
$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json)
Hash identifier: bupMccmAOaaxhhTEwYJYfvvJ4xKzjWl14cQhBqk27u4=
Subject key identifier: BB:41:86:48:04:B9:30:AB:36:36:21:A2:ED:97:56:06:0D:4D:F3:21
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial: 091D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
Manifest number: 08DF
Signing time: Sun 26 Jul 2026 21:13:27 +0000
Manifest this update: Sun 26 Jul 2026 21:13:26 +0000
Manifest next update: Sun 02 Aug 2026 21:13:26 +0000
Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: pmVmph1eJzFPYmrlJtFHptuvmOx1YBYcSrtCFkyWqwg=)
2: 30A238FA7C0311F192D3088B8FA30FBC.roa (hash: X1FnYer6ian8Ac0sFfx3IyMLAtIA4fKJbnOQ0obiOyY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2333 (0x91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Validity
Not Before: Jul 26 21:13:26 2026 GMT
Not After : Aug 2 21:13:26 2026 GMT
Subject: CN=6a667877-5604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:75:d2:cf:9e:df:4e:b8:34:53:fe:d6:04:
5c:f1:bd:55:a4:a4:a3:0f:c1:63:59:05:f2:33:cb:
3f:6a:95:ce:54:be:a9:11:ac:ce:5f:4e:64:74:f8:
cb:36:c7:de:40:3b:d5:41:2d:91:e3:a6:a4:74:bb:
ce:0a:0c:5d:16:8a:18:94:87:e3:5b:07:45:bd:4c:
1b:c4:11:b1:9f:da:77:be:bd:67:92:78:ee:ce:83:
35:db:ec:6a:bd:81:36:43:4d:ef:f9:f2:28:8c:29:
28:70:6d:f2:b6:e5:e9:82:16:91:01:d8:40:bb:27:
3f:e4:b6:45:1d:70:72:be:c2:b9:19:d8:57:a5:9d:
29:b9:26:aa:23:7d:37:ca:9e:5d:fb:84:1e:98:e6:
d7:35:96:e2:d2:47:eb:e8:3a:a7:1c:15:2a:d7:b1:
09:35:0e:86:eb:62:81:9a:82:1f:6f:4c:ff:d0:17:
60:d3:15:83:ad:78:61:c0:07:b6:a9:33:9f:20:14:
6d:d8:ad:36:18:e6:a9:5e:84:ad:f7:6a:f9:88:ed:
27:84:b7:71:bc:20:80:95:61:78:8b:0e:c5:6f:a9:
c0:d6:04:7c:db:cd:59:0e:6a:59:2a:75:c4:d7:76:
7f:4a:f2:a4:f1:a7:b9:d0:8f:91:4b:75:c6:ea:85:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:41:86:48:04:B9:30:AB:36:36:21:A2:ED:97:56:06:0D:4D:F3:21
X509v3 Authority Key Identifier:
keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:7c:f2:10:38:56:04:a0:ba:b0:c8:d0:d3:4c:50:23:a4:80:
35:25:24:21:6f:5a:d4:d8:c4:5f:89:66:4c:c0:38:b6:3b:04:
7e:11:07:f4:a5:e3:25:53:4d:60:24:10:a4:49:7b:4e:dc:db:
c1:1e:4e:e6:fe:ae:7f:a9:9d:01:d9:1e:db:6a:cd:53:fd:49:
3c:80:15:33:e8:63:1d:83:d8:26:97:6e:a7:42:49:50:ad:c5:
cb:cb:75:b1:30:a2:de:7c:f3:66:72:93:a6:06:e7:0e:f8:37:
14:81:58:e0:97:c0:c2:e8:a1:98:d6:96:6d:3e:65:b6:48:0e:
9a:ce:32:93:61:4d:60:32:b9:7f:d5:8f:f9:cb:c5:07:d4:a9:
34:ea:5d:f9:b7:f1:ef:fc:00:92:c6:cb:5a:d6:c3:ad:f5:31:
c3:10:62:33:5e:cc:16:c2:49:c4:5e:52:86:20:60:a7:88:a5:
17:30:c5:66:9e:45:94:7e:8c:a2:09:35:65:82:78:94:f4:97:
8c:42:a1:0f:72:47:6f:3a:7a:8c:d1:d8:5b:85:84:40:e5:74:
e4:98:cd:a9:99:30:ee:25:ca:32:2d:7f:49:59:76:26:93:81:
d5:d1:ec:89:90:a4:db:49:8f:10:84:93:f0:4a:0d:92:60:77:
a2:9b:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:15:40 2026 by rpki-client