
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier: Rwmp3fpJR5Y9BDKF4xD459CKXC0a6Ont6yGiCAya0zo=
Subject key identifier: CF:8E:8F:94:53:C9:D2:37:68:92:73:92:0B:04:91:B1:5D:5E:18:D7
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number: DA
Signing time: Mon 01 Jun 2026 07:25:36 +0000
Manifest this update: Mon 01 Jun 2026 07:25:36 +0000
Manifest next update: Mon 08 Jun 2026 07:25:36 +0000
Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: 6CIcW4qG5vErZR+jMjHs+5YUN85vn+pvj9p1FujwZnI=)
2: AF75682A101911F09363D44DC4F9AE02.roa (hash: zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: Jun 1 07:25:36 2026 GMT
Not After : Jun 8 07:25:36 2026 GMT
Subject: CN=6a1d33f0-f3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:1f:93:52:0c:98:75:27:c9:66:a9:06:10:
91:7f:d0:ee:8b:03:e9:4b:64:d8:49:d4:e4:56:af:
e1:2a:76:ee:81:7f:7d:09:a3:4f:37:82:d0:7e:c7:
ed:24:60:b6:72:2b:39:ad:b2:95:05:2d:a4:07:d7:
60:43:ec:23:ab:02:30:6d:07:17:0b:68:eb:cf:23:
d5:4e:80:98:bf:52:c5:b5:36:e8:a6:2e:a1:52:ea:
19:fa:a6:79:32:79:74:c1:c6:85:d7:c5:2e:d0:43:
49:d6:35:9c:df:4b:31:60:f5:26:c7:0b:c4:ea:85:
2b:aa:8f:79:0a:e3:6d:9c:10:d4:5b:3a:1f:73:94:
8a:a1:6a:19:f6:60:da:6a:c7:dd:41:8f:b0:76:7b:
f3:bf:34:ef:0b:fa:e9:87:0c:c1:cb:e7:57:6e:9b:
51:db:ca:e5:86:c4:11:e8:65:45:05:81:bc:1d:7a:
dd:20:fd:be:a4:aa:7c:b8:fb:03:d0:ce:b6:1c:7a:
e6:71:63:4a:a5:c8:a7:6d:71:b3:94:13:f0:e1:c9:
2c:23:87:9b:2b:79:c4:b2:5e:9f:7d:af:8c:77:38:
66:17:b5:19:0a:94:5d:b3:5d:17:97:e6:dc:66:be:
68:63:2e:1e:5a:41:90:ba:13:e8:9a:9b:db:44:22:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8E:8F:94:53:C9:D2:37:68:92:73:92:0B:04:91:B1:5D:5E:18:D7
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:35:f7:bc:37:8e:00:ab:d1:87:48:8b:01:75:1c:7b:ba:9b:
49:af:5b:c6:ff:c7:33:df:1d:b7:79:22:7a:6d:71:f0:6c:2d:
1d:eb:2a:19:7b:c5:5c:80:84:ff:40:f4:c5:8a:bd:27:ef:d8:
5b:59:76:68:6b:4b:4e:96:c2:42:03:4e:ec:a1:b9:4e:f2:00:
d7:a8:fc:b7:36:93:34:65:64:51:41:11:5a:be:a8:d1:c9:5d:
57:df:22:d3:da:d7:b3:d0:df:f5:31:b8:2f:df:58:9e:5d:3e:
85:e2:20:44:ba:00:65:07:b3:14:3b:44:ee:d7:40:f1:cf:99:
a1:ed:dc:f8:23:d7:2f:13:ae:f7:7e:9a:3f:02:11:03:e0:42:
69:a0:7a:75:17:c5:1b:ac:d5:e3:ac:07:ea:64:a8:d3:c5:90:
fe:dc:72:b5:25:4d:64:ba:cc:22:34:ef:e9:35:53:72:a7:9c:
81:e9:b2:ea:4f:16:61:2f:f3:29:32:1d:0c:0d:1e:1d:dd:08:
0b:29:16:16:f8:79:ea:84:ed:f1:71:d2:3d:e3:09:1b:3f:cf:
5d:89:07:d5:df:21:62:2b:79:3c:4a:88:50:b4:53:0e:d0:c6:
53:aa:ea:49:1e:f9:b3:45:e5:d2:fb:14:2a:fe:2f:b5:9e:3f:
96:2c:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:37 2026 by rpki-client