
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json)
Hash identifier: SNXfGBhN9hDk6Ae1ikXcQt+/r8YUCIxqHTtmEbXAbs4=
Subject key identifier: F2:5C:2C:F9:09:C9:7A:89:40:2D:B4:3B:9D:63:BC:73:F4:B3:56:F0
Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Certificate serial: 069F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
Manifest number: 068C
Signing time: Tue 06 Oct 2026 22:37:27 +0000
Manifest this update: Tue 06 Oct 2026 22:37:26 +0000
Manifest next update: Tue 13 Oct 2026 22:37:26 +0000
Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: Z+armQnv76MTzdJL54NNwK9X0ih0+sDn32EUvdeJkVU=)
2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: oTkyMx+qLAKRpEl4XRW6uGf8eqQTbCo0c4vnp7v/6xY=)
3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: vsSEFJuv44Kf4vefqvx9slxRLksNOU0oDcbDD/sVbm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Validity
Not Before: Oct 6 22:37:26 2026 GMT
Not After : Oct 13 22:37:26 2026 GMT
Subject: CN=6ac57827-e732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:f6:0f:74:af:4b:0e:16:71:3a:7f:c3:8c:
e4:6f:b7:f0:e5:4c:79:2d:61:9d:85:73:31:06:09:
30:93:46:aa:f3:b8:1b:ec:46:fe:b0:a4:d3:98:9d:
7e:62:8a:10:6a:5b:4c:25:36:b0:2c:9f:66:cd:43:
0e:14:6f:53:99:bc:32:5a:4b:0c:d3:cb:40:29:7c:
7f:2c:81:96:72:18:ec:db:dd:f5:f9:57:60:46:ea:
d7:17:04:97:64:40:94:b5:bc:1b:b4:1d:c1:1f:67:
a9:5d:1b:5b:17:7b:0c:47:52:be:ff:02:25:94:de:
e7:88:b5:b4:fa:53:ac:ca:54:1d:72:ed:17:04:df:
99:6d:6d:d6:13:a0:e4:d4:22:f2:2c:5c:12:8c:1e:
ab:49:49:03:e7:53:37:eb:f1:bf:d7:7e:48:50:e5:
0d:ea:d0:43:92:5e:15:a8:72:88:89:f0:ee:b6:8a:
ca:52:6d:1d:11:4d:cf:4b:15:b8:53:11:c0:e8:eb:
32:05:ff:86:5d:12:13:1f:19:cd:ed:ad:d3:84:c3:
aa:79:21:78:4e:1b:18:c8:f7:ad:e8:0c:47:8d:cc:
62:ae:37:4d:84:cf:60:16:6b:9b:66:a1:db:81:b4:
35:26:e9:dc:48:57:62:01:55:30:12:f6:b0:c7:e5:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:2C:F9:09:C9:7A:89:40:2D:B4:3B:9D:63:BC:73:F4:B3:56:F0
X509v3 Authority Key Identifier:
keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:06:37:c3:7f:7a:40:21:1e:09:36:0c:6b:46:80:0b:82:0f:
06:44:e9:c3:c5:97:53:78:7a:d9:1d:83:17:1a:ff:01:ea:33:
ed:84:97:29:61:32:fa:c9:21:40:b9:1a:6f:85:18:45:7d:f9:
0d:61:c9:dc:c1:94:fd:d6:95:cc:5c:39:b0:af:8e:fa:b9:ec:
9b:9a:27:dc:67:68:66:c2:32:61:d9:27:24:14:ff:59:fc:8f:
a5:f1:84:de:e3:ed:3e:62:1a:c1:1e:5b:cc:13:68:39:17:3f:
3c:da:5a:0d:e9:a5:fe:b7:83:35:b8:f4:e4:6b:70:9f:c2:25:
e1:35:fd:af:f6:1f:61:76:6b:8d:d2:01:e3:33:14:82:c0:f3:
db:3c:90:1e:15:01:d2:59:8a:1b:8b:2a:4e:94:ae:07:61:7f:
b1:73:64:1d:6e:e5:b7:4f:3f:0d:2b:95:ff:a8:80:8f:e9:ee:
2f:aa:07:4c:f1:52:e5:c8:d0:6f:1d:52:bc:8e:91:ac:c5:46:
47:ec:dd:c9:7d:db:bc:51:fb:dd:40:a1:2b:33:6b:3f:6e:ea:
55:9d:33:87:6c:2f:78:1c:a5:c4:3a:b7:a2:6e:56:24:a1:48:
fb:1d:47:71:58:a4:cf:2b:d5:c0:f1:b6:ec:66:58:31:72:8c:
9e:10:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:20:59 2026 by rpki-client