
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json)
Hash identifier: MXqAcLnuuB3MO166xwb3RbdjVd/fRmHNCxNc38zN6Kc=
Subject key identifier: CF:79:58:D4:26:53:A0:54:FE:54:16:D5:4A:4B:F2:CE:87:8C:B0:42
Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Certificate serial: 043F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
Manifest number: 0438
Signing time: Tue 27 Oct 2026 00:05:49 +0000
Manifest this update: Tue 27 Oct 2026 00:05:49 +0000
Manifest next update: Tue 03 Nov 2026 00:05:49 +0000
Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: 7tpX3zaiG9hsXfLLmKGHPj/0GQqh1O1mKaoWdHLoGa0=)
2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: cWZ5GSiO7fyMHvHfVtg9avvdisY3XQZ/JYleCE5yM3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Validity
Not Before: Oct 27 00:05:49 2026 GMT
Not After : Nov 3 00:05:49 2026 GMT
Subject: CN=6adfeadd-1ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6a:29:d7:e9:0a:b7:90:22:90:bb:96:73:f7:
28:3c:6a:ac:01:d1:28:61:5a:42:f3:f4:d8:bf:80:
c2:62:1d:4e:46:69:71:b9:c0:6f:10:3b:6c:a9:f5:
24:59:dd:13:1c:ae:16:eb:8d:fd:26:58:69:77:ce:
93:1f:c4:b3:88:0b:a1:08:ac:4e:c0:7c:76:fc:83:
e9:79:87:c0:41:3b:7c:8a:65:fb:4a:da:4c:2a:2e:
67:10:e7:fb:da:c3:3e:1e:3f:d1:fc:49:6c:55:b8:
00:e4:8d:4f:aa:3a:4c:cd:d7:7f:e2:3f:9e:e5:93:
0a:82:29:a6:d1:7e:4f:98:e1:e5:b3:7a:c9:cd:0e:
29:7a:5d:17:b4:b3:74:99:07:5f:a6:c2:61:9a:ee:
d4:66:11:02:a6:07:f2:35:f7:28:ed:84:d7:b1:26:
c6:aa:09:47:1e:a5:c0:09:5f:4e:28:6d:e0:d4:cb:
ff:1c:23:f6:84:de:91:79:97:be:03:c5:50:0f:d3:
3e:6b:ac:1e:c8:82:89:69:67:3f:7d:40:65:68:f3:
86:f8:29:4f:4f:f5:d2:05:0e:9d:9b:67:01:8e:78:
aa:03:ff:81:ea:a0:0d:c0:94:69:53:23:cf:7a:db:
c5:e5:36:45:01:76:d4:2d:87:a5:c6:b7:87:53:19:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:58:D4:26:53:A0:54:FE:54:16:D5:4A:4B:F2:CE:87:8C:B0:42
X509v3 Authority Key Identifier:
keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:dd:a6:c2:2b:f3:5b:8f:08:2c:1d:ff:af:93:cd:64:a8:bf:
40:c6:b9:99:6a:dd:40:54:2a:a7:00:6b:93:51:47:1b:27:5e:
a0:30:82:47:b1:ea:2a:57:e1:43:43:4d:92:db:c9:13:5a:30:
27:d1:da:6f:f8:83:99:a9:02:b8:1b:be:76:2f:bc:fa:a1:f2:
3c:bd:88:46:51:2c:66:87:43:18:e4:37:11:5e:54:6c:37:a4:
62:d6:45:76:8a:2f:b1:c3:90:53:eb:60:53:01:3f:78:7b:dd:
c8:a0:74:e2:e4:59:1c:3e:16:bd:87:ce:dd:51:5b:66:72:c0:
85:5a:66:96:ae:93:38:96:1f:e9:e7:89:91:aa:c6:05:64:44:
3b:25:f4:e8:97:74:c9:52:c3:75:d4:b4:6e:04:2a:e1:aa:d7:
3b:5a:47:0d:e5:9a:b2:1e:c9:91:a4:49:75:49:61:aa:ba:8e:
fc:ff:1a:c1:3d:7a:d4:74:28:bc:50:dc:03:41:22:c8:c7:06:
bd:4b:14:12:fb:a2:3e:96:67:58:47:dc:cc:ac:1a:fe:75:55:
17:d7:61:ac:2f:8f:b7:6b:28:76:bd:99:6b:1f:e5:dd:85:b3:
2a:24:d1:56:8a:4b:a2:93:99:90:02:63:af:b6:73:46:03:1f:
80:af:90:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:44 2026 by rpki-client