
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File: nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier: 1F+pe2zGFDjCfu24zSZe+Mx2CzA52PKwm+D3vMvLKi0=
Subject key identifier: C0:A3:E5:8D:68:88:85:93:B9:B3:77:3F:C1:5E:02:B5:FE:3F:29:60
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer: /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number: 0134
Signing time: Wed 19 Aug 2026 06:20:41 +0000
Manifest this update: Wed 19 Aug 2026 06:20:40 +0000
Manifest next update: Wed 26 Aug 2026 06:20:40 +0000
Files and hashes: 1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: PI+PBYC3Wt1hWDYm2QgoAKT3PKeQ97nq75dJbtPB2tY=)
2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: QATPpzGS/ZP7kNOUm90TMsTc1uCxiE2w36dBLpw4fDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Validity
Not Before: Aug 19 06:20:40 2026 GMT
Not After : Aug 26 06:20:40 2026 GMT
Subject: CN=6a854b39-f871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f3:84:39:e0:55:3a:a3:fe:66:e4:11:dd:d6:
83:c7:7f:6e:91:15:bc:47:dc:05:20:44:fd:2c:70:
fd:86:69:1c:b2:b0:16:45:04:3a:93:c6:85:9a:55:
42:a9:72:c8:a9:60:53:d7:ac:9d:c8:cf:14:5f:6c:
ea:6c:59:49:c5:84:79:37:cc:32:85:21:99:b9:3c:
1e:e1:3f:eb:25:ff:aa:e4:66:0c:f0:01:f3:cf:35:
0c:62:07:e4:6d:2b:cf:2e:d0:58:6b:c1:54:3b:02:
8c:5e:f3:e3:7c:52:75:5d:65:c8:e0:38:fd:c8:90:
a5:f9:72:d2:ed:5c:32:b7:e7:ae:13:c3:16:42:b6:
4c:a4:ee:66:91:f4:24:f5:03:73:cd:ba:76:32:1f:
fb:f3:5e:ec:41:41:67:49:7d:c4:82:6d:db:c0:63:
ce:64:d9:ee:ba:07:dc:1b:37:db:0f:e4:29:db:03:
a8:af:34:d4:5c:9a:75:59:96:7a:0c:6e:35:ba:66:
69:79:80:fc:4f:d6:5d:4f:a3:73:3e:c8:04:35:b0:
84:1e:11:a7:fc:4e:c1:82:ca:97:99:08:8d:4e:09:
3d:dd:a3:39:8f:f1:eb:cd:75:2f:cc:1f:0a:a6:2a:
1c:9d:3f:ee:f9:fc:fa:6d:6a:3a:47:26:f8:6b:ed:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A3:E5:8D:68:88:85:93:B9:B3:77:3F:C1:5E:02:B5:FE:3F:29:60
X509v3 Authority Key Identifier:
keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6e:75:64:e4:5a:b7:68:36:1f:49:91:eb:06:a3:4e:a5:8b:
5b:8c:43:61:b8:42:08:da:c2:3e:e3:a1:d9:15:90:72:9b:a6:
12:e6:bd:dd:b9:75:74:66:7c:63:9a:91:9e:ec:4d:e4:ad:92:
9c:cc:28:41:b9:1d:08:00:7c:6d:9d:6b:f0:f7:02:68:94:0a:
a9:93:25:6b:25:66:f1:5a:9d:50:47:77:b5:b3:90:4c:d2:18:
86:0b:05:4e:55:df:04:15:7f:97:e4:2b:fe:c6:1e:64:e8:f1:
0f:40:63:66:43:91:5c:18:6f:1d:73:14:0b:96:4c:52:bf:f6:
fa:dc:8c:fd:b4:d7:67:2a:ae:ce:4c:73:cc:3c:a6:3f:ce:79:
fd:a3:1f:79:96:af:95:e4:e2:50:b3:2c:2d:d7:95:9e:5c:68:
c9:96:9f:2d:fe:33:b2:1d:e8:6a:94:f0:17:b2:e0:2c:c5:60:
ab:b9:7c:cc:84:80:62:3f:48:67:3b:b1:ee:3a:4c:95:b6:04:
ba:80:6e:c7:84:ab:5d:40:43:a3:21:65:fa:d5:83:2d:1f:97:
bf:d6:e1:59:e2:b5:c3:a2:66:28:af:6f:63:47:2e:30:40:12:
46:d5:c5:ec:2f:23:2c:5c:c2:9f:d1:b7:9d:03:c3:f2:2d:ca:
69:c2:9a:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE1MDQxMTAvBgNVBAUTKDlEQ0NEMDgwRjA3MkRFMjRFRjg0MkM2QUEyOTI0OTlF
RjEzNjlCRjQwHhcNMjYwODE5MDYyMDQwWhcNMjYwODI2MDYyMDQwWjAYMRYwFAYD
VQQDEw02YTg1NGIzOS1mODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6fOEOeBVOqP+ZuQR3daDx39ukRW8R9wFIET9LHD9hmkcsrAWRQQ6k8aFmlVC
qXLIqWBT16ydyM8UX2zqbFlJxYR5N8wyhSGZuTwe4T/rJf+q5GYM8AHzzzUMYgfk
bSvPLtBYa8FUOwKMXvPjfFJ1XWXI4Dj9yJCl+XLS7Vwyt+euE8MWQrZMpO5mkfQk
9QNzzbp2Mh/7817sQUFnSX3Egm3bwGPOZNnuugfcGzfbD+Qp2wOorzTUXJp1WZZ6
DG41umZpeYD8T9ZdT6NzPsgENbCEHhGn/E7BgsqXmQiNTgk93aM5j/HrzXUvzB8K
piocnT/u+fz6bWo6Ryb4a+2KgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCj5Y1o
iIWTubN3P8FeArX+PylgMB8GA1UdIwQYMBaAFJ3M0IDwct4k74QsaqKSSZ7xNpv0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNC8zMjFCQzQ4Q0Qz
QUIxMUVGOEVCRDBDMkJDNEY5QUUwMi9uY3pRZ1BCeTNpVHZoQ3hxb3BKSm52RTJt
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25jelFnUEJ5M2lUdmhDeHFvcEpKbnZFMm1fUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTUwNC8zMjFCQzQ4Q0QzQUIxMUVGOEVCRDBDMkJDNEY5QUUwMi9uY3pRZ1BCeTNp
VHZoQ3hxb3BKSm52RTJtX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArG51ZORat2g2H0mR6wajTqWLW4xDYbhCCNrCPuOh2RWQcpumEua93bl1dGZ8
Y5qRnuxN5K2SnMwoQbkdCAB8bZ1r8PcCaJQKqZMlayVm8VqdUEd3tbOQTNIYhgsF
TlXfBBV/l+Qr/sYeZOjxD0BjZkORXBhvHXMUC5ZMUr/2+tyM/bTXZyquzkxzzDym
P855/aMfeZavleTiULMsLdeVnlxoyZafLf4zsh3oapTwF7LgLMVgq7l8zISAYj9I
Zzux7jpMlbYEuoBux4SrXUBDoyFl+tWDLR+Xv9bhWeK1w6JmKK9vY0cuMEASRtXF
7C8jLFzCn9G3nQPD8i3KacKaIQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:31 2026 by rpki-client