
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json)
Hash identifier: f8ZYJz7Ff+tJQQ9uq7L6c3jijLPbziG7mAa+GX74wb4=
Subject key identifier: 43:1D:6E:7D:B0:55:72:01:49:AF:C3:37:9E:7D:8C:46:2A:39:02:22
Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43
Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43
Certificate serial: 049C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
Manifest number: 0494
Signing time: Fri 09 Oct 2026 00:09:03 +0000
Manifest this update: Fri 09 Oct 2026 00:09:03 +0000
Manifest next update: Fri 16 Oct 2026 00:09:03 +0000
Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: c00BgTcXny2HBKbpFx35m+FzIsks0ZZWLN/qN2Gt0uA=)
2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: vm/bISjHKsGuLd0meyNv8HwVVF1AvaGJUeldwZLSTSo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl
rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 00:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180 (0x49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43
Validity
Not Before: Oct 9 00:09:03 2026 GMT
Not After : Oct 16 00:09:03 2026 GMT
Subject: CN=6ac8309f-bf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:13:c2:89:57:f7:e1:71:c6:4d:db:da:1e:
9d:d5:3d:21:78:b7:d1:1a:1b:f7:a2:c4:64:bc:a7:
13:5a:79:59:47:83:5f:c9:e8:cc:a2:66:d8:a6:e4:
7e:b8:b8:48:b6:a4:04:75:27:05:5e:59:33:99:05:
41:1e:62:9e:64:d6:e2:d4:2d:c2:9b:a4:28:62:70:
43:bf:c2:81:1d:41:b4:1c:41:80:45:a1:22:50:06:
52:5a:67:07:20:fc:72:6c:1a:9a:48:41:24:2d:6a:
28:58:97:d1:a6:80:8b:01:04:4c:e6:49:74:ba:02:
ff:8a:b9:fd:3c:84:5b:34:63:cd:83:e2:80:13:b2:
26:3e:22:5d:f3:a0:4e:5e:a0:7e:ca:10:be:ff:b8:
da:27:6e:f0:f8:20:35:48:7f:43:1f:83:e2:64:ab:
3b:ae:1c:ce:6f:c6:71:c7:5c:d4:98:26:5a:9b:c8:
ff:23:3f:53:30:17:cb:09:ae:66:d1:65:82:8a:95:
8f:27:b8:e6:b0:4f:4e:20:f4:c9:d5:b6:9e:da:dd:
84:d4:09:37:eb:5d:f3:97:34:bf:4c:77:cd:64:e0:
26:18:a5:f9:a9:45:cb:55:1d:1e:39:6b:4e:2e:91:
5e:34:fe:fa:40:c8:1c:e8:b0:f9:23:f5:ec:fd:4d:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:6E:7D:B0:55:72:01:49:AF:C3:37:9E:7D:8C:46:2A:39:02:22
X509v3 Authority Key Identifier:
keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a9:1f:bc:e4:b6:8f:20:a9:e7:b2:00:af:da:5c:15:1e:d7:
de:7e:0f:90:39:44:16:f5:33:24:0a:3f:54:79:45:d7:2c:8b:
a7:66:a3:4c:85:e9:cf:39:71:3f:c9:a1:03:d7:6a:75:52:14:
69:5b:12:74:a0:3c:fd:92:a2:18:a0:2e:06:b2:55:64:09:bd:
f3:51:c1:97:be:48:74:32:28:3b:f9:7b:be:2a:58:f5:06:d2:
bd:e5:8c:01:29:a3:32:d5:b6:44:0d:bb:b8:e4:8e:ea:6c:c0:
70:1b:d5:5e:71:60:37:b1:f4:d0:44:a3:8c:0e:f4:94:3d:5e:
36:db:e4:04:da:5a:34:49:a5:9f:86:ba:20:15:2e:ae:b1:87:
8d:dd:bc:19:34:76:39:11:a0:7d:6a:88:ef:38:d2:d2:3c:e3:
d9:b4:d7:12:ef:fe:46:dc:35:a7:0a:5a:0b:9a:b2:02:43:2f:
d7:2f:c9:36:ba:ca:87:f6:f1:c6:b3:85:af:1c:d9:b6:86:8d:
47:19:14:01:19:ab:e4:bc:b0:dd:ef:eb:41:48:60:b4:77:ab:
32:11:7c:68:e1:cc:cb:f6:a0:4f:d6:80:52:c6:67:34:f2:e3:
79:75:cc:b3:13:a9:be:90:3c:34:b0:66:cb:7c:51:7c:fc:64:
5d:79:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 15:32:13 2026 by rpki-client