1:58:ac:d3:74:
18:88:57:09:45:73:5d:47:d7:46:ce:7d:e2:5c:b9:4d:81:9c:
d5:f7:df:32:e5:ea:5f:bc:db:ab:4d:2e:52:f2:aa:96:70:73:
cc:9b:08:1c:d8:b8:e4:c5:4e:b6:db:93:09:46:79:a3:da:dd:
83:4a:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:54 2026 by rpki-client