
$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft (raw, json)
Hash identifier: FaNooAH9SoktAMsvV8oYaNDPRnAwcIAMZxFNYyOYT08=
Subject key identifier: 93:2D:38:28:17:20:9C:65:6D:BE:25:74:3B:93:5B:99:53:6C:27:5A
Authority key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55
Certificate issuer: /CN=A918233C/serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
Manifest number: 05E3
Signing time: Mon 22 Jun 2026 23:47:48 +0000
Manifest this update: Mon 22 Jun 2026 23:47:47 +0000
Manifest next update: Mon 29 Jun 2026 23:47:47 +0000
Files and hashes: 1: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl (hash: 5JA1k2vHZLgZUo+994pD7ofLOhlmcbKE7Uian/lzN28=)
2: 34E594A215C511F09562D30FC4F9AE02.roa (hash: hn5wjT8ITTfEO0dB+XWYbfRy24k/V8B+n7+WTsoECyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl
rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55
Validity
Not Before: Jun 22 23:47:47 2026 GMT
Not After : Jun 29 23:47:47 2026 GMT
Subject: CN=6a39c9a4-1eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:ae:54:f5:18:db:0f:92:e2:11:29:7a:87:
33:0d:21:0b:04:b2:91:ef:f1:57:e7:11:bb:ba:45:
43:c5:e6:dc:fc:1c:51:1a:60:a0:72:de:4e:88:8e:
89:70:3d:77:15:b5:17:94:7c:ca:29:61:2a:60:06:
3a:fe:ca:10:ec:16:34:14:bb:d0:80:1c:0f:46:1e:
cb:2c:77:12:4c:bb:d9:ec:44:b8:69:70:72:84:2a:
09:16:3b:37:5d:1c:80:cf:0b:9a:2e:33:5d:1b:fd:
82:36:7a:22:ad:04:4b:20:e6:cb:0f:3d:66:90:97:
f5:68:a7:1f:e8:aa:99:40:b1:32:4f:77:98:0d:ec:
4b:0c:ec:5f:6c:5f:9a:cf:0a:27:1d:a2:5d:4e:4b:
3d:a1:6f:7a:7f:3a:4b:f7:67:ed:ce:e3:9e:9b:25:
95:ef:3c:03:04:e4:09:4c:40:c6:d8:c1:76:ac:eb:
e0:e0:32:66:2d:a7:24:82:74:1a:88:b1:e7:71:82:
dc:3f:28:1f:3b:59:c0:3e:71:03:07:0b:4e:5a:06:
dd:e8:84:3c:77:56:dd:96:36:22:32:55:2f:a7:93:
6f:0e:9c:0e:b1:d4:bb:d9:1d:35:15:48:15:98:58:
33:4d:a9:ab:78:8e:e7:19:a1:8d:a0:a8:b2:bd:e7:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2D:38:28:17:20:9C:65:6D:BE:25:74:3B:93:5B:99:53:6C:27:5A
X509v3 Authority Key Identifier:
keyid:FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b4:9f:0c:b4:16:08:46:c0:8f:a0:76:89:92:dd:45:cc:1a:
2a:9d:1e:d6:3c:11:b0:74:c0:85:9b:3b:7a:a8:81:e5:ec:34:
0c:13:a1:6d:13:95:3b:63:22:8b:b7:d8:6f:9b:e2:a0:3e:e6:
eb:c0:e7:83:9d:f0:1d:2e:cf:38:8c:77:f4:8b:99:86:59:6e:
ec:93:10:17:1d:a0:08:2f:0e:24:39:8d:9c:47:4d:6d:f8:33:
7d:e5:72:dd:7e:38:82:8c:e2:c2:f2:4d:78:6b:f6:2f:ee:ae:
2d:1e:90:8c:30:22:b9:61:9a:0f:e5:83:48:86:db:f8:c7:45:
fa:29:fc:9f:2a:39:60:79:6b:18:3e:d4:74:66:1c:90:6c:25:
86:b7:28:4a:94:6b:d0:4b:8c:4b:31:12:c8:bb:8f:07:c5:86:
cb:5e:56:e5:d8:1f:93:da:62:80:ab:97:a3:d1:25:98:ef:33:
50:30:8d:3e:20:70:8a:2f:03:f4:a3:57:96:50:47:e7:81:40:
b6:da:0a:65:7b:2f:f7:6c:b6:23:a8:98:8f:c4:8b:81:b9:ea:
9a:14:c3:3e:af:48:76:83:2d:3d:45:1f:cf:6d:30:a0:b4:dd:
fc:31:6d:fd:85:2c:89:62:92:c9:69:48:d7:a3:fd:da:eb:a8:
dc:4a:64:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIzM0MxMTAvBgNVBAUTKEZDRDRERjhFQjRBQTY0QUY1NkI3RDBDNzMyNkUyOTEw
NDU0M0NDNTUwHhcNMjYwNjIyMjM0NzQ3WhcNMjYwNjI5MjM0NzQ3WjAYMRYwFAYD
VQQDEw02YTM5YzlhNC0xZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAroyuVPUY2w+S4hEpeoczDSELBLKR7/FX5xG7ukVDxebc/BxRGmCgct5OiI6J
cD13FbUXlHzKKWEqYAY6/soQ7BY0FLvQgBwPRh7LLHcSTLvZ7ES4aXByhCoJFjs3
XRyAzwuaLjNdG/2CNnoirQRLIObLDz1mkJf1aKcf6KqZQLEyT3eYDexLDOxfbF+a
zwonHaJdTks9oW96fzpL92ftzuOemyWV7zwDBOQJTEDG2MF2rOvg4DJmLackgnQa
iLHncYLcPygfO1nAPnEDBwtOWgbd6IQ8d1bdljYiMlUvp5NvDpwOsdS72R01FUgV
mFgzTamreI7nGaGNoKiyvee2GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMtOCgX
IJxlbb4ldDuTW5lTbCdaMB8GA1UdIwQYMBaAFPzU3460qmSvVrfQxzJuKRBFQ8xV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjMzQy9FNjQ5MUZFMjYy
MTQxMUVDQjAwNjcxMkNDNEY5QUUwMi9fTlRmanJTcVpLOVd0OURITW00cEVFVkR6
RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19OVGZqclNxWks5V3Q5REhNbTRwRUVWRHpGVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjMzQy9FNjQ5MUZFMjYyMTQxMUVDQjAwNjcxMkNDNEY5QUUwMi9fTlRmanJTcVpL
OVd0OURITW00cEVFVkR6RlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApLSfDLQWCEbAj6B2iZLdRcwaKp0e1jwRsHTAhZs7eqiB5ew0DBOhbROVO2Mi
i7fYb5vioD7m68Dng53wHS7POIx39IuZhllu7JMQFx2gCC8OJDmNnEdNbfgzfeVy
3X44goziwvJNeGv2L+6uLR6QjDAiuWGaD+WDSIbb+MdF+in8nyo5YHlrGD7UdGYc
kGwlhrcoSpRr0EuMSzESyLuPB8WGy15W5dgfk9pigKuXo9ElmO8zUDCNPiBwii8D
9KNXllBH54FAttoKZXsv92y2I6iYj8SLgbnqmhTDPq9IdoMtPUUfz20woLTd/DFt
/YUsiWKSyWlI16P92uuo3Epk/g==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:10 2026 by rpki-client