
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
File: Njjfo7mFahWtnVQwa1v3BjD2NkY.mft (raw, json)
Hash identifier: vsCmGNU2D+21f7JFV8JKurew1oSwQlqi67dzDE+KzZI=
Subject key identifier: 14:7D:E4:3B:F1:EF:FA:18:37:A8:51:AB:25:B3:BB:69:32:A1:05:F6
Authority key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
Certificate issuer: /CN=A9151932/serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
Manifest number: 8B
Signing time: Thu 03 Sep 2026 04:56:56 +0000
Manifest this update: Thu 03 Sep 2026 04:56:56 +0000
Manifest next update: Thu 10 Sep 2026 04:56:56 +0000
Files and hashes: 1: Njjfo7mFahWtnVQwa1v3BjD2NkY.crl (hash: Pum1hXKxG2UuQb21h5DruPHy1RAsMDJycir74zwqgUc=)
2: 8C622D46DF0811F0A8BEBB315D6F56BC.roa (hash: My8bbZyTvpN44ycJe7YDuAWa7grPMOBDyAIg81uBjQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 04:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Validity
Not Before: Sep 3 04:56:56 2026 GMT
Not After : Sep 10 04:56:56 2026 GMT
Subject: CN=6a98fe18-3ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:70:59:a4:cc:79:e3:7e:0a:92:f2:bf:3d:
4d:4d:5b:f0:80:78:50:b8:59:1a:90:f6:d2:30:ba:
69:17:c8:3d:60:12:91:90:28:f0:12:53:8e:cb:6c:
ba:78:bb:8f:7e:ca:cf:91:fa:01:44:f0:a0:e8:5e:
29:d0:6d:c9:76:a6:61:06:bf:aa:6c:0f:17:82:64:
5f:54:cc:8c:ac:87:41:26:76:ce:dd:f5:7e:1b:fa:
82:af:38:bd:19:de:bf:79:5f:19:5a:b4:ec:78:d0:
e5:5f:0f:bd:4b:a0:f3:e0:70:bc:96:ea:6e:05:ea:
5d:ff:72:af:cd:65:38:eb:22:ef:8f:13:be:ad:23:
00:d3:8f:84:47:57:60:50:54:7d:62:c4:7e:37:a4:
47:87:1e:44:26:b6:98:bd:a0:b8:e1:9d:c6:30:e0:
6e:2c:64:b0:e9:74:43:10:d0:67:f9:f2:e5:32:ef:
91:f7:e3:d7:9c:fd:4d:62:c6:e0:c3:e3:a6:0e:e0:
52:f0:22:21:2c:73:3d:f9:3e:3a:07:12:bd:3a:73:
eb:b6:33:08:81:19:66:02:14:e6:5c:ea:74:d7:95:
22:3c:28:01:19:89:cf:17:0a:d0:61:c4:5f:16:93:
9d:57:27:72:6d:f4:50:38:c8:09:01:fa:c1:83:5c:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:E4:3B:F1:EF:FA:18:37:A8:51:AB:25:B3:BB:69:32:A1:05:F6
X509v3 Authority Key Identifier:
keyid:36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:35:21:3e:6b:60:1e:cd:93:08:2e:14:8d:47:ef:44:11:80:
e4:15:e8:e6:2c:eb:b1:71:b5:98:e9:d4:01:79:a9:a4:53:ab:
20:f5:e1:c1:14:a7:fd:5d:c5:91:4e:d7:25:94:75:36:b0:58:
8f:2d:91:b4:6a:0b:f5:69:45:fa:3c:1a:17:c0:2e:b4:a8:9b:
0a:a0:17:c2:fc:99:2c:ab:d6:d8:f3:03:87:47:29:3a:53:cd:
39:1b:b8:91:99:f1:9d:9b:5f:ec:cd:ce:58:83:4a:c4:ec:68:
c2:f5:b9:00:fe:c4:90:ed:dc:a3:4e:67:df:f3:d3:f3:64:30:
c5:17:e5:c4:22:09:87:52:9b:3b:3c:8b:0d:b4:79:7d:e2:f2:
ea:98:f1:b0:fb:73:f3:5c:9d:16:7f:86:bb:0e:9e:e8:40:02:
3f:84:8d:51:49:10:3a:58:ea:c9:79:7a:c7:51:a4:6f:14:5d:
17:c5:19:7b:5d:b5:23:75:66:4a:27:48:39:9f:03:04:42:8c:
39:85:d5:f4:63:74:3c:d1:a5:61:2a:eb:2a:60:21:3d:0e:b4:
dd:38:f9:5e:cb:67:30:80:17:29:80:1d:dd:ef:93:0a:fb:b6:
51:ec:31:15:35:a3:03:74:6e:56:36:e3:78:65:11:ba:9b:5e:
f3:e3:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:53:36 2026 by rpki-client