
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json)
Hash identifier: hvvP9rqRtQpWwju4kwEyHFR6DGi5Xtu2KuDl/Op/UlU=
Subject key identifier: 1B:56:4B:EC:F7:B8:DD:43:D9:BD:FD:4B:1F:BB:FC:DD:60:CD:3F:E7
Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Certificate serial: 09E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
Manifest number: 0A6E
Signing time: Tue 18 Aug 2026 20:11:04 +0000
Manifest this update: Tue 18 Aug 2026 20:11:04 +0000
Manifest next update: Tue 25 Aug 2026 20:11:04 +0000
Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: ItaSmFTQCsinAc48nnwwvlApSIvtiwtAIgSowUK24Bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2530 (0x9e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Validity
Not Before: Aug 18 20:11:04 2026 GMT
Not After : Aug 25 20:11:04 2026 GMT
Subject: CN=6a84bc58-897c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:4a:fd:29:6c:84:29:01:bb:d8:fe:42:46:
28:83:45:4d:f9:75:57:3a:0e:2c:54:0d:c3:41:b4:
2e:f6:8f:a3:0e:b6:4c:2e:f3:76:41:2c:1b:3f:a0:
ac:51:c9:47:1b:79:e5:39:db:64:2a:16:13:b6:10:
79:db:7f:cf:7d:82:da:02:23:74:f0:6e:42:b4:3a:
84:b2:a0:1c:fc:20:26:1b:00:8a:66:7b:7c:eb:86:
44:ec:ec:73:63:8e:ac:01:c1:68:f4:78:75:a3:b4:
4e:c2:63:3e:7c:f2:9e:9b:5b:09:19:2a:3c:35:d3:
d0:5d:5a:5b:53:cf:00:d0:23:31:6c:90:2d:65:e8:
3d:63:0e:56:d7:3e:2f:5d:1b:5e:f1:7d:07:22:8c:
6f:09:52:0d:2b:b0:10:cf:44:e0:f4:5c:c1:19:3a:
94:7f:e0:d7:70:94:1b:ca:b2:5b:e9:f4:00:2e:40:
07:d5:91:86:cc:f5:3c:ce:15:b2:1b:7d:75:77:44:
23:ba:db:a3:7f:bb:68:92:6f:a5:17:2d:a5:67:3b:
50:ed:fa:96:bc:f0:a9:2b:e9:ce:57:b0:a6:a0:da:
9e:15:25:03:45:e9:d1:7e:99:e0:d5:41:e5:21:d4:
3c:b7:e5:8e:c0:d6:02:fc:cb:7b:b6:50:c9:c1:02:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:56:4B:EC:F7:B8:DD:43:D9:BD:FD:4B:1F:BB:FC:DD:60:CD:3F:E7
X509v3 Authority Key Identifier:
keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:b4:dc:16:87:3c:45:70:c7:3d:80:4b:49:dc:d3:17:68:fb:
e2:ae:cf:38:4b:8e:a2:33:85:e7:71:37:84:92:22:6a:af:12:
1d:59:a5:60:2d:aa:6a:d9:01:a4:18:2d:96:e4:79:19:7f:ee:
41:c5:73:bd:39:77:14:0b:e6:ff:76:01:47:dd:b3:93:65:19:
07:c4:42:64:8e:84:38:b7:f1:6c:c7:13:6b:37:2f:01:50:5a:
5b:8f:6f:0c:95:17:11:b3:4f:c5:cb:d9:7c:d2:75:ca:e9:55:
bc:0a:22:09:53:16:35:d8:8e:a2:b8:eb:77:46:e6:a5:e7:31:
05:f1:3b:67:c9:c0:4a:1e:8f:3e:9e:f4:5a:f7:6c:92:cf:c6:
2c:56:e8:47:b0:48:42:e0:91:2b:b9:9b:06:c0:39:47:bc:d8:
4d:28:e9:25:a0:bb:9a:ae:fe:c4:3a:9a:7a:d1:4f:3d:51:d0:
93:83:e5:68:e2:13:6d:5e:f8:be:16:84:56:68:a7:87:bb:b6:
40:24:51:d9:7b:14:3f:c7:51:ec:eb:c3:b2:1c:8c:e6:0b:5d:
e6:5c:f0:3b:c5:ee:7b:31:7e:6a:e5:cb:bf:8a:15:42:27:46:
8b:c7:17:ca:f5:aa:ff:c4:a4:54:bd:4d:39:32:af:d6:d1:0f:
44:92:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:23 2026 by rpki-client