
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json)
Hash identifier: 1I5MKn4PU4Qhy8APN1/YE0jiCS7zLCsJEG1g5QS+t6g=
Subject key identifier: 9D:9D:EC:67:9F:62:C4:84:89:62:F0:EC:81:18:F4:01:9E:E3:B6:C0
Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5
Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
Manifest number: 015E
Signing time: Wed 07 Oct 2026 05:39:20 +0000
Manifest this update: Wed 07 Oct 2026 05:39:19 +0000
Manifest next update: Wed 14 Oct 2026 05:39:19 +0000
Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: eAJCiI4AvA4SJUiNWQWVG7t8HC3cggP+1vNQ1Qa834Y=)
2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: xq7YEvfaNzXWM/9MQqDfYNsSlsB3/7fTEB/zk7EcfRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl
rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5
Validity
Not Before: Oct 7 05:39:19 2026 GMT
Not After : Oct 14 05:39:19 2026 GMT
Subject: CN=6ac5db07-3b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:59:49:5b:83:3d:70:ea:e2:7a:17:fc:09:
ca:c1:33:38:23:0e:6f:64:00:df:f5:72:59:b7:71:
df:ed:44:b7:bc:5c:81:5c:52:4e:79:67:67:34:63:
b4:c5:89:b5:5c:9b:c4:4d:b8:0d:43:6c:14:84:20:
4b:4d:48:dc:32:44:49:17:ad:d9:3c:76:ff:e2:4a:
b4:29:0a:cf:cc:03:7e:b1:22:0f:8b:d5:ae:7f:a6:
cb:bb:9d:c2:c7:56:56:d7:2c:31:c3:78:6c:1d:41:
71:11:6e:37:a4:dd:01:f4:69:b2:ab:c2:50:82:3c:
71:4f:cf:f2:dc:89:ff:1c:07:4a:3a:55:64:c1:f0:
2d:1b:b7:e9:ca:d5:e4:c1:4f:93:52:f7:37:64:8c:
45:0d:dd:c4:df:79:e8:62:d9:7e:90:7c:73:f9:54:
fa:0e:55:7f:7f:29:e7:66:3d:8c:1e:3b:10:87:c1:
da:44:aa:07:93:39:12:27:4b:15:37:2f:67:8a:19:
a1:bd:b3:34:6c:28:cf:35:44:db:62:4a:7b:27:3e:
5a:d6:7e:08:30:eb:80:dc:cc:90:a5:3e:42:91:99:
db:42:e6:f4:f3:4e:3c:83:a6:dd:4b:71:58:f6:23:
8f:ac:51:9f:d5:4d:40:f3:3b:4c:68:f6:c4:61:ff:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9D:EC:67:9F:62:C4:84:89:62:F0:EC:81:18:F4:01:9E:E3:B6:C0
X509v3 Authority Key Identifier:
keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:05:f1:c8:ac:77:d7:9b:d0:b1:08:bc:02:ee:bf:fc:e4:3c:
a7:64:9b:ba:4e:da:be:0d:5e:b3:8b:2f:38:b5:da:a2:d4:dc:
de:ab:9a:dd:b5:ec:8e:9f:7f:c0:79:1f:22:1a:2e:b0:69:2a:
81:91:e3:72:8b:65:1e:1d:fd:d3:98:78:77:80:4c:1d:95:f2:
e6:ed:93:0b:a9:5d:c6:7d:3f:8e:38:fe:31:d8:24:e0:86:d9:
be:3b:f5:33:15:e4:4a:3c:bb:4d:b1:12:04:17:4d:e9:c2:c2:
c5:00:f6:d1:6c:a5:a7:6f:9d:11:69:a8:2e:06:d6:d6:22:bd:
77:86:90:09:12:18:30:d2:be:38:11:d8:c0:23:78:c6:57:b1:
2a:5f:b0:e1:31:40:26:e3:7e:92:55:8d:0e:0d:61:a3:1a:04:
26:b6:9d:9f:94:41:51:64:10:2a:a5:6e:c9:74:ea:a8:da:ad:
99:cc:95:0a:2c:73:c7:db:55:82:c9:3f:9a:20:ac:71:c2:67:
1d:22:f3:e0:1d:62:64:a5:02:62:c7:c5:ee:19:ec:a3:0a:0d:
d8:9d:cc:b3:6b:af:ac:64:58:53:0c:6f:cc:94:27:73:e2:54:
e9:de:1b:aa:14:b6:5e:ec:bd:69:33:88:31:2d:55:fe:fc:cb:
9f:21:eb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:57:00 2026 by rpki-client