
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
File: NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json)
Hash identifier: JxPmHG5cx1xqcnLXFL3FC/R7dGfybmtKt1XR5aZ9YY4=
Subject key identifier: 10:0B:3E:61:E3:AE:1E:7F:FD:62:B9:17:45:96:A2:0A:94:0A:84:5E
Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
Certificate issuer: /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
Manifest number: 011E
Signing time: Thu 21 May 2026 05:53:25 +0000
Manifest this update: Thu 21 May 2026 05:53:25 +0000
Manifest next update: Thu 28 May 2026 05:53:25 +0000
Files and hashes: 1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: TeBahJrLp3ySNGYbiZ7tzQW2Tqt50/o03/zlZM2Bvhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Validity
Not Before: May 21 05:53:25 2026 GMT
Not After : May 28 05:53:25 2026 GMT
Subject: CN=6a0e9dd5-f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:e0:00:08:dd:ce:9f:26:61:aa:b6:66:fb:
7c:d1:0f:3b:41:13:98:74:b4:19:11:3e:f3:94:5e:
39:73:83:f1:28:56:14:06:48:cd:92:ae:40:24:f4:
01:7d:6d:c8:72:84:48:d7:ac:d4:c7:8c:2d:15:fb:
33:e3:49:0c:7f:f5:41:15:e0:63:56:8c:2f:e7:63:
8a:c5:05:e2:36:fa:eb:bf:a5:29:70:58:87:b9:2d:
2d:29:3e:ee:cc:07:48:11:35:c4:a6:de:da:d1:cf:
d6:59:42:50:f3:26:85:88:4a:14:ad:ae:b1:9f:38:
cf:1e:ab:b7:e6:f3:6d:68:0c:b7:3c:19:fa:29:55:
05:e3:9d:e4:0b:fb:18:13:cf:6d:b8:b2:c8:b2:1f:
91:6c:fd:da:a4:05:04:f1:90:23:a5:cf:f7:dc:e6:
a4:e1:93:58:1c:b7:c1:b5:8c:09:6c:ca:f7:e0:d9:
e1:2b:38:16:a2:5d:02:f2:f7:92:63:7e:34:de:c8:
4d:5c:30:2f:a5:e8:37:51:1c:52:bb:87:c0:5c:7e:
32:59:fe:95:71:cb:8a:93:7c:54:13:5c:88:88:6f:
9c:04:56:3e:93:48:06:3a:6c:25:e5:79:c1:2c:28:
42:03:b1:8d:7d:c7:3c:1b:c0:d7:66:71:95:fe:e6:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0B:3E:61:E3:AE:1E:7F:FD:62:B9:17:45:96:A2:0A:94:0A:84:5E
X509v3 Authority Key Identifier:
keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:3b:04:84:6f:f9:bb:75:08:fa:85:d4:0c:44:3b:77:da:1e:
ee:f8:de:63:2d:39:de:a2:70:eb:68:72:13:69:10:b3:81:da:
3b:7b:79:57:b3:6f:d4:01:2f:d3:8c:de:39:cc:6d:78:83:18:
67:00:01:ac:7b:2f:92:49:91:bf:d3:bf:59:b4:44:d0:cc:58:
17:2b:2a:d9:c4:65:61:ff:cc:8a:27:96:bc:f7:66:0c:51:27:
b6:d4:18:36:df:e5:2f:0f:0e:e9:4a:76:6e:71:64:2e:41:bd:
e1:c3:fa:09:79:07:79:80:bc:25:23:90:5c:3d:ec:b8:a0:af:
7b:97:1d:e1:80:3a:08:1a:0c:cd:15:ef:d9:fc:4d:56:ee:9b:
b4:6a:9d:31:c5:b0:35:4b:8f:de:7a:c4:fb:44:b7:8c:31:9a:
34:58:b2:06:e5:18:7f:02:a7:f5:b3:51:c0:9e:22:01:ca:63:
95:0f:a8:e0:06:a1:ea:ad:63:17:40:da:98:3c:01:7d:fe:a9:
8c:90:fb:3e:d0:79:9e:7e:04:25:e8:1f:4d:f3:f8:eb:48:42:
da:5c:6e:a2:0a:dd:e8:6c:95:1d:7c:23:34:e9:e2:7f:f9:4c:
94:f3:49:b5:d3:4e:4e:64:76:80:4c:d2:c7:40:06:f3:0e:cb:
8c:13:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:04 2026 by rpki-client