
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json)
Hash identifier: CefrAQ9f7rECQIIlJ4t8bcRbhdl6q/r1gdAOTjbG790=
Subject key identifier: 41:5F:19:E5:91:B5:AD:99:81:2E:30:3A:72:A5:F9:C4:AF:1D:EC:7B
Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Certificate serial: 03F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
Manifest number: 03F2
Signing time: Thu 11 Jun 2026 02:36:04 +0000
Manifest this update: Thu 11 Jun 2026 02:36:04 +0000
Manifest next update: Thu 18 Jun 2026 02:36:04 +0000
Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: 1jgs7Lmv9YruvyfptwnsT3AdKAUR5x3K9ZNqDlJpccM=)
2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: cWZ5GSiO7fyMHvHfVtg9avvdisY3XQZ/JYleCE5yM3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1017 (0x3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Validity
Not Before: Jun 11 02:36:04 2026 GMT
Not After : Jun 18 02:36:04 2026 GMT
Subject: CN=6a2a1f14-d8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:e7:f6:98:c2:cd:43:e1:19:a0:f1:3b:8c:
08:29:0a:d2:5a:89:7f:c4:68:85:31:71:45:51:3e:
da:9a:6c:54:fc:9d:30:fa:5a:eb:72:a1:bd:bc:87:
fd:76:46:4d:22:86:aa:6b:e3:d5:f7:1b:5d:51:d2:
58:54:71:97:b7:5d:ca:e5:bd:bb:f3:f9:cb:51:9a:
8e:d3:da:98:9d:0e:ee:4c:f5:48:ed:ac:f2:ca:8d:
50:3c:02:00:dc:25:ef:a7:b1:5d:38:f8:05:37:ae:
cc:02:46:ff:05:d2:ae:59:0b:68:21:4a:c2:ad:be:
76:95:ee:bd:11:ed:76:b0:09:f9:2b:c2:95:65:14:
0e:db:c3:2d:be:29:0d:4c:11:4a:1e:ef:32:cf:a4:
55:73:f6:d6:54:f2:d2:2e:62:34:84:71:0a:58:12:
d2:f2:39:52:37:45:be:d6:7d:83:2a:9d:75:8e:51:
0c:17:a0:2e:43:a4:d5:04:06:da:71:98:a8:a7:98:
3f:c9:8a:a2:1e:db:57:19:52:13:cb:20:1a:0a:b6:
47:42:24:c8:51:1c:58:ec:b8:a6:94:14:2d:99:12:
fd:bd:c8:94:4f:b6:51:3a:05:16:03:47:29:9a:11:
6b:22:6b:ad:6e:9c:46:e9:6a:e2:00:c3:72:ee:63:
c8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:19:E5:91:B5:AD:99:81:2E:30:3A:72:A5:F9:C4:AF:1D:EC:7B
X509v3 Authority Key Identifier:
keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:df:7c:94:9d:6a:fc:27:c3:66:76:cf:37:5c:d9:0c:23:fe:
e9:8f:ff:be:d2:75:fc:80:51:32:92:84:ef:01:d7:00:b3:64:
04:a8:12:95:86:24:3c:14:f0:a8:b8:6d:39:90:39:0b:bd:7d:
cc:19:ef:ad:c0:24:c1:62:86:c8:8f:21:41:c0:fe:71:f0:81:
14:03:3d:3f:48:f4:b7:dd:c2:0b:48:1f:a5:28:91:24:f7:37:
d0:0f:1f:58:1f:71:99:21:51:d8:d5:4a:ca:1e:51:f2:97:82:
ea:82:af:d6:15:9f:47:20:e2:ec:5a:93:c9:81:a4:5c:ab:d9:
5b:04:61:cb:61:a0:c7:9b:6f:f2:53:ea:41:92:39:7e:00:e3:
77:5c:b0:68:50:ac:86:2d:5b:88:cc:9e:17:23:39:e8:cf:97:
f9:20:f0:52:cd:c9:6b:f1:f8:af:f1:87:8d:9d:6a:f4:ea:85:
c9:aa:63:b6:8c:53:6f:db:d8:b0:f4:af:ef:16:4f:8f:cf:84:
93:b2:b9:22:6a:65:96:7f:92:8a:01:3e:79:5b:03:19:d1:03:
4a:a8:7e:8b:f7:e7:ba:ac:65:44:96:3c:43:02:60:c3:5c:d9:
2a:0f:6f:ed:bb:db:38:c2:f8:ba:c9:cf:63:28:71:63:80:fe:
8c:a9:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:34 2026 by rpki-client