
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier: /jiiRbGX8CdjS3PlY9Y8p3+KmdF5bf/wm2RhZRzQ89s=
Subject key identifier: 13:9A:1B:28:EE:E7:B8:D2:B6:A4:DD:5E:5F:4F:28:A3:64:09:B0:B8
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial: 0B9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number: 1314
Signing time: Sat 04 Apr 2026 18:53:07 +0000
Manifest this update: Sat 04 Apr 2026 18:53:06 +0000
Manifest next update: Sat 11 Apr 2026 18:53:06 +0000
Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: zknc04k1anW16wNmOVZdPGRHXJYLlCdUG6I4+7mLYlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2973 (0xb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Validity
Not Before: Apr 4 18:53:06 2026 GMT
Not After : Apr 11 18:53:06 2026 GMT
Subject: CN=69d15e13-caec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:09:d4:93:6c:cf:ab:0a:24:2c:e3:96:1c:
d6:91:16:09:cf:93:61:14:cc:84:92:4b:4f:35:66:
59:88:22:6f:39:b9:73:f4:ea:21:a9:04:55:6b:c5:
0b:b9:de:f9:91:a8:ef:ef:bc:c8:b3:56:38:c0:a2:
bb:a2:f7:77:22:0c:e3:4b:ef:1f:bd:54:10:67:ea:
d7:d8:7a:37:5d:e8:d8:b7:aa:02:2b:cc:d1:d9:05:
44:0c:2d:2d:4b:06:72:dc:3a:02:6d:96:19:4e:e5:
25:a9:ea:84:33:a2:1a:a9:54:aa:c6:8b:f5:81:c9:
99:80:f7:68:b1:fb:b5:88:3b:4f:15:64:30:25:45:
b0:ed:c0:e7:d0:e6:b5:0b:dd:17:35:83:cb:b9:12:
33:84:6a:ea:19:c4:c9:de:cd:f6:22:23:fd:1f:8e:
25:b8:0e:71:6c:27:0e:d3:0d:23:ab:f5:13:d1:1a:
d8:67:48:af:bf:e7:9d:0e:2f:3b:fd:27:bd:a5:4a:
69:8b:05:6f:2d:c1:a7:e4:b3:88:23:d6:a1:91:67:
8e:61:df:b5:53:38:3e:7a:87:b3:d2:2c:3e:a9:a7:
75:25:94:cc:31:36:89:46:76:52:db:4a:8a:2d:3c:
ed:99:48:e0:36:2f:22:91:4f:c3:16:d2:8e:dd:a1:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9A:1B:28:EE:E7:B8:D2:B6:A4:DD:5E:5F:4F:28:A3:64:09:B0:B8
X509v3 Authority Key Identifier:
keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:98:b2:b3:68:23:4b:9b:af:d6:09:02:3d:57:9b:e7:25:a1:
de:b9:79:65:18:d3:d4:1e:9d:03:99:a2:80:99:8e:be:a6:f8:
78:72:98:1e:63:ee:37:57:5a:ce:07:5d:f3:a3:68:85:9a:5f:
66:ab:cd:69:9c:42:60:ce:bb:d3:de:f7:bc:40:5d:ba:0b:fc:
19:6f:d9:d2:05:f2:0f:76:12:33:53:72:f9:26:5b:fe:76:90:
45:ee:73:48:e1:12:2e:67:0f:9f:ab:0a:55:0d:a2:23:fc:e4:
9b:39:38:e1:c1:74:a5:ef:51:7e:a1:49:8c:c6:e1:e4:11:39:
ca:3f:ee:a5:4f:1e:80:e7:ef:12:f3:65:1e:44:d2:73:48:4c:
cd:41:cb:ce:5c:3f:f2:b9:4d:29:cc:34:59:cf:ae:0a:2a:6a:
99:04:30:20:7d:18:ac:9d:03:0f:e1:b5:e1:46:02:ba:05:2b:
21:23:c5:76:14:ca:a3:99:76:24:ff:ed:9e:c5:a6:f4:cf:54:
45:33:78:47:0e:05:a8:5d:e1:ef:9b:7e:2f:51:b1:ce:18:f1:
4c:4c:95:36:e4:4e:cb:d5:17:f2:f4:38:6e:23:a8:90:2b:79:
43:27:5c:c6:41:20:e5:68:67:24:f3:cf:8e:d1:99:27:fa:20:
4f:4e:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:59 2026 by rpki-client