
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json)
Hash identifier: RKU/rGiEHucY3rFkLF/0v6ZErqyfAtDA2xjxNaevotE=
Subject key identifier: 83:01:49:D6:40:3F:CA:9D:9D:8A:02:40:AA:3F:FB:18:75:7D:42:3F
Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Certificate serial: 08B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
Manifest number: 088C
Signing time: Sun 20 Sep 2026 20:43:36 +0000
Manifest this update: Sun 20 Sep 2026 20:43:35 +0000
Manifest next update: Sun 27 Sep 2026 20:43:35 +0000
Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: XBiv2ryXVLzpf8ZK3JppBtamjO2haMMv/TvfZHlC9c8=)
2: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: c6LJhskoptnL62vsB9jLZiT/hEUllVG1aUqGIGkiID8=)
3: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: /CMhnqrhdVYNSUaizVq/uPj8VXgZqAfmKsDyp7bdTWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228 (0x8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Validity
Not Before: Sep 20 20:43:35 2026 GMT
Not After : Sep 27 20:43:35 2026 GMT
Subject: CN=6ab04578-f13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:e7:a2:5b:0d:74:8d:85:ba:16:33:f0:eb:
0b:51:ff:b5:c7:7c:37:88:e5:75:c3:7f:2a:0d:9d:
34:c8:c4:8b:05:b4:50:1c:03:a0:7c:da:e3:19:89:
99:02:06:14:68:49:91:a3:df:99:6a:c7:11:b9:67:
1b:59:76:2a:f4:f9:f9:ff:26:df:f3:9d:3a:b9:88:
8b:3d:33:10:63:95:58:11:da:d4:36:90:1d:a8:93:
79:46:81:9a:d7:d5:80:78:c5:b6:bd:74:87:20:ef:
ab:59:d4:d6:d4:e6:8e:dd:d6:cf:28:a4:3a:d9:2c:
cc:82:b5:ab:29:ca:a0:dd:97:c3:fe:4b:94:6e:5d:
ef:be:ec:9a:06:b9:ca:b7:d4:25:f1:79:a3:bc:11:
86:56:4b:f6:86:01:b8:0f:44:1c:19:41:c0:2b:66:
39:4d:0a:cf:2c:3c:e2:28:38:48:00:54:15:80:0b:
76:37:48:b8:b3:ab:a6:34:0b:d7:55:f6:28:1c:8c:
74:6e:c2:d2:78:e5:c6:3e:e9:14:68:c0:a8:5f:f3:
0d:8f:49:77:d9:26:f2:31:40:4e:4b:d0:83:5b:71:
f3:58:c3:85:c4:f3:6d:a1:92:86:02:2e:81:c3:7e:
ab:45:e2:9a:26:e2:66:f2:1c:70:88:72:4d:bb:15:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:01:49:D6:40:3F:CA:9D:9D:8A:02:40:AA:3F:FB:18:75:7D:42:3F
X509v3 Authority Key Identifier:
keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:dc:9a:3c:66:82:e2:90:c3:50:2c:f6:21:2f:c2:c6:65:
cf:71:b4:e0:b8:dd:6e:03:9b:77:aa:c2:b2:3c:3b:19:52:bf:
f9:83:76:0c:07:92:b8:91:8a:c3:9f:b0:40:b2:f1:0b:32:c3:
27:8d:36:16:43:6c:53:e0:37:8b:c3:40:80:bb:d1:65:f1:72:
2e:7b:8d:77:18:f0:50:c9:49:cc:5a:1f:50:c3:98:a0:c9:12:
93:8c:5c:fe:f4:41:43:65:a8:a9:8c:70:ac:1a:3a:9a:5e:66:
dd:57:4a:f4:e1:c6:43:ec:89:02:ee:4b:2e:40:3f:01:84:7b:
a2:34:98:95:60:19:59:b8:57:49:86:43:45:72:45:72:98:7c:
39:18:ee:6d:1a:ff:f2:7f:b9:e4:34:53:bf:5e:4e:71:69:5a:
b3:fe:19:43:bc:60:d7:a7:f1:ec:d1:66:0d:a5:26:31:e7:c2:
9d:b9:ef:73:fe:30:41:ff:5b:c6:7a:2a:cb:6f:a9:cd:60:58:
74:16:c7:c6:21:21:09:1a:25:5c:ec:97:03:9c:b1:8e:81:a8:
a5:44:e1:f9:59:9f:01:31:33:00:5f:f2:69:d7:4b:f4:cb:a1:
1d:38:8c:12:6f:ad:59:19:9f:17:5e:de:f2:a2:fd:65:5d:78:
45:35:47:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:49:04 2026 by rpki-client