
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
File: nsFL4ukyPgKo_DpiFJocquNnLbM.mft (raw, json)
Hash identifier: 2IxQCpWty5WW0cAcdS64U1Evurww7cBCr1p/bjnJgjg=
Subject key identifier: 24:3A:22:F7:59:65:0B:F2:89:5B:3A:B7:E6:32:BD:C2:84:E5:D9:41
Authority key identifier: 9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3
Certificate issuer: /CN=A9175AEA/serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
Manifest number: 6A
Signing time: Fri 09 Oct 2026 08:47:24 +0000
Manifest this update: Fri 09 Oct 2026 08:47:23 +0000
Manifest next update: Fri 16 Oct 2026 08:47:23 +0000
Files and hashes: 1: nsFL4ukyPgKo_DpiFJocquNnLbM.crl (hash: YYH8bicDZuWd6Vwl3/TE39vYqGlzuNlhHdRQHj6Awcs=)
2: 439B1DD4265C11F1BAFB3333A5833773.roa (hash: Dxatxl0qTUfSTcpFhvzbVVvCfebatpASoJvF3ceeN4E=)
3: B62F5378265811F1B0D864DEA4833773.roa (hash: 7B8gmV6iHverE08GlcTlaq7wwspFdqgeT6UL4102FlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl
rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175AEA, serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
Validity
Not Before: Oct 9 08:47:23 2026 GMT
Not After : Oct 16 08:47:23 2026 GMT
Subject: CN=6ac8aa1c-3249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:25:e2:32:d3:1b:b3:91:69:11:38:af:2f:
2a:83:d9:49:19:c9:33:85:40:e3:13:a3:3c:e3:c7:
5a:29:09:2f:ea:dc:e3:ac:82:f4:42:77:00:eb:64:
d2:26:ed:71:33:dc:50:08:b7:4c:be:72:b6:70:23:
69:b7:d6:9e:c5:6a:f6:f7:b8:02:56:9e:7b:4e:15:
95:43:e9:9d:a7:bc:aa:3c:27:6e:fc:b3:a4:7f:2a:
24:c6:13:e7:32:71:bf:59:1c:c3:4e:a8:86:13:bd:
96:31:b0:ab:50:39:21:63:78:3d:41:38:5c:f9:82:
ab:c9:fe:52:3e:b9:ab:96:0b:c4:bc:ef:4e:d8:43:
42:5b:8c:b3:62:e0:79:20:fe:aa:a9:8d:38:94:bb:
68:39:02:cb:ff:3a:3b:d1:db:d6:f1:e6:fb:09:a0:
c4:c6:f4:30:8a:e0:31:df:97:d8:d7:29:2a:f8:b5:
5d:21:7f:81:c3:5d:7c:06:92:74:93:40:07:ff:15:
5b:42:d6:76:1e:b3:fa:33:01:30:ee:4d:35:84:34:
73:80:c8:6c:11:e8:98:b3:45:fe:51:55:cc:89:78:
fa:de:e1:a9:a1:3c:2f:7d:31:47:59:f2:5c:38:67:
3b:4e:d2:93:4f:06:b7:d4:45:04:0a:9f:ac:fd:01:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3A:22:F7:59:65:0B:F2:89:5B:3A:B7:E6:32:BD:C2:84:E5:D9:41
X509v3 Authority Key Identifier:
keyid:9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:03:7a:7a:6a:44:c9:7a:32:0b:df:b9:07:a8:73:01:f0:10:
bc:f3:2e:b2:2b:bf:a4:73:7d:8d:d0:04:c3:91:34:12:4f:df:
50:4a:99:15:fb:71:ec:c5:65:e2:de:d9:4a:bd:b5:39:14:0a:
75:3b:c1:5b:07:88:d5:df:b0:ea:5d:4e:88:c1:03:9e:1d:f6:
30:46:3c:10:f3:d2:c3:8a:fd:d2:68:f1:bf:1b:8f:42:b0:f5:
63:26:42:06:21:53:b0:01:9d:52:90:e5:97:22:bd:f8:0b:15:
79:83:1b:20:02:e6:9f:ef:f7:58:ea:5f:b7:c0:e2:6e:52:c1:
89:5b:c2:79:7a:ff:69:9a:29:32:94:9d:b2:e1:43:71:99:5b:
c0:52:b0:6d:ff:0d:3e:1d:65:5e:85:a4:c7:0d:5a:aa:89:8a:
71:c6:49:f1:7c:4c:60:81:a3:d8:3a:3e:69:78:80:8a:62:19:
c8:d8:c2:54:99:eb:49:b4:e7:c6:09:f5:4b:4b:0e:b6:e6:45:
df:b7:30:a9:49:7b:eb:60:05:bf:b7:93:2b:96:9c:1e:89:39:
81:2a:d1:74:cc:b5:7f:12:37:3e:10:0f:a9:c5:11:6c:d4:ef:
fc:0e:42:2a:2b:f1:0b:a6:97:46:3e:55:88:7d:47:c2:36:b9:
16:67:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:12:19 2026 by rpki-client