
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
File: Njjfo7mFahWtnVQwa1v3BjD2NkY.mft (raw, json)
Hash identifier: SrJx4igYfXqvlbyeP9SdBSvfidkC+hXhuBU3KrsWy7A=
Subject key identifier: C7:D8:2C:9B:D8:21:E2:5A:5D:AA:C2:3A:7F:01:0B:8B:7A:1A:6C:15
Authority key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
Certificate issuer: /CN=A9151932/serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
Manifest number: 74
Signing time: Tue 21 Jul 2026 06:32:01 +0000
Manifest this update: Tue 21 Jul 2026 06:32:00 +0000
Manifest next update: Tue 28 Jul 2026 06:32:00 +0000
Files and hashes: 1: Njjfo7mFahWtnVQwa1v3BjD2NkY.crl (hash: lJhPbcfrQ330F+WqfQ5h0JndjCUe5K5A4BtuKLfVIJk=)
2: 8C622D46DF0811F0A8BEBB315D6F56BC.roa (hash: My8bbZyTvpN44ycJe7YDuAWa7grPMOBDyAIg81uBjQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 06:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Validity
Not Before: Jul 21 06:32:00 2026 GMT
Not After : Jul 28 06:32:00 2026 GMT
Subject: CN=6a5f1261-b5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:61:1f:df:e4:6c:4f:18:c9:da:02:65:81:a3:
2e:48:bb:4a:3f:fd:27:03:f4:4d:87:30:d8:62:0d:
dc:09:f9:82:51:05:b2:ae:bd:fa:9a:7e:82:fd:c8:
65:36:2e:e4:ad:0e:91:47:dd:bb:13:ca:5c:bc:ba:
0b:95:0e:08:3f:58:f3:00:75:07:f3:16:10:ef:ae:
75:9b:a1:02:75:5f:b3:6a:0a:4b:79:bb:ae:e9:a9:
a7:e1:22:c7:0a:9e:18:90:aa:61:ca:c3:37:eb:03:
31:a1:c5:9a:4f:c0:20:bd:57:e0:00:7f:b5:fe:50:
4c:f9:a7:a1:13:6b:5d:e0:89:40:bd:37:d3:3b:a5:
14:a9:0b:52:a1:a5:68:5e:d1:d6:bd:15:46:f5:77:
ce:8a:93:49:ee:89:7f:42:05:09:9b:ab:cc:de:ca:
12:07:f4:36:99:3e:07:8c:ca:9a:e7:79:8c:8d:a0:
c8:a3:18:20:da:e4:7f:a0:de:6e:6e:ae:8d:8b:37:
a7:0c:97:a0:c7:2b:f7:c7:13:37:e9:f7:49:36:00:
19:a4:65:e9:bb:ad:62:00:f5:38:d4:d7:cd:47:9c:
66:b5:62:c1:50:af:5d:09:6c:73:b8:58:42:42:70:
7c:0c:a0:67:f4:7d:78:42:1d:71:07:cc:a2:88:3c:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D8:2C:9B:D8:21:E2:5A:5D:AA:C2:3A:7F:01:0B:8B:7A:1A:6C:15
X509v3 Authority Key Identifier:
keyid:36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:14:58:a6:1e:59:27:d0:5e:86:fb:3e:54:d6:35:ee:65:84:
fd:c0:31:1d:c7:fc:dd:a8:41:28:e6:d1:18:ee:f4:21:53:3b:
6e:92:17:23:f0:0c:e9:ba:06:3f:05:b0:19:b6:e8:2f:8e:ab:
75:66:56:ba:7d:74:65:53:f4:27:36:62:c3:f4:c8:e4:cb:58:
5e:bd:5d:6f:80:b6:7f:25:97:8e:89:44:24:9a:21:04:a7:dd:
bd:60:0e:97:8a:f9:43:aa:9b:27:b8:b4:d5:b0:e2:9b:fb:9a:
0a:b2:36:8e:c8:1f:7e:62:1d:cb:bc:78:18:83:dc:0c:cf:8f:
84:be:22:04:e2:46:53:ac:48:b8:84:82:0f:ec:cd:e5:db:92:
c8:da:d9:c5:39:f3:96:14:ac:39:c7:01:4a:c6:c0:35:ca:86:
00:e0:02:a6:ec:dc:a4:0b:a2:04:73:48:d9:da:0c:30:1f:25:
9f:79:e3:50:19:e4:54:01:d6:ea:f6:b2:b5:b7:34:b0:cf:12:
f4:9d:be:d5:08:bb:67:51:b4:77:4b:7f:df:af:d6:8d:c3:6f:
56:6d:10:ab:2a:ac:cc:21:f0:e7:5e:90:f1:cd:e1:30:a9:e1:
1d:67:56:fb:db:3a:4d:68:71:99:03:1b:e9:ca:6f:66:63:93:
7e:6a:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:48:19 2026 by rpki-client