
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json)
Hash identifier: BKLzIdAWU/QJisWlkS9hoz7DXAHL05ZwbasbDzvj5lE=
Subject key identifier: 02:34:46:3B:45:67:48:55:13:61:26:43:B4:6F:F0:5A:48:86:68:A3
Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
Manifest number: 0109
Signing time: Tue 21 Apr 2026 05:56:14 +0000
Manifest this update: Tue 21 Apr 2026 05:56:13 +0000
Manifest next update: Tue 28 Apr 2026 05:56:13 +0000
Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: L8M9yHx4V5BARvHiD0y8CFaZ1ankObpJkIyrvwqCIw4=)
2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: cNiuneTPpAk/1Up/27Y7yEVc2t/NxzEM4qlSWeyAw6E=)
3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: rgdWivD/zFCykGa3ALQEG38H7edm211EbAOpvttCktk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 05:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Validity
Not Before: Apr 21 05:56:13 2026 GMT
Not After : Apr 28 05:56:13 2026 GMT
Subject: CN=69e7117e-6caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:a8:43:4e:b7:a7:66:82:68:77:fc:75:a8:
aa:bd:d5:22:bf:87:0c:c0:e1:db:93:cf:3a:68:73:
49:15:d6:52:37:64:4e:78:c3:68:8b:10:a6:7e:7d:
c7:c4:96:25:84:8f:d1:5a:b0:3f:3e:4b:4a:cf:a5:
a6:89:2c:82:9a:c3:06:f6:a6:29:3e:4d:69:66:23:
be:ba:e3:76:91:93:bc:fc:fe:09:0d:ab:4b:59:2c:
e1:ee:8c:7a:52:cf:7b:0a:59:7c:28:70:06:43:dd:
f9:40:14:c4:5f:31:69:9c:e1:e2:2a:66:a4:0a:c1:
5e:77:a5:8f:20:0f:81:48:31:6a:f4:25:fc:0f:db:
13:69:56:47:9a:18:94:6e:c1:35:f7:df:96:e4:82:
a4:dc:43:94:07:24:20:7e:8f:72:91:da:a6:2d:59:
b0:0b:ef:84:0d:63:05:2e:61:24:14:d6:a1:8c:56:
a9:32:78:32:75:40:a6:4e:4a:13:7e:56:b8:27:31:
7d:9f:f1:1c:cb:d7:f8:66:b7:c9:a8:20:fb:70:d7:
0b:b2:6d:36:2d:79:27:80:f0:a3:1f:c6:e2:39:d6:
f5:69:d1:b9:33:4a:27:a8:3b:57:ea:d1:45:63:9b:
9c:f9:06:83:b0:70:25:46:07:77:5e:86:e0:fb:fd:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:34:46:3B:45:67:48:55:13:61:26:43:B4:6F:F0:5A:48:86:68:A3
X509v3 Authority Key Identifier:
keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:10:8b:b5:d0:59:90:99:ee:1a:6f:95:e7:77:86:1d:81:17:
f6:c4:c8:a2:89:3f:ae:63:03:92:67:0c:88:8a:d8:d6:1c:5d:
1d:74:37:a7:a2:cc:6d:cf:ed:cf:9b:e6:0f:c0:53:dd:8e:74:
6c:c3:24:0d:1e:13:bb:73:af:06:c8:c7:61:9c:b3:32:73:be:
9e:1f:cf:2a:c9:e3:3f:ed:7e:a2:61:dc:a2:d5:31:71:9b:b5:
bf:07:d5:99:65:d7:60:fe:e3:e9:b3:e0:27:fa:79:a6:dd:91:
44:78:09:30:76:15:5a:37:be:4c:45:7a:5a:e8:19:82:b5:cc:
d0:55:dc:07:0c:af:88:29:aa:da:40:78:db:e6:2b:b0:f6:d2:
60:a2:ab:45:c0:7c:1f:37:c3:af:19:de:3c:82:77:a4:98:c9:
c3:e9:26:03:b0:81:11:8a:ed:1a:da:31:ee:d9:8d:0f:b4:dd:
2e:84:c2:b4:f4:70:f8:3b:ad:36:ca:2d:c4:de:b3:51:fa:1d:
6e:40:10:6c:f0:b5:43:d5:1a:72:73:fe:1e:04:74:05:6a:fb:
e3:53:47:d2:2e:47:42:f7:7b:b0:5e:d8:bf:a8:c1:06:22:6a:
e2:00:82:f6:91:fc:19:8c:70:c3:4d:d1:00:39:40:90:8e:6c:
3f:2e:1c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:01:30 2026 by rpki-client