
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json)
Hash identifier: PVPn0IjMm750c2JNncpPPV/RrJDH/oRrofbxX58qfZk=
Subject key identifier: B4:4D:50:9C:01:1F:CE:C2:CA:63:F3:47:05:54:A0:A0:B7:8E:CD:BA
Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43
Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43
Certificate serial: 0451
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
Manifest number: 044A
Signing time: Thu 21 May 2026 00:17:57 +0000
Manifest this update: Thu 21 May 2026 00:17:56 +0000
Manifest next update: Thu 28 May 2026 00:17:56 +0000
Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: 2nYH7qldnhi2DUXbAbSnUBRRbV8InOU12X1E1VBEvbY=)
2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: AIiAPtcEdSGDtm5Xu/SA/2I+9nLKM1Ar3r+Ob3EnuAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl
rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1105 (0x451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43
Validity
Not Before: May 21 00:17:56 2026 GMT
Not After : May 28 00:17:56 2026 GMT
Subject: CN=6a0e4f34-5b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:65:d3:3b:40:d0:60:0e:4b:c1:23:98:41:
cf:c4:45:28:a3:48:82:2c:96:a7:44:9a:8c:92:d4:
51:4c:70:42:47:68:14:5d:a5:a1:1e:a0:59:cd:20:
fc:d1:a1:45:99:4b:4f:67:ba:34:1c:ab:59:41:4f:
b1:14:af:28:d1:af:ca:cd:88:2d:c5:dc:fa:fc:78:
27:2a:f7:a2:2e:b9:45:6d:fc:93:c6:42:45:90:b7:
0f:c7:0a:ea:a3:5e:83:0a:2d:24:02:24:fe:50:01:
26:a5:dd:9b:ad:1e:fe:48:9a:45:93:45:4e:ba:09:
49:a0:65:c4:92:7b:65:a1:4a:d5:71:d8:f2:3e:ff:
26:c3:1e:22:d2:43:af:04:1d:22:67:9f:60:af:fa:
c1:d2:70:68:90:63:31:82:a5:74:c0:22:6d:75:c9:
23:3b:59:01:e1:e7:db:06:a7:14:81:f4:5e:9c:40:
ee:a0:cc:05:1e:16:f5:0c:83:c2:37:83:44:f3:d7:
c2:c3:2b:7e:34:0b:c8:83:d5:3d:61:6b:84:c5:1b:
b6:d3:44:4d:a5:36:0c:9a:32:cb:59:9f:62:ee:55:
c7:e1:a7:cd:7d:41:ce:a4:39:4f:80:27:45:d3:cd:
b9:18:75:bf:7e:cc:54:6e:39:a2:2a:65:f7:d6:98:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:50:9C:01:1F:CE:C2:CA:63:F3:47:05:54:A0:A0:B7:8E:CD:BA
X509v3 Authority Key Identifier:
keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:86:42:9b:de:17:90:08:84:8b:d1:30:e1:a1:59:e5:80:13:
de:eb:af:b2:c9:f1:7d:10:74:71:3e:74:da:66:93:aa:f2:d0:
2c:9c:35:18:84:2d:29:3e:2a:15:61:ec:65:ab:57:00:23:e2:
68:6f:3b:27:41:9d:f5:c9:40:d4:a2:de:39:e0:cb:1b:a0:cc:
11:c5:ac:57:9e:fd:1f:98:39:b0:76:30:eb:1c:02:0f:d6:d3:
de:63:5b:14:e8:ab:b3:ba:79:ef:6b:d8:13:8f:f8:58:8b:df:
92:f6:94:28:61:ab:f9:94:55:17:9e:c6:6f:b8:0c:ff:c2:ae:
61:3b:37:a1:84:12:3f:29:f8:61:da:8a:eb:f6:65:3a:c1:ac:
3e:8e:69:ba:d5:7e:11:30:e2:71:d4:c4:10:6d:36:6a:52:8e:
28:41:cb:9a:8d:8a:83:9a:0d:60:0d:a9:bc:68:79:9a:32:3a:
4d:75:c0:11:95:9b:93:51:66:9a:b7:12:33:68:06:a1:64:f6:
e7:38:70:ac:73:39:5d:59:63:1a:84:94:5f:78:c3:a5:6d:72:
3c:ef:8c:ce:f3:fb:aa:ee:2b:d4:36:b6:c1:73:f8:8e:f9:dd:
59:0d:8b:f0:c4:dc:2e:76:52:db:9f:63:cf:86:43:bb:31:d2:
59:a3:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:03 2026 by rpki-client