
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
File: nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json)
Hash identifier: 0krhOCXrdvQH54I/sa/fQTldxIroVbmvJI3eWZH2xFU=
Subject key identifier: 9F:33:D5:8B:A4:16:2B:D2:58:6C:7E:79:A5:94:3D:30:83:AD:F9:FB
Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
Certificate issuer: /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Certificate serial: 0566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
Manifest number: 0566
Signing time: Tue 18 Aug 2026 23:41:37 +0000
Manifest this update: Tue 18 Aug 2026 23:41:36 +0000
Manifest next update: Tue 25 Aug 2026 23:41:36 +0000
Files and hashes: 1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: FBkbLA+5HYmKnLkeu7lVpv9WD7Ybv/8lNdUvBYE/6wo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl
rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3, serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Validity
Not Before: Aug 18 23:41:36 2026 GMT
Not After : Aug 25 23:41:36 2026 GMT
Subject: CN=6a84edb1-6659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:94:a0:bf:89:17:f3:53:1e:c6:2c:85:78:
1c:ea:19:ed:87:30:09:4e:ec:fe:da:94:00:d1:60:
5d:bb:4d:07:40:fe:5d:56:87:5d:8f:80:cd:7e:c1:
6c:85:a0:ff:b8:7f:d1:b0:c6:6b:ce:0e:a0:a4:27:
f5:94:5a:91:05:cf:b3:ea:db:8a:3c:48:06:2e:a1:
89:27:f9:ed:0f:95:c9:12:19:87:2b:43:ab:2a:f0:
4d:60:a2:62:4c:b4:23:f7:7a:07:2e:88:ef:c6:cf:
8d:ff:a6:36:b3:dd:dc:04:97:2a:e3:22:8b:9d:e0:
88:ed:81:37:52:73:8b:6b:ca:ee:13:ff:24:fc:02:
f4:00:9d:b0:97:d6:d9:48:e4:14:b8:9c:a0:f6:5e:
ef:0e:26:c9:21:5a:f2:9d:3a:1b:62:be:23:70:93:
11:d0:0d:c8:52:25:b0:1c:d2:a6:a8:25:7a:31:2f:
f4:ff:b4:39:c2:58:3d:65:87:08:2e:f4:47:1d:a5:
66:19:5d:08:b4:2f:a4:27:b4:aa:5f:20:f4:12:9a:
a0:02:26:c1:58:be:ef:5d:47:f6:66:1b:e4:37:ae:
fd:cb:1d:fd:eb:5e:73:c0:fe:b0:d1:b6:60:2f:32:
d1:49:6f:58:b2:1f:f1:f1:9c:8e:30:8e:3d:b3:63:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:33:D5:8B:A4:16:2B:D2:58:6C:7E:79:A5:94:3D:30:83:AD:F9:FB
X509v3 Authority Key Identifier:
keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d8:07:96:83:e6:36:8a:af:e2:d1:15:e0:44:77:77:ea:e3:
8f:e5:dc:b3:5c:4a:4b:40:5e:81:7f:26:0c:87:00:08:de:b8:
9e:0f:2d:10:46:85:7f:56:bb:4d:83:4e:22:ae:5e:40:0f:50:
fd:b6:a5:24:06:f0:f7:fe:95:29:60:b6:92:cd:f6:c1:f4:28:
8c:4c:f2:c3:b3:d6:2e:a2:85:3a:45:15:ef:4f:2e:07:6b:16:
06:0b:4b:b6:21:96:b6:fc:c4:12:fb:1c:e7:f6:6b:67:5c:c7:
24:02:2a:6d:c4:57:1d:a2:d3:7f:c1:29:21:03:d8:62:8d:49:
67:74:df:3e:14:b2:20:62:02:d6:27:6c:a2:85:41:f0:73:0c:
53:1c:fd:35:d1:18:bd:cf:a0:f6:d3:b4:98:4c:f7:5e:26:e6:
e3:5f:f2:e6:41:d5:e8:5d:41:9d:ab:97:2f:dd:b6:59:63:ce:
12:7a:e9:19:a7:fd:10:10:87:96:24:bf:99:5b:f5:a9:30:62:
97:98:16:9d:b7:c2:33:cb:bf:b6:e5:8b:d7:c6:85:43:fd:b4:
1c:26:a6:40:7b:d1:10:c3:8a:f7:b9:84:ae:b2:61:67:ce:b4:
22:fd:54:b8:51:70:6a:82:de:a4:bd:ae:ee:a1:90:f6:44:d2:
f0:ac:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:19 2026 by rpki-client