
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
File: NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json)
Hash identifier: JdJpGhGw8bEKNp25Kl4OkE2qU7ok2lCPTyRJtchZP34=
Subject key identifier: 3E:F9:AA:0A:F2:1F:BF:D6:0F:75:E4:C1:E8:6A:0E:50:65:91:D4:89
Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B
Certificate issuer: /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
Manifest number: 0117
Signing time: Wed 19 Aug 2026 06:34:28 +0000
Manifest this update: Wed 19 Aug 2026 06:34:27 +0000
Manifest next update: Wed 26 Aug 2026 06:34:27 +0000
Files and hashes: 1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: lMGSqdEyFGAR9xSCuygG1eHonxsN6y4begoP7X2Ib/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl
rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B
Validity
Not Before: Aug 19 06:34:27 2026 GMT
Not After : Aug 26 06:34:27 2026 GMT
Subject: CN=6a854e74-411d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:bf:c5:9e:19:f3:d4:86:85:9b:0f:0b:29:
25:d8:25:d5:53:f6:9c:1a:1e:0a:4a:cf:92:8e:8e:
84:fb:88:86:4c:cc:e9:ec:39:d6:61:c1:fc:fb:cb:
4d:11:da:01:ba:f7:94:11:28:26:cb:70:77:c4:e2:
2f:b2:64:6a:bb:ec:c6:52:76:61:21:e8:21:0e:21:
55:bb:20:15:b0:db:fd:95:92:25:8e:0c:6e:27:69:
69:30:09:21:0b:da:c9:ac:4f:77:69:d5:b1:10:1a:
5a:4a:00:e5:43:a5:af:64:55:19:68:a2:c2:6c:df:
0e:1c:17:94:ce:d1:c9:02:91:12:83:97:3b:11:20:
39:8f:3e:15:d6:dc:d5:05:41:25:9d:6a:4b:8f:fc:
85:4e:1c:b8:de:cf:19:9d:f9:30:45:e4:f4:99:bc:
a0:5c:b6:e4:f3:bb:f4:c5:df:d0:43:90:15:bf:fb:
5b:e0:74:b8:20:76:73:01:25:dd:3e:3e:4b:31:ec:
18:3b:8d:6b:37:cc:e3:7a:24:6c:90:60:97:b1:2d:
fe:b8:13:54:25:3d:e1:cf:cd:cd:28:e5:73:a0:ae:
59:eb:ae:48:4a:12:fc:a3:ab:01:16:79:a9:a1:5b:
e8:76:03:c1:db:2d:a6:69:09:e4:6d:61:4d:b3:52:
6d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F9:AA:0A:F2:1F:BF:D6:0F:75:E4:C1:E8:6A:0E:50:65:91:D4:89
X509v3 Authority Key Identifier:
keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bd:f1:9d:60:63:4f:6f:72:d5:07:ab:d9:ce:ee:99:70:b3:
be:ba:a2:21:b4:63:77:fe:26:11:19:dd:bf:06:2d:01:ff:2b:
83:0c:8a:07:62:ea:10:cd:91:c8:ba:9e:bf:13:ff:4c:c9:f7:
b7:8d:b6:0b:0c:ef:4f:65:03:ad:3b:5b:8a:12:0a:2f:71:59:
c5:b9:6b:8d:d0:0f:cb:f3:ce:89:be:e1:6f:bd:cf:85:3b:2b:
53:ae:ee:67:20:90:18:8b:3d:58:0f:f1:5f:e5:da:0d:00:f6:
12:e8:fd:76:72:d5:43:b0:8c:e0:63:ba:a5:8c:b2:fb:93:83:
de:c2:c7:b9:65:40:6f:50:5e:a2:b8:5d:fe:0a:94:87:05:23:
7f:ff:4f:ce:c3:6a:04:ca:52:8f:30:8d:3b:16:4f:d2:55:10:
1f:98:ec:0e:74:92:ef:31:33:27:e6:55:8e:29:0e:b5:b9:33:
bf:3d:00:f4:df:2f:ad:f8:45:3a:3b:ef:cb:de:fb:18:f8:7f:
e5:1a:c9:da:df:4c:5c:b5:b2:96:94:c8:89:4b:87:6d:75:89:
83:6d:fa:59:d4:2f:2a:fe:1e:64:bc:fe:03:6b:f7:85:63:84:
4d:02:1e:cc:52:9b:eb:d5:fa:ba:c2:b2:7b:72:28:09:bb:04:
e1:c2:14:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:35 2026 by rpki-client