
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json)
Hash identifier: oZ30BGhkFVz9qxljsHV8QCRqxoiywqt8g3Fy/yMtXKs=
Subject key identifier: 37:1C:01:91:2E:46:8F:AA:ED:12:0F:3D:E5:42:25:7E:E0:8C:A9:6B
Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
Manifest number: 0166
Signing time: Fri 23 Oct 2026 05:36:49 +0000
Manifest this update: Fri 23 Oct 2026 05:36:49 +0000
Manifest next update: Fri 30 Oct 2026 05:36:49 +0000
Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: +Ot7OYhu6jtks1iuvARE9b+mb/SUytKtkbmcxXAp4jk=)
2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: cNiuneTPpAk/1Up/27Y7yEVc2t/NxzEM4qlSWeyAw6E=)
3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: rgdWivD/zFCykGa3ALQEG38H7edm211EbAOpvttCktk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Validity
Not Before: Oct 23 05:36:49 2026 GMT
Not After : Oct 30 05:36:49 2026 GMT
Subject: CN=6adaf271-4377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:42:a5:33:41:2f:09:24:45:91:1f:c0:aa:
ba:f5:53:ca:aa:0a:8e:55:f0:ae:0c:1d:d6:7b:1e:
d6:c8:0c:f3:cf:6e:fd:5e:1b:86:04:59:5c:35:79:
27:5d:b5:8a:8f:32:04:c2:1b:d8:70:ff:c0:b2:e6:
4f:d9:b8:2d:d0:ab:a2:b6:ec:dd:ee:38:94:8c:52:
1e:28:37:3f:d7:59:dc:aa:75:29:2a:f9:4a:9c:87:
78:9a:22:c7:14:bf:a6:30:a3:48:80:47:1c:34:7a:
e5:50:a7:08:a0:d6:02:3d:6d:0f:92:32:87:f8:8d:
2d:d7:e8:24:9f:43:d9:9b:53:7b:fa:91:de:ea:96:
2c:7b:88:e4:45:11:50:7f:b9:d3:09:8d:7e:6e:8d:
b9:c4:20:25:85:b0:a7:02:93:7d:30:d9:b7:6a:29:
b4:f3:24:88:46:cf:19:e8:7c:dc:12:26:26:fc:98:
51:46:b5:c9:5d:65:3f:23:87:14:13:c3:de:f0:e4:
ef:0c:41:03:bd:c7:82:fb:48:11:9a:07:02:52:87:
b1:b9:db:f4:1b:3b:35:a1:70:ad:67:1c:94:b6:7c:
44:b8:c3:ff:0b:41:c7:3a:9e:16:1e:52:05:37:c3:
cf:24:ee:b0:da:82:24:fa:de:e3:f0:64:b5:73:43:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:01:91:2E:46:8F:AA:ED:12:0F:3D:E5:42:25:7E:E0:8C:A9:6B
X509v3 Authority Key Identifier:
keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:df:a9:29:9e:63:e2:21:e1:9b:a2:61:1f:7d:a7:40:23:e5:
36:d8:1f:05:10:a4:1c:53:09:43:05:d7:d8:a2:ae:58:97:fd:
d0:fd:f8:29:11:e2:2e:7a:98:b6:c5:23:47:e0:f0:cd:d4:4d:
d0:92:df:2f:8a:c4:bb:8f:cc:69:25:5a:db:ce:c6:b2:ec:e6:
48:d4:50:5f:b7:83:d7:3f:81:bd:d8:2a:57:83:0a:7e:f9:21:
9b:d9:60:ae:7c:ec:38:8d:ce:0e:1a:c0:84:41:f3:4c:70:74:
64:b6:ab:7d:58:13:a7:b5:fb:2b:17:35:d6:b0:1b:4e:c4:96:
a7:0d:0f:4d:6f:56:68:29:b3:f8:03:9e:e4:1f:43:3e:c4:80:
70:d9:7c:85:5a:ce:ad:75:09:2d:18:7e:b8:ce:74:75:ad:97:
e0:14:bb:be:3c:b7:ab:9c:f1:20:2b:57:81:1d:39:82:e7:92:
50:dc:7f:93:16:43:34:42:bb:16:0e:fa:f5:e0:c4:ca:8c:26:
7b:0f:bc:92:d2:4c:1e:95:ee:99:65:a4:fe:b5:ae:0a:e0:87:
6b:e0:63:46:74:ef:6d:26:5c:0d:a9:71:44:f8:f3:2d:f5:41:
4f:44:77:c2:ef:81:e6:7f:c4:0d:de:eb:8c:6d:1d:7b:1a:6f:
c0:87:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:29:57 2026 by rpki-client