
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json)
Hash identifier: irn2272XHUs/H0DR+hUtUKqM6w1SC8Xy3heNRShKiis=
Subject key identifier: D7:3E:49:50:E2:D4:F1:06:D8:DC:7E:7A:E2:31:11:13:12:E6:48:63
Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Certificate serial: 0D0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
Manifest number: 0D05
Signing time: Mon 22 Jun 2026 18:15:10 +0000
Manifest this update: Mon 22 Jun 2026 18:15:09 +0000
Manifest next update: Mon 29 Jun 2026 18:15:09 +0000
Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: ve7HfQWpnefDQqcKMTOJRwJxiNLTJU/c3nL0DZmT5M8=)
2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: isdogO69KQFGu46kiXPUMXjezpBNqbUl3557H/EGWLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl
rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Validity
Not Before: Jun 22 18:15:09 2026 GMT
Not After : Jun 29 18:15:09 2026 GMT
Subject: CN=6a397bae-1217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:e9:b7:8f:99:75:2a:fe:14:fa:f8:da:f1:
15:f0:97:61:1c:87:86:1a:c5:25:ca:ed:b1:e2:ca:
16:20:b9:b2:5e:56:d6:75:13:54:8d:eb:b7:01:0d:
b5:a7:36:0f:74:dc:8b:a4:03:db:2b:d7:c4:3d:b0:
84:a5:c4:fb:80:6c:52:4d:75:88:a4:1a:40:96:2d:
8b:dd:8b:e5:3d:7c:93:6d:f1:01:5f:2f:cd:46:df:
d1:72:de:20:01:8b:38:b5:24:50:d1:33:4e:94:46:
d4:dd:d6:74:ba:3a:64:05:bf:33:ff:0b:19:af:65:
1a:7d:1c:ef:75:8f:c9:2b:16:c9:0e:fa:12:70:43:
85:7c:07:ae:8f:1a:78:54:1e:64:9f:83:7c:f1:f6:
88:3b:85:a8:1b:35:e4:69:b3:b2:c4:dd:e3:27:d8:
4a:bb:3c:a7:45:dc:e3:af:1e:3c:f6:60:68:3c:ce:
f1:52:6b:a6:35:8f:14:0a:d3:e2:9d:92:8e:54:16:
3a:e3:f3:01:7a:e3:da:31:28:fa:dd:a6:3f:d7:0d:
ee:06:63:bc:bc:e7:a8:be:f9:1b:b8:14:47:04:45:
0a:39:0f:67:d1:d8:9e:20:3c:97:c1:14:58:2d:38:
f9:67:42:7d:3b:ab:29:b2:d4:d6:58:58:c5:fd:48:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3E:49:50:E2:D4:F1:06:D8:DC:7E:7A:E2:31:11:13:12:E6:48:63
X509v3 Authority Key Identifier:
keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:3a:91:8e:27:1e:f9:4a:0c:b1:55:7c:98:85:4a:da:f4:ff:
41:fa:54:3d:d2:15:0b:0f:21:4e:3d:c8:11:86:83:d7:e5:9d:
1c:bf:57:b9:5c:0d:8e:c9:8f:c9:dd:32:e6:d6:b1:7b:02:bb:
bd:ea:57:17:dc:ca:48:ee:46:4d:54:b4:14:99:25:3d:7a:6a:
b6:9d:e9:4e:a4:86:88:ed:91:24:c8:22:f6:ec:5f:6a:85:20:
52:c2:6d:92:31:b4:58:d4:e3:f6:bf:5b:7b:fa:48:46:38:e2:
c3:58:71:79:8d:03:4f:f0:d7:16:70:3d:50:76:03:21:43:f0:
f1:d2:10:ce:aa:a0:02:a8:14:42:9c:dc:87:5e:3c:79:d5:64:
cb:1e:b4:07:0c:9e:9e:e6:12:c0:85:2a:22:73:72:48:f1:1b:
c1:86:e3:c0:46:fb:4a:25:b0:9e:42:69:85:48:27:50:63:47:
77:6e:ad:1a:6a:d7:68:99:8b:18:93:b7:2e:2f:6a:f8:73:47:
19:0e:66:b2:52:e9:ab:24:19:1e:55:6d:6e:75:cd:43:c5:66:
1f:b4:e6:fd:71:eb:5c:4d:47:29:0a:6b:e7:03:91:e7:66:0d:
22:b8:8e:56:0f:cc:6a:68:67:6c:dd:d9:47:23:f8:1e:21:9b:
7a:18:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:39 2026 by rpki-client