
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
File: NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json)
Hash identifier: DB6QX39Ro9b4k1xjC2EY8zrKtgKcr1W9o+SmkqSqJfE=
Subject key identifier: 97:33:5C:84:1C:FD:3E:5A:EE:EA:57:D4:A4:53:6A:C0:07:1F:68:6F
Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
Certificate issuer: /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
Manifest number: 53
Signing time: Thu 21 May 2026 08:24:54 +0000
Manifest this update: Thu 21 May 2026 08:24:53 +0000
Manifest next update: Thu 28 May 2026 08:24:53 +0000
Files and hashes: 1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: ZMJ0BKJ45Ok+vD+qiz2mzAnuDO2BmklGdw0WIPim/Ow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Validity
Not Before: May 21 08:24:53 2026 GMT
Not After : May 28 08:24:53 2026 GMT
Subject: CN=6a0ec156-add3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:35:f5:36:5e:f5:8d:3d:76:21:57:f6:82:
fd:b0:19:d8:ee:60:40:a0:25:3a:2e:60:df:25:ea:
90:5b:75:9a:3b:42:a0:a2:0a:3a:78:8d:69:83:35:
99:18:80:ed:9d:5d:3c:34:e2:3a:a6:fb:9f:cc:ba:
11:25:ca:82:70:68:d0:ff:fe:7d:66:38:ba:a3:ed:
a6:d3:b1:06:d3:58:6b:45:96:c4:ab:99:db:ad:17:
fc:83:ee:50:d3:a7:a0:a1:a0:2d:ad:56:2d:5a:2b:
8c:67:27:6b:e3:97:06:c2:75:d5:44:f1:5e:d1:00:
c5:be:16:b1:5d:ce:5e:49:a3:06:22:c3:c4:5a:5a:
4b:fa:10:1d:2d:bf:96:63:3f:d1:45:88:3b:06:b1:
18:b8:4f:f2:f3:50:f1:c6:c1:ed:9a:3c:1a:97:76:
09:4e:02:3b:63:a6:9d:38:44:28:d8:13:db:2b:79:
d3:7d:5f:22:d7:ce:2a:26:30:2c:f4:a1:93:0c:d1:
92:df:56:bc:98:c4:b2:e8:80:ec:53:71:dd:50:cc:
96:f6:be:54:02:f4:b1:f0:3c:a3:50:12:85:94:4d:
cb:25:63:ae:d3:0e:24:5c:ed:4a:e9:0c:d0:fc:84:
57:2f:69:29:a5:f9:1d:31:4f:a2:94:62:3c:6b:ff:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:33:5C:84:1C:FD:3E:5A:EE:EA:57:D4:A4:53:6A:C0:07:1F:68:6F
X509v3 Authority Key Identifier:
keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:bf:b2:e1:66:66:e2:2b:02:4f:52:3f:06:61:40:49:5d:25:
b5:b6:30:1a:ee:d8:e2:cf:bc:76:f9:0b:1a:36:20:b7:25:ff:
4a:f1:e0:2d:fd:37:b6:ef:ed:32:48:77:b2:34:a2:66:dc:60:
26:bb:c3:2e:39:07:fa:4c:4b:8d:ef:3a:b2:70:c5:98:c2:f0:
7f:7d:a1:e5:b8:ac:8b:18:5d:a1:e0:1f:80:e4:f3:0b:58:6d:
2a:df:60:75:2d:c5:73:fa:07:eb:91:ae:14:a7:13:8c:31:92:
21:61:e4:22:ee:b6:1f:0d:ca:41:a9:9a:33:99:61:72:fb:72:
13:3d:cb:a9:bf:73:87:99:99:15:18:1a:be:3c:49:b7:67:df:
65:1b:b8:32:c0:e0:7c:ee:6a:66:ff:79:5b:cf:90:c7:86:4e:
7c:51:72:1f:11:63:71:ab:91:f0:27:fa:d9:24:6b:34:87:5b:
e8:17:a6:46:1f:b8:9a:19:37:3d:01:f6:6b:a1:f1:cc:b7:36:
25:88:6b:91:fc:32:e8:32:02:80:db:5a:e0:21:04:74:9e:81:
58:e3:ee:2c:16:24:7b:da:a1:22:c5:1b:61:cf:11:15:84:75:
88:fa:d3:b1:21:59:17:3d:75:39:30:35:b6:a1:71:e9:3c:36:
3a:04:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:22 2026 by rpki-client