
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json)
Hash identifier: eZD4TUnCnY41lT8LnVgee36pFEqzFDs9ByIkM0FaOKE=
Subject key identifier: 7E:7B:B1:EE:9E:ED:0B:16:C6:FC:E4:7D:9F:C6:A0:EA:6B:FA:99:CA
Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Certificate serial: 19F4
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
Manifest number: 4BF3
Signing time: Tue 02 Jun 2026 15:22:14 +0000
Manifest this update: Tue 02 Jun 2026 15:22:13 +0000
Manifest next update: Tue 09 Jun 2026 15:22:13 +0000
Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: q33YaGR6ijzq9i7BsxJd7O1cUyEL7xvtL/caaVciPBc=)
2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: 6jge3ln0A/05I3MJ5x+8Ltcg52QS2aJZqoZeMAl3mHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6644 (0x19f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Validity
Not Before: Jun 2 15:22:13 2026 GMT
Not After : Jun 9 15:22:13 2026 GMT
Subject: CN=6a1ef526-535c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:7a:5a:d4:39:9a:e0:49:bc:d6:cb:8d:8c:
f7:ff:02:c9:87:0b:b7:b0:a7:2b:8b:3a:9f:bb:e8:
e7:7c:95:c0:bd:87:fe:aa:40:80:c6:01:27:fe:57:
d5:9f:8f:60:79:e6:2c:bb:23:a1:12:8e:03:8e:ea:
f4:24:24:3a:f7:dc:2b:3d:8d:45:db:07:94:3a:2b:
3e:fc:66:af:8f:ff:12:07:6c:87:41:4b:14:a0:c2:
7c:9f:8b:1d:b1:2d:4a:2b:d4:fa:a1:0b:b8:68:5c:
c1:a7:ff:76:ac:b2:6e:df:dc:69:61:ab:f6:b7:fd:
a3:84:68:07:91:f2:02:08:a9:60:68:f4:e9:8d:70:
ac:fe:4a:3a:43:13:b6:04:7e:27:75:88:a1:e8:c7:
41:e9:88:f8:14:80:85:02:c8:2f:d9:34:f1:47:c8:
15:e7:ce:a9:81:97:05:5d:44:de:f8:af:fe:8f:92:
06:a9:3c:9f:25:a0:e0:65:84:76:69:07:cc:64:11:
61:2e:94:bf:8d:9c:63:97:d4:80:bb:2f:77:d4:44:
de:d7:fb:e2:1a:ed:a7:cf:6f:9a:85:4b:09:b7:39:
73:27:80:61:9a:51:f8:6e:07:25:38:41:15:36:74:
de:42:c5:a7:43:19:60:13:e4:26:1c:76:b2:bb:4c:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:B1:EE:9E:ED:0B:16:C6:FC:E4:7D:9F:C6:A0:EA:6B:FA:99:CA
X509v3 Authority Key Identifier:
keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:b9:db:ac:bd:28:a1:a5:ed:df:59:2b:61:29:4d:56:5c:40:
6f:94:28:2a:83:04:3b:42:10:45:68:3a:5f:33:28:20:5a:10:
73:95:3d:80:dd:83:50:4f:cb:8c:4b:87:d0:13:e6:c7:bc:a7:
bd:f1:9c:78:66:c2:fc:fa:cf:a6:d4:6e:9e:dd:23:e0:05:29:
2e:20:10:b7:ae:68:b9:1d:e1:89:23:4b:1a:ac:35:2e:23:d0:
4e:e0:bc:61:c5:69:f8:f5:62:a3:03:6e:c5:fc:41:d6:45:c4:
bb:0b:a6:4a:29:22:0a:c6:e5:65:7d:42:4f:1c:9a:0b:f3:6a:
bb:9e:a9:ab:38:9e:04:0c:89:80:3b:fd:12:c9:80:f9:20:90:
69:90:43:94:2e:dd:5a:34:f7:6d:ec:be:f9:47:8a:2e:6c:c3:
f8:04:eb:f3:bb:17:98:9b:4a:5d:7d:fc:1c:1c:82:c1:f3:c2:
c1:3c:eb:94:fe:47:d9:21:28:4f:45:4b:40:7b:63:66:ef:74:
be:0b:68:14:ac:7b:2b:de:b5:14:3b:af:15:51:84:39:f1:50:
f0:6e:c6:04:c1:bb:73:1d:a1:b8:09:13:d2:7a:c8:17:18:79:
f7:a5:d5:79:3a:65:e6:4f:dd:5f:fa:52:da:1f:ab:fa:b2:b2:
a4:d9:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 14:29:28 2026 by rpki-client