
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json)
Hash identifier: wu+lk0vpAoYOOZpmggCKB3kWLxQdc0J+8PvPZ5P34Vc=
Subject key identifier: BD:4B:E6:05:DC:DE:C7:37:7F:06:7A:DE:49:7E:01:B5:90:CE:A1:3A
Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Certificate serial: 029B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
Manifest number: 028F
Signing time: Mon 19 Oct 2026 02:15:08 +0000
Manifest this update: Mon 19 Oct 2026 02:15:07 +0000
Manifest next update: Mon 26 Oct 2026 02:15:07 +0000
Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: ijNFfCgdH74QFruUvVF1HxcOaaDXxb2aGTnCDI5L84Y=)
2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=)
3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: fdMdK5Sd7Plh2Ippunexfav/xQdX66KfuslWneo0vak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 02:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Validity
Not Before: Oct 19 02:15:07 2026 GMT
Not After : Oct 26 02:15:07 2026 GMT
Subject: CN=6ad57d2c-e246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:89:0c:b1:fc:a6:b3:8b:11:33:8e:bd:8b:
83:d7:4f:ec:71:8f:a7:c6:5a:13:04:75:35:01:23:
34:51:52:cf:4e:a5:0a:57:c4:ba:a4:9e:4e:f4:4d:
9d:79:3f:4d:32:2f:83:ae:bf:ef:de:3d:6c:7d:d8:
f5:a5:5e:29:28:97:aa:78:e1:aa:6d:87:97:7c:7e:
80:70:f9:bf:00:6a:07:2b:03:2b:a0:db:8e:cd:26:
a1:a4:cd:15:79:01:e6:1b:8f:7e:9a:31:50:e4:31:
99:94:9f:ae:8f:f3:ef:91:ce:4f:3e:7f:28:fc:ee:
1c:e4:48:d8:72:63:92:d9:a8:6b:51:8c:83:a3:4e:
8f:ea:1d:0f:6a:c2:ee:07:98:e2:ef:db:dd:d0:fc:
57:a9:d4:9e:7d:fc:dc:e9:81:bd:90:05:ce:39:85:
8a:8a:f2:74:7b:4b:67:88:50:c5:07:26:f4:3e:32:
fa:73:d1:1b:6f:cd:44:38:1a:04:71:29:93:e8:1d:
d5:07:6f:0a:dd:0a:d0:19:02:71:d7:e9:8b:bf:08:
b2:3c:97:40:b1:d4:49:9e:0e:56:5b:8b:9b:cb:f5:
fb:89:0d:72:2c:49:82:25:25:c6:5b:b4:0d:0c:5a:
90:f8:b4:c7:de:40:24:a4:55:9a:de:72:63:27:52:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4B:E6:05:DC:DE:C7:37:7F:06:7A:DE:49:7E:01:B5:90:CE:A1:3A
X509v3 Authority Key Identifier:
keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:01:fe:48:65:75:1b:f5:63:15:9a:e0:5e:c1:d9:d0:92:82:
96:80:fd:78:c9:b2:13:4f:e2:28:93:54:8b:c8:dc:30:a5:20:
4e:4b:c8:6f:5c:03:15:1e:90:b2:e1:40:93:e7:05:e6:1d:ff:
1b:b2:6d:20:90:cd:37:12:87:07:13:64:45:44:d2:33:7b:65:
d5:fc:43:e1:48:d5:02:0c:db:8c:a0:e2:82:da:a5:e1:87:1a:
08:34:35:3f:7e:a6:1c:a7:1b:36:7c:0b:55:04:41:0b:49:7a:
a5:98:c4:dc:7c:9a:d8:53:85:aa:44:ea:4a:95:d0:2d:c4:58:
35:8b:88:97:dd:a3:94:42:c1:9a:ca:57:61:2b:f7:ce:e4:4b:
b8:b8:14:c5:95:af:06:23:c7:62:c7:dc:78:b4:a9:fc:f4:6b:
3c:aa:f1:92:6c:14:36:6b:db:cd:e1:be:c5:da:35:3b:c5:df:
6f:d6:3d:35:40:fb:32:a1:24:9a:46:77:35:1a:3a:58:3d:b8:
8f:aa:d3:9a:95:43:3e:8a:ee:9b:94:39:51:2e:18:ac:8f:e0:
0b:81:cc:b8:5c:ca:ac:00:d8:67:a2:9f:68:ae:a4:c2:04:d2:
0b:72:71:27:01:10:0a:da:20:4c:7f:02:df:57:17:31:4d:a3:
14:b3:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:05:00 2026 by rpki-client