
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier: I2L0zWvgc5Zy39AIOioEc0YJA790U3x3U4hIqwlh+k4=
Subject key identifier: 64:93:3E:9D:D0:BB:B0:93:01:A0:39:B7:85:09:F4:20:E1:F7:5C:27
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial: 0873
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number: 0D98
Signing time: Tue 18 Aug 2026 18:17:14 +0000
Manifest this update: Tue 18 Aug 2026 18:17:14 +0000
Manifest next update: Tue 25 Aug 2026 18:17:14 +0000
Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: TRwq+vpeBEK+WggKOzhWz+nIWqRhU4zVGTlLAuTQe2I=)
2: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: cVbPNw0C1NsVka6hgQ1NbhRNg7uHfdi0adK+IbVcOk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Validity
Not Before: Aug 18 18:17:14 2026 GMT
Not After : Aug 25 18:17:14 2026 GMT
Subject: CN=6a84a1aa-c073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:64:5c:da:80:62:be:1d:65:98:97:c6:61:
04:d4:ad:be:77:74:07:75:fa:44:0e:4d:23:11:f6:
65:ce:ae:1f:e0:31:25:17:15:6c:b2:2a:5d:10:c5:
df:13:25:f2:26:dc:d4:5d:9d:03:82:48:b3:c3:6e:
14:db:d3:78:f3:10:e7:10:99:f7:d8:ec:6d:98:e3:
0e:72:ec:95:d2:f9:8a:49:e9:bc:e9:69:7e:a2:b4:
b6:2e:3d:60:cb:c0:a3:43:3b:7a:d7:b9:bb:ae:4a:
ec:83:96:07:0f:b4:a9:dd:47:ca:8d:f2:40:37:49:
a6:2a:2a:c8:ad:79:f7:6a:45:87:4c:77:c6:70:de:
ca:66:23:47:83:db:d5:11:c5:5a:2d:b7:11:ca:1c:
bc:59:40:3e:90:8e:fc:db:5b:c1:79:16:18:ab:5b:
e7:bb:40:35:36:d6:68:1a:45:ef:3d:d6:cd:51:9e:
d9:98:86:91:6b:e0:b1:9c:fa:12:61:de:e9:d9:c7:
1e:33:ee:c8:5a:96:1a:02:42:8a:e0:48:f6:36:c2:
e3:39:dc:06:cf:6f:82:93:b6:1a:12:33:51:9b:4e:
8d:40:3c:5c:e3:e9:e7:25:85:cd:e8:c3:65:0c:11:
b3:8d:23:be:dd:4c:56:d1:9b:c0:8d:b6:b8:ba:19:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:93:3E:9D:D0:BB:B0:93:01:A0:39:B7:85:09:F4:20:E1:F7:5C:27
X509v3 Authority Key Identifier:
keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:2d:d1:15:9f:39:a9:5b:96:a2:da:a7:d3:35:9d:8c:b1:ca:
e8:b3:2c:68:01:a8:38:6b:4d:e1:42:e1:f7:2e:f2:78:e2:53:
1e:05:c1:ca:5c:d0:35:b5:b3:55:99:24:ff:50:a7:b4:d6:b7:
28:06:10:59:97:88:db:4e:72:79:8d:3f:e1:6c:9d:8d:f8:a5:
42:70:a7:cf:c6:b2:c0:4e:7d:e8:02:0c:0a:3d:22:a5:6c:bb:
c1:4f:e8:13:3b:4e:53:7f:3a:05:c5:db:bf:77:2b:19:a7:45:
b6:70:b6:44:b5:73:02:7d:dc:8b:29:eb:72:5f:d3:b3:76:fd:
3b:37:a1:6d:6e:8f:e5:0f:bc:e4:6b:2a:f2:76:b5:b5:b5:7a:
fb:bd:fa:e8:72:b2:d7:f8:8c:6f:9d:e1:c3:3a:34:06:5a:99:
1a:90:90:85:8a:6a:94:a2:ca:8f:66:a0:6e:30:51:20:26:c4:
18:68:ba:2f:cc:a7:c4:c1:23:aa:ae:1a:8d:0a:4e:a3:62:58:
bd:d5:c1:20:83:1d:00:97:88:81:de:ac:85:7d:77:a6:dc:f0:
35:89:ac:39:c2:6f:bd:b4:13:c3:ba:70:61:f8:26:85:72:34:
85:e3:f5:32:d9:41:d1:4e:f0:4d:5a:fe:4c:44:1d:48:dd:6c:
2b:59:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:32 2026 by rpki-client