
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
File: NnO2jJT8If8_zeajk-7GOxbAFP4.mft (raw, json)
Hash identifier: IY3SmvCjX/MzeE5Pz1J5LEnLZts2OyITOBDZABaX3qM=
Subject key identifier: 70:0D:7A:9E:87:D8:FB:CE:27:46:1B:2E:B2:A2:79:CC:25:08:CF:31
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Certificate issuer: /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
Manifest number: 3F
Signing time: Fri 17 Jul 2026 07:36:37 +0000
Manifest this update: Fri 17 Jul 2026 07:36:37 +0000
Manifest next update: Fri 24 Jul 2026 07:36:37 +0000
Files and hashes: 1: NnO2jJT8If8_zeajk-7GOxbAFP4.crl (hash: W2hAUugbQDf764CXhQDQiLu5clan/LK5dA6C4xYTu3I=)
2: 80708DE2267611F1BE9D6DCBAE833773.roa (hash: 3jGpuDySJyyXbAx9OGVPaRjdZyMkm11KUe6Dtnn4fHo=)
3: 80FBB9EE267611F1BE9D6DCBAE833773.roa (hash: 5HwzbEOKPdxTsCPtrzPWqSHsCnPYkwuW4SaoTNQwNwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Validity
Not Before: Jul 17 07:36:37 2026 GMT
Not After : Jul 24 07:36:37 2026 GMT
Subject: CN=6a59db85-312f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:b0:a5:c0:8d:43:d6:2f:3e:3b:f4:92:1a:
6b:9e:62:dc:a1:48:6c:46:cf:93:1c:43:03:97:78:
a3:f0:ff:d3:72:c1:c7:49:f0:95:85:81:f3:c9:20:
00:67:0b:87:8b:a0:96:3d:ec:46:cc:8c:08:a3:c9:
7c:dd:8e:22:4f:6a:74:d0:43:f3:98:b2:e4:29:2c:
53:58:ae:b0:84:f7:56:27:82:79:1a:4c:4b:b6:20:
28:08:ed:b1:6a:b9:f4:b7:ee:23:df:94:5b:86:db:
b5:15:dd:5e:29:5b:47:53:b5:0c:4a:ed:69:b3:42:
0b:66:e1:18:73:b3:6c:98:27:60:e8:a1:ff:95:8f:
10:12:1d:52:d3:67:70:67:ac:62:b9:e1:49:f7:7c:
4f:1e:7a:a5:55:10:38:85:26:04:25:2f:da:37:59:
f8:24:40:e5:ce:28:1c:98:77:52:fb:e0:17:c4:11:
df:63:7e:54:5b:b4:2e:8b:02:b3:35:c2:95:ec:a7:
b4:0d:e5:71:c4:72:55:64:ce:47:37:bc:58:ad:c5:
35:17:b0:90:a5:0b:6a:9c:99:80:05:8d:93:fd:d6:
16:07:68:0f:ae:0f:41:b9:71:8a:40:d6:df:52:65:
d1:22:16:88:cd:e4:4f:90:4e:5a:e2:31:f7:d4:9e:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:7A:9E:87:D8:FB:CE:27:46:1B:2E:B2:A2:79:CC:25:08:CF:31
X509v3 Authority Key Identifier:
keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:f3:a8:2b:70:97:ce:06:dd:55:6d:b1:2e:81:3e:e9:18:82:
b4:f1:bd:15:bf:ad:fb:71:57:d8:fa:6d:6a:aa:b0:8f:cf:24:
15:ee:74:1e:3c:41:bd:0f:11:01:73:45:8c:a2:9a:ac:8d:3f:
f0:47:9c:19:c2:d2:9e:da:59:0d:0e:43:aa:1e:7a:36:82:0d:
36:23:9f:1b:a2:3d:99:68:f2:7d:07:88:cd:0d:d5:bf:fd:2b:
33:a0:7f:c6:67:15:c4:0b:c3:07:c5:57:0f:37:16:9e:02:35:
56:ed:52:ff:e4:ee:5e:43:12:44:34:59:f2:3d:c6:b8:84:54:
69:0d:fe:3e:be:08:70:52:86:6c:07:84:dc:07:dd:93:94:f4:
35:bc:60:ab:3c:cc:17:c4:8d:ab:5f:ff:c4:cc:ca:a0:26:4e:
c7:98:11:92:66:a9:60:67:24:48:4d:7a:f1:e5:f6:f1:58:cd:
6a:b3:aa:ad:b0:ac:97:86:1f:2b:67:6c:65:5b:82:33:c7:84:
60:de:33:b4:6a:b5:f9:e8:e7:fd:6a:0b:b6:4a:4c:69:5a:48:
ea:ea:6e:34:fb:4f:2e:4e:14:58:22:21:7d:85:cd:ab:43:5a:
53:12:7c:d0:c9:b5:ac:40:d1:d5:9d:5b:40:1a:c1:2c:c5:76:
1f:72:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:15:05 2026 by rpki-client