
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json)
Hash identifier: mj6uL8hHpU9wH8Nrbb5n/ifbxFPYwtHoP515Uyupod4=
Subject key identifier: EE:2E:A0:A5:C7:0A:AC:CD:85:F8:8E:2B:7C:F4:70:2C:A3:4A:C6:71
Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Certificate serial: 09FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
Manifest number: 0AA1
Signing time: Tue 06 Oct 2026 19:56:15 +0000
Manifest this update: Tue 06 Oct 2026 19:56:14 +0000
Manifest next update: Tue 13 Oct 2026 19:56:14 +0000
Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: LcUuF/k4SobmabwRhQxZBRLjs5joynLG4DJgWsFi7AU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2555 (0x9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Validity
Not Before: Oct 6 19:56:14 2026 GMT
Not After : Oct 13 19:56:14 2026 GMT
Subject: CN=6ac5525e-6ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:ec:37:7b:07:af:a8:c2:ad:03:aa:1f:54:
90:03:21:69:b1:d5:e0:56:7f:b6:13:3d:e0:ba:21:
68:40:3f:d8:d0:b0:04:e4:ef:fa:b8:b1:c7:fa:98:
05:62:23:c2:bc:be:7c:1e:10:be:54:7d:4d:6d:34:
b2:7d:01:83:59:5c:79:87:ab:63:92:1b:fa:2d:13:
63:32:09:45:ec:11:ad:9c:3a:0a:2c:cc:0a:4b:a5:
07:5a:ef:33:8a:81:87:30:2d:8d:dd:75:2f:3f:9c:
6a:1d:81:a2:7c:c5:7e:67:1f:a8:95:20:25:24:e4:
19:28:78:0a:ec:ad:a9:bd:66:5b:4e:ea:af:c6:17:
20:6d:b2:cb:b2:64:85:b9:ab:8a:4a:69:22:0a:3f:
96:d0:ca:8d:36:0b:8e:a1:d6:03:c6:48:3f:b6:2b:
5f:f9:da:72:ab:27:24:40:e1:f4:ac:17:ad:1f:b0:
54:89:ba:72:18:bf:2e:93:b3:be:10:64:33:f9:df:
07:26:76:8a:1f:4c:b7:ad:1d:87:e6:c6:0c:cf:17:
bc:b5:8b:ec:7a:62:0d:4e:07:ef:5d:00:c9:bf:bc:
e8:b5:b1:2f:a8:e6:2a:5a:12:c8:b9:5a:42:ff:30:
fd:47:af:59:6b:a9:f7:2e:80:d7:75:cb:81:44:ed:
34:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2E:A0:A5:C7:0A:AC:CD:85:F8:8E:2B:7C:F4:70:2C:A3:4A:C6:71
X509v3 Authority Key Identifier:
keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:67:10:01:cf:c4:34:97:2f:c9:cd:c5:9d:27:61:7b:1a:26:
33:1d:3f:5f:13:7d:df:e8:d1:94:7c:87:6e:35:b3:8f:41:f6:
c7:ee:6e:ad:56:4b:d8:43:25:3b:13:06:e5:c0:b0:2b:99:00:
55:1b:fd:77:10:01:bb:39:3d:08:b3:98:12:55:9c:33:07:ac:
90:40:98:a1:d7:88:bb:13:06:a7:38:7b:d9:75:d7:31:32:38:
23:01:cc:58:20:fb:be:42:f5:5f:ed:47:4a:a6:9c:f5:10:71:
b9:c8:dd:a9:49:50:da:82:3e:78:72:2a:84:19:49:37:86:10:
d5:70:40:38:f2:a3:90:43:51:70:7e:5d:e8:b7:6d:cd:4b:cb:
ec:13:04:fb:40:ef:3e:21:09:36:87:32:f9:a3:26:e1:43:52:
f6:cd:bb:72:41:05:c6:dc:2e:ac:90:d2:df:64:4b:2b:b4:ab:
65:4a:04:3c:29:2a:1d:9c:2c:6e:1a:92:a9:93:f3:0a:34:2d:
d0:7b:6e:68:fb:55:08:4f:12:4c:cc:d0:3e:7c:04:e4:ef:ab:
30:7f:8f:f6:80:99:c8:a9:66:32:05:61:cd:1a:2f:e8:f8:45:
af:64:46:14:96:78:f5:26:f6:51:36:04:1d:ac:eb:4c:e4:bc:
ea:8f:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:59:18 2026 by rpki-client