
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier: S7Zz2oJzekhMmJZnQdeB6/XSyxwuAV0TS+SJm01VOO8=
Subject key identifier: 0B:21:64:18:EC:F2:8C:4B:6B:90:EA:DF:2B:C0:86:14:1A:51:CD:DA
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number: AC
Signing time: Tue 03 Mar 2026 06:46:29 +0000
Manifest this update: Tue 03 Mar 2026 06:46:28 +0000
Manifest next update: Tue 10 Mar 2026 06:46:28 +0000
Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: cL+M3u1BfnBQ9Ow7ov7WPClu4k0crlKjeVugnQsLUd4=)
2: AF75682A101911F09363D44DC4F9AE02.roa (hash: zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: Mar 3 06:46:28 2026 GMT
Not After : Mar 10 06:46:28 2026 GMT
Subject: CN=69a683c4-39dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:43:fb:9e:7c:21:67:07:2b:19:16:ac:d9:
6c:72:8a:4b:67:01:67:7b:6b:05:a7:40:a3:99:cf:
b1:9f:bc:63:85:75:68:c4:81:78:26:68:e4:d8:0b:
54:0f:3a:1f:c8:20:d8:75:ed:d5:45:b8:2d:bd:cc:
a7:0c:c1:28:66:3d:a4:df:2c:fe:96:61:06:d6:8d:
ef:7e:95:dc:38:0f:a2:ff:d5:94:aa:b7:24:b5:63:
21:03:bb:90:f3:89:7c:9b:a5:38:29:74:2f:06:29:
03:c2:3f:b4:78:86:2c:18:ca:33:3e:90:5c:22:b1:
21:a9:a1:a5:e5:ae:e6:3d:6d:03:34:4d:49:c8:a6:
8c:d4:8b:e5:7d:4b:72:3c:8f:df:ea:95:3b:7b:52:
05:26:32:f0:50:9e:77:f5:0a:da:24:0e:bf:43:5e:
42:a6:01:a7:84:71:61:d7:a3:b2:6b:cf:4b:08:d2:
17:1e:85:79:c2:a2:b1:5c:ad:62:68:9d:df:5c:b1:
85:25:f1:99:34:24:5d:8f:dc:d3:93:05:2c:bb:15:
95:81:0a:68:a8:5d:d5:35:b7:78:d1:ab:74:63:88:
e5:12:fa:94:1a:66:96:19:a6:f3:a5:1a:5a:b8:dc:
6e:03:d1:47:f4:5b:1a:d4:83:be:29:05:aa:24:90:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:21:64:18:EC:F2:8C:4B:6B:90:EA:DF:2B:C0:86:14:1A:51:CD:DA
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:00:1e:9b:64:6b:4b:b9:30:84:27:ee:c3:0a:96:b2:03:e8:
05:0b:21:9e:7d:fe:38:ea:09:28:3a:ae:b3:0d:0e:79:49:db:
fb:66:30:b3:c7:b8:80:8e:d5:1a:ea:12:11:af:a7:cf:00:8c:
8c:5f:54:39:ee:95:16:ad:84:21:ec:70:ec:7a:3b:9f:79:a6:
b8:3b:38:a1:97:e5:b4:9f:27:74:87:61:fb:b3:c1:fc:8d:4c:
96:f6:4f:6d:a6:51:05:fd:d2:a9:23:50:40:7c:e4:78:bf:16:
60:97:d6:2b:38:13:ed:f0:6c:16:e5:f2:f9:fe:dd:0b:48:60:
3a:e9:ee:2e:39:5b:d4:c2:96:59:77:f3:85:e2:00:15:e4:76:
cc:32:7e:b9:40:ac:02:8c:ae:2c:ff:bb:93:97:36:9c:54:88:
57:de:68:42:a6:46:d8:d0:ee:08:86:31:38:ea:64:d1:0b:b0:
27:a9:ca:2a:87:a1:6f:ee:f4:75:bf:11:ac:90:00:7d:a1:13:
08:06:7d:cf:6c:bf:4e:c4:93:83:4f:b0:a6:de:70:07:6d:67:
91:6d:80:ef:60:51:23:4e:2a:fd:8a:03:b5:13:30:21:00:1a:
27:85:65:4a:3b:e1:7e:40:5f:7e:83:1a:a5:4e:9f:99:b3:d5:
62:cc:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:18:04 2026 by rpki-client