
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
File: NnO2jJT8If8_zeajk-7GOxbAFP4.mft (raw, json)
Hash identifier: Vq74kJ8SBCzQcmk2e9PXMojQWUnBfrSGnP6I67kt0ao=
Subject key identifier: 80:51:02:A6:B4:EC:7E:2B:16:87:2F:05:43:7D:A1:F7:3F:DC:12:42
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Certificate issuer: /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
Manifest number: 58
Signing time: Thu 03 Sep 2026 06:17:48 +0000
Manifest this update: Thu 03 Sep 2026 06:17:48 +0000
Manifest next update: Thu 10 Sep 2026 06:17:48 +0000
Files and hashes: 1: NnO2jJT8If8_zeajk-7GOxbAFP4.crl (hash: bTJLizRpYHUtdPyhL+O6RiTV48TeFvZZGG3oq/k1iyo=)
2: 80FBB9EE267611F1BE9D6DCBAE833773.roa (hash: 5HwzbEOKPdxTsCPtrzPWqSHsCnPYkwuW4SaoTNQwNwo=)
3: 80708DE2267611F1BE9D6DCBAE833773.roa (hash: 3jGpuDySJyyXbAx9OGVPaRjdZyMkm11KUe6Dtnn4fHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Validity
Not Before: Sep 3 06:17:48 2026 GMT
Not After : Sep 10 06:17:48 2026 GMT
Subject: CN=6a99110c-fa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:af:32:8f:d0:fd:12:56:7b:e5:75:4d:57:
4e:62:55:c6:d5:d8:17:92:20:be:9b:fa:38:42:17:
6b:9e:0c:30:4b:76:d0:ef:b5:6d:d5:7c:8d:e3:3a:
0c:dd:42:a0:06:ff:fa:2c:97:ce:a5:11:38:2a:fb:
e0:1d:e2:94:52:2b:14:af:90:6c:ef:07:20:4d:3c:
6a:55:fc:85:3f:ca:c0:d6:2e:3e:82:79:2b:5a:52:
1e:86:cd:34:80:99:ed:5f:3b:ea:a7:60:43:fa:fa:
20:04:bb:4a:53:51:ff:6d:67:65:ea:56:6d:ab:c1:
6f:f1:f3:02:ab:25:2a:ab:86:72:27:92:61:9b:cf:
7d:59:db:9b:f6:22:88:54:7f:d7:f8:ce:f5:86:94:
d8:a2:87:87:06:f0:d6:e8:c2:2a:17:82:f3:bd:fd:
0c:a3:a7:54:ed:b3:d7:e0:2f:37:61:9c:fa:fa:28:
50:67:49:7d:f1:00:81:a4:bc:76:4d:9b:af:45:5b:
86:6a:e5:51:71:be:4d:e6:cf:2a:53:7b:38:e4:c1:
0c:29:69:21:af:2e:ff:04:2d:72:bb:a1:b3:ee:63:
fd:2f:cc:fb:73:eb:2f:73:35:d1:2d:81:44:4a:8f:
5f:02:36:4d:41:87:0e:77:17:ee:fb:fe:ef:42:65:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:02:A6:B4:EC:7E:2B:16:87:2F:05:43:7D:A1:F7:3F:DC:12:42
X509v3 Authority Key Identifier:
keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7e:6f:b2:ca:71:c3:83:c5:35:51:77:85:52:ce:c1:6a:6e:
d3:17:fb:34:25:64:69:30:2d:50:7b:00:fa:b9:07:ee:e2:a0:
d6:12:a3:63:c9:29:91:88:b1:9a:5d:28:ed:60:33:3d:a4:cc:
21:ff:6b:41:bb:f3:40:db:ad:c2:73:0f:32:a1:fc:28:a3:d3:
37:88:7a:4a:08:40:8c:9a:4a:9b:b3:f5:19:ea:4b:d1:c5:74:
b7:77:cb:27:4b:b1:82:a4:36:d1:23:d0:41:37:c6:e5:3f:a6:
c4:03:fb:65:02:2e:f2:cb:2d:d9:f5:98:89:d8:76:83:f8:83:
0d:2a:b2:f2:1c:c8:4b:89:3a:42:b1:cc:2c:97:29:d0:47:b0:
c8:7b:d0:73:13:ad:3d:74:c4:68:c0:4c:ff:19:77:4d:e5:40:
bc:8b:d4:22:9f:84:6c:8e:89:3a:e6:ee:e9:42:7b:b6:eb:01:
93:ea:15:b5:6f:ab:a9:63:d1:f3:41:b0:bc:be:48:13:3e:59:
9c:e9:c7:51:0c:87:d4:39:2d:9e:df:62:9f:74:46:f3:48:14:
ec:7a:fe:7c:e6:4f:59:9e:d3:a1:4d:66:e6:c4:c2:ae:27:ec:
de:64:e8:83:ac:68:29:d2:b8:a4:73:1d:ad:61:49:c4:d6:ce:
c4:76:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:50:34 2026 by rpki-client