
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
File: NNz0cp9FgmKIjvB6K9RnX24xE4A.mft (raw, json)
Hash identifier: j8glhVcYiB2N3mUDyU2OROkZM5CCRUIGvsQCAp5Zrug=
Subject key identifier: 36:D0:77:02:78:BE:57:F1:CD:A0:02:2F:95:B4:AF:AF:FC:A6:E9:2C
Authority key identifier: 34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80
Certificate issuer: /CN=A9157B7F/serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
Certificate serial: 079C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
Manifest number: 078E
Signing time: Tue 06 Oct 2026 21:40:46 +0000
Manifest this update: Tue 06 Oct 2026 21:40:46 +0000
Manifest next update: Tue 13 Oct 2026 21:40:46 +0000
Files and hashes: 1: NNz0cp9FgmKIjvB6K9RnX24xE4A.crl (hash: f1Ngv39Q4s0ZisGrUgiXHwviqQqCm7MdLT6vdoBaDC0=)
2: AE27A8A671B311EBB90BB364C4F9AE02.roa (hash: Yz43RwlZ5yy4nBg8j+EwoqSiXNci2+WLpvODtls54Cc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl
rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B7F, serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
Validity
Not Before: Oct 6 21:40:46 2026 GMT
Not After : Oct 13 21:40:46 2026 GMT
Subject: CN=6ac56ade-c3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:6a:f6:07:3a:b7:ab:d7:c0:98:5c:e3:0d:
6d:69:dc:ee:6e:a9:fc:11:dd:72:1d:3e:14:9b:29:
19:80:5c:b3:87:5e:d3:e8:7f:ec:39:a9:e2:9c:22:
19:f4:0b:cb:87:25:70:6b:50:73:11:26:74:72:dd:
20:7c:48:ae:6a:ef:14:f3:2c:4f:37:f1:33:ca:36:
ad:91:fd:36:80:fb:6e:27:5f:cb:cc:56:84:ab:bf:
61:39:fc:46:52:b9:56:43:a9:e6:11:22:21:a2:57:
f3:9c:8a:bd:5f:81:1e:05:6e:dc:0d:36:8b:db:c6:
7f:6b:d9:85:e0:b0:9b:54:38:bc:f1:1e:7b:6c:0a:
21:e7:3a:68:66:85:77:29:20:1f:49:6b:e3:4a:60:
c1:0e:b8:00:01:75:e7:c2:1a:cf:d4:5f:f4:ad:39:
09:c3:17:e8:1f:06:5a:39:9f:b5:b4:74:0e:ac:34:
c7:ab:7a:e6:75:5b:f1:63:d5:71:14:3b:09:4b:3d:
7d:20:e8:db:de:f6:95:3d:ba:e8:b3:6e:33:6f:04:
50:55:a5:9c:c6:5a:13:6d:a6:d3:3e:ee:2d:d7:58:
d6:03:06:3c:4c:f5:98:96:85:d0:c0:4f:d2:58:60:
ba:35:11:95:5a:94:2b:af:f8:21:9f:c1:9e:8f:07:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D0:77:02:78:BE:57:F1:CD:A0:02:2F:95:B4:AF:AF:FC:A6:E9:2C
X509v3 Authority Key Identifier:
keyid:34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:8b:62:ad:9a:d9:ba:20:d7:b9:1d:05:07:42:f6:c9:21:
c3:95:45:74:b7:ce:83:be:8a:62:ba:27:e1:ac:17:7c:20:2e:
63:64:2e:95:96:da:c5:71:46:57:fa:0b:cb:bf:17:f5:9a:cf:
5b:8b:c5:49:e1:2c:70:d8:57:aa:92:e0:3d:03:f1:af:fa:fb:
0e:50:7d:e6:c9:34:35:33:43:4e:09:f9:80:19:5f:c1:ca:66:
fc:6d:74:6b:9e:02:db:83:7f:d7:b9:8e:06:63:14:69:44:d3:
a7:a6:1b:d3:7a:ce:ae:3e:36:ce:02:db:98:ba:f8:d3:58:ab:
9a:20:27:85:73:a6:cb:87:8b:5c:4f:9c:64:5e:50:90:c0:a3:
06:ac:c1:51:d2:a9:b0:75:76:9a:45:bf:67:d7:83:d6:63:30:
07:b3:92:ad:16:ab:db:7a:5f:2d:3d:1f:f2:28:69:85:00:14:
b3:ae:3d:d3:2e:d4:b5:0c:af:23:f7:e2:36:d7:48:1d:3a:69:
b9:e0:27:c5:39:d9:01:2f:d7:6a:f0:bc:40:c2:5d:7a:24:91:
2c:cc:bb:4f:b5:67:88:20:16:73:34:57:7d:1d:ae:79:9a:d9:
3e:60:8c:5f:ea:46:40:c7:9e:f9:27:10:eb:55:83:84:ab:45:
68:08:83:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdCN0YxMTAvBgNVBAUTKDM0RENGNDcyOUY0NTgyNjI4ODhFRjA3QTJCRDQ2NzVG
NkUzMTEzODAwHhcNMjYxMDA2MjE0MDQ2WhcNMjYxMDEzMjE0MDQ2WjAYMRYwFAYD
VQQDEw02YWM1NmFkZS1jM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsxq9gc6t6vXwJhc4w1tadzubqn8Ed1yHT4UmykZgFyzh17T6H/sOaninCIZ
9AvLhyVwa1BzESZ0ct0gfEiuau8U8yxPN/Ezyjatkf02gPtuJ1/LzFaEq79hOfxG
UrlWQ6nmESIholfznIq9X4EeBW7cDTaL28Z/a9mF4LCbVDi88R57bAoh5zpoZoV3
KSAfSWvjSmDBDrgAAXXnwhrP1F/0rTkJwxfoHwZaOZ+1tHQOrDTHq3rmdVvxY9Vx
FDsJSz19IOjb3vaVPbros24zbwRQVaWcxloTbabTPu4t11jWAwY8TPWYloXQwE/S
WGC6NRGVWpQrr/ghn8Gejwd1VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbQdwJ4
vlfxzaACL5W0r6/8puksMB8GA1UdIwQYMBaAFDTc9HKfRYJiiI7weivUZ19uMROA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I3Ri8zN0I4MkM1MDcx
QjIxMUVCQjQ0QTg0NjNDNEY5QUUwMi9OTnowY3A5RmdtS0lqdkI2SzlSblgyNHhF
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05OejBjcDlGZ21LSWp2QjZLOVJuWDI0eEU0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0I3Ri8zN0I4MkM1MDcxQjIxMUVCQjQ0QTg0NjNDNEY5QUUwMi9OTnowY3A5Rmdt
S0lqdkI2SzlSblgyNHhFNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACmeLYq2a2bog17kdBQdC9skhw5VFdLfOg76KYron4awXfCAuY2QulZbaxXFG
V/oLy78X9ZrPW4vFSeEscNhXqpLgPQPxr/r7DlB95sk0NTNDTgn5gBlfwcpm/G10
a54C24N/17mOBmMUaUTTp6Yb03rOrj42zgLbmLr401irmiAnhXOmy4eLXE+cZF5Q
kMCjBqzBUdKpsHV2mkW/Z9eD1mMwB7OSrRar23pfLT0f8ihphQAUs6490y7UtQyv
I/fiNtdIHTppueAnxTnZAS/XavC8QMJdeiSRLMy7T7VniCAWczRXfR2ueZrZPmCM
X+pGQMee+ScQ61WDhKtFaAiDfA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:27:18 2026 by rpki-client