
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
File: NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft (raw, json)
Hash identifier: ei2R4dA8YHyPPoU6evcHm45r8oLGypWONfbfhQCK6/8=
Subject key identifier: DD:CB:DE:C8:B7:4D:7B:F6:66:01:A9:AA:89:1B:D6:8F:73:C6:19:9D
Authority key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
Certificate issuer: /CN=A915BC71/serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
Manifest number: 30
Signing time: Mon 27 Jul 2026 11:01:39 +0000
Manifest this update: Mon 27 Jul 2026 11:01:39 +0000
Manifest next update: Mon 03 Aug 2026 11:01:39 +0000
Files and hashes: 1: NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl (hash: HCP88ZuKMMXtFCO2niRgYzISYy5Ym5BzvZbzVbhyI2w=)
2: 045117A63F0611F1B36B08F4C9833773.roa (hash: yc41YsNACmYj/Sr/DAPgp/0vliNwQTb4cuVsDR9CDfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl
rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
Validity
Not Before: Jul 27 11:01:39 2026 GMT
Not After : Aug 3 11:01:39 2026 GMT
Subject: CN=6a673a93-7603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:06:0e:49:2d:ea:9b:28:63:d4:ab:cb:9f:
76:27:98:c9:62:74:22:f0:89:ab:ea:54:f1:bd:48:
d9:a9:5b:5c:d5:cb:cd:99:59:67:bf:5a:0f:af:f9:
98:3f:a5:d7:a3:d5:54:ac:30:e3:36:ab:7e:ca:db:
da:2f:1c:e6:34:cd:e9:f7:75:2a:a3:35:3a:15:ff:
33:e2:29:da:ee:b5:cc:27:48:29:4a:be:42:cc:b8:
0c:d3:da:0a:10:01:a3:46:9d:bf:2e:5b:a6:55:9e:
c5:9a:18:7f:45:36:fc:f0:b2:a5:ce:05:d3:e3:e5:
b2:50:e5:aa:73:47:64:2e:87:bc:40:00:b2:53:36:
81:fa:d2:20:61:3c:26:14:0d:4e:be:5e:05:64:ce:
eb:e4:8b:c4:fb:c1:4a:a2:ed:be:90:64:f3:ef:a5:
69:9d:ca:7e:11:da:e6:ca:b4:03:f7:74:23:4b:ce:
74:59:27:e4:f3:b7:63:45:53:1a:b5:cc:a7:16:e2:
9f:5d:c9:83:c5:b3:b4:d6:4b:10:f7:92:6a:fa:45:
e3:01:c4:7f:0a:d2:a7:32:af:ba:d6:d2:82:92:94:
91:a4:98:1a:28:90:ba:f8:c4:45:ff:64:a3:30:31:
a0:da:35:b4:89:1b:37:35:75:d2:23:58:72:1c:6d:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:DE:C8:B7:4D:7B:F6:66:01:A9:AA:89:1B:D6:8F:73:C6:19:9D
X509v3 Authority Key Identifier:
keyid:35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6b:05:c0:9f:10:9a:6a:db:56:73:0a:a8:69:90:f9:21:2f:
ad:0a:b5:05:e1:68:c2:74:39:c4:d0:b9:8b:0b:37:c5:b2:97:
ac:1b:d0:78:02:e6:d8:2d:35:9f:63:6b:07:44:87:9b:6e:0e:
b6:35:16:81:a6:3d:5a:0f:88:3a:36:24:86:6a:87:dd:15:5a:
fe:a5:f7:9c:62:0a:3f:60:e5:a5:6a:d8:dc:b7:90:d7:f2:ce:
c7:82:36:09:e7:1b:23:6b:3d:72:97:29:aa:9c:cb:4a:37:6f:
f5:4e:f3:50:03:a7:75:51:b8:59:2b:cc:5f:4c:b5:fa:a8:c5:
72:6e:1e:91:4b:cd:a4:c3:92:4d:65:a3:9e:89:e4:8b:4d:38:
d7:95:d8:f2:00:13:91:ee:47:60:12:49:54:42:49:f5:2c:50:
9c:e6:3d:e1:ca:a3:91:3d:17:ea:2f:aa:c2:39:42:82:46:09:
7e:62:14:81:8f:58:34:f4:9e:ce:74:a9:3f:c1:17:71:60:52:
01:f9:33:f3:20:5c:77:80:a3:e6:ff:63:02:66:b8:e2:f3:b5:
aa:48:be:39:72:7a:cd:dd:36:de:9a:82:12:b1:dc:a9:27:de:
ef:ce:35:27:a8:cc:e3:ff:65:f6:8a:15:4c:7a:f8:cc:bb:bb:
e7:7b:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 07:36:45 2026 by rpki-client