
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File: nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier: bIRKRhZ6JigoiH4wIV+WVgcayYdwIc9ulRBgS3mhGPo=
Subject key identifier: 11:CC:B1:F6:68:13:A7:44:B1:60:75:2E:FA:4A:78:C6:5A:C7:5F:84
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer: /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number: 0117
Signing time: Tue 23 Jun 2026 06:14:31 +0000
Manifest this update: Tue 23 Jun 2026 06:14:30 +0000
Manifest next update: Tue 30 Jun 2026 06:14:30 +0000
Files and hashes: 1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: TWBDb32P1ZWLnJ5XoYjvVi0+6hSF/3MwK++1j3e/k/4=)
2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: QATPpzGS/ZP7kNOUm90TMsTc1uCxiE2w36dBLpw4fDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Validity
Not Before: Jun 23 06:14:30 2026 GMT
Not After : Jun 30 06:14:30 2026 GMT
Subject: CN=6a3a2446-38ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:09:ce:2b:be:2b:70:87:b7:62:80:c4:d7:4c:
9e:ce:3a:bb:7a:8a:6c:6e:cf:75:17:11:a4:97:32:
9f:b2:39:f0:16:1a:be:64:16:ca:69:3a:eb:fe:b1:
b5:32:72:62:b9:28:96:de:7b:ea:5e:82:6a:92:b2:
67:1b:04:99:be:ed:98:52:a4:db:f4:0f:5b:2d:eb:
42:97:5a:ff:52:84:54:a0:31:ee:35:05:70:95:60:
6e:ec:ca:69:2a:02:5e:5b:af:30:8f:bd:23:b1:a6:
2a:d8:28:89:9f:14:67:3d:56:d2:bb:2c:86:46:7d:
45:4b:cf:ec:cd:8f:9c:4a:e2:80:97:eb:6b:8f:52:
5a:31:46:6a:8d:d8:83:ae:b3:f6:06:33:e9:e6:19:
f9:d5:bb:0c:87:bb:0c:5e:3e:9c:e8:23:0d:4c:e5:
c9:40:f3:0a:bc:21:9a:3f:2e:93:24:6b:38:e9:2b:
82:6f:19:06:5e:98:25:ff:9b:ff:9c:c1:c4:8e:cf:
f7:36:06:d9:07:37:85:1c:96:e5:ab:72:5c:b3:f0:
fc:ad:61:b4:f7:74:d3:85:37:9f:22:86:5b:12:94:
7d:33:5a:b1:83:13:2b:06:cf:b7:9b:1b:e7:45:09:
6a:97:6b:d3:24:dc:d7:cd:04:f1:41:78:eb:3a:14:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:B1:F6:68:13:A7:44:B1:60:75:2E:FA:4A:78:C6:5A:C7:5F:84
X509v3 Authority Key Identifier:
keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:23:6a:84:b1:91:bd:53:f9:7f:3b:de:31:df:ef:13:b9:c7:
c6:10:f3:38:2a:2d:c9:1e:74:a2:4e:c3:b6:6b:91:b9:8a:2e:
59:0d:f5:4a:13:89:d3:bb:8a:87:d3:4d:77:d8:84:29:5f:51:
80:6b:5d:ce:99:01:bb:aa:4f:bc:f9:70:8d:06:73:b8:35:a3:
5a:5c:10:43:f3:ee:d6:46:d6:41:d1:f7:8a:9c:e2:70:2b:33:
49:6f:09:fb:a8:9b:18:8c:81:2a:37:51:7c:7b:ec:a7:ab:e7:
c0:f3:55:7d:47:b8:e4:ba:41:10:14:69:85:c6:c5:28:55:19:
14:5f:eb:28:a0:87:21:d5:07:0a:e6:28:ae:90:70:45:54:29:
f8:17:2e:4f:de:0a:30:52:61:a5:50:0f:19:3a:e4:40:5d:e7:
f9:6d:c1:0d:07:f8:1d:e7:54:56:8d:cf:b6:d7:bd:19:f8:7c:
0c:23:e8:c4:73:a7:0b:5d:b4:8e:95:97:e5:2f:95:ee:a0:01:
43:2f:4b:ce:ea:dc:2c:87:96:91:92:05:f0:a1:c1:95:34:42:
b3:d1:6d:e0:6f:d5:98:b2:da:f7:96:4e:86:a1:97:db:3c:44:
1a:ba:58:a2:d7:67:5a:c7:4f:04:b3:60:d2:76:1a:fa:db:70:
64:45:df:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:23 2026 by rpki-client