
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json)
Hash identifier: CWhLAsfdfHTp0wTnNVyiVZ1jtMwfBRlK07fxuFyYuzc=
Subject key identifier: 25:3D:36:84:77:3F:24:A6:2E:E6:3A:CD:8C:59:31:C6:28:A4:B8:FD
Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Certificate serial: 0EAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
Manifest number: 0EA0
Signing time: Sat 04 Apr 2026 17:34:42 +0000
Manifest this update: Sat 04 Apr 2026 17:34:41 +0000
Manifest next update: Sat 11 Apr 2026 17:34:41 +0000
Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: AdpeNJHSLXTtR/U1NsXRKcSuJoLH82HA0Z4PU5Cm6pY=)
2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: dp3B1RDsd11FNh3UQSta7bEw7zg/YxUAJYRv+iUtn2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3756 (0xeac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Validity
Not Before: Apr 4 17:34:41 2026 GMT
Not After : Apr 11 17:34:41 2026 GMT
Subject: CN=69d14bb2-1070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:69:6f:6f:33:be:44:e7:b4:3b:b7:dd:79:
5d:3b:f7:8b:b7:7d:8a:0c:69:d1:a8:f6:8f:45:50:
73:75:ac:bc:18:e2:9b:bf:8b:05:7a:fc:8f:c4:a4:
0b:ce:2c:40:02:04:7c:3a:76:6d:41:74:a7:3d:3c:
92:bc:b8:ef:4c:7c:8e:23:25:1f:f6:4c:0a:34:40:
ce:77:20:61:20:4b:8e:c0:a0:1a:41:7a:4a:6c:d3:
6b:d8:2e:35:34:93:6c:f9:29:c1:ec:18:9b:d3:50:
ab:24:4b:41:13:49:5b:97:c3:a1:94:fc:4c:6b:b4:
3e:cb:55:3e:40:a6:b0:07:f7:ca:9d:07:17:32:da:
16:8d:7e:af:65:50:5c:83:fd:b8:89:35:c9:14:5c:
92:56:49:13:05:04:d7:ac:38:b1:67:f7:f5:b5:02:
0b:bb:4e:2d:54:0b:5e:1a:4e:bf:37:61:52:fb:26:
d4:30:37:54:47:8e:87:53:55:95:a7:f4:e1:04:82:
a5:05:d5:79:4e:b4:c4:62:fb:bf:ec:cf:d8:80:96:
ce:c6:e4:39:a5:7a:06:48:0e:9a:fd:4e:a5:1a:63:
52:c8:d7:da:dd:53:d9:d4:cd:95:ba:8d:53:9e:a4:
a9:6d:7b:ec:d1:a1:f9:e3:13:4d:f4:44:67:52:8c:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3D:36:84:77:3F:24:A6:2E:E6:3A:CD:8C:59:31:C6:28:A4:B8:FD
X509v3 Authority Key Identifier:
keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:43:1d:2d:3b:09:73:67:ad:f4:5e:5b:45:fd:81:7e:79:7b:
9f:5f:0d:9a:57:ea:c6:07:ee:a8:d7:55:62:d6:77:cd:28:6d:
59:93:2b:fd:e4:85:e7:0b:e7:9f:86:b7:1c:74:af:b8:a0:97:
fc:28:7f:f2:3d:9d:8c:5a:8d:cc:50:06:03:db:e6:03:f3:a6:
e2:fd:62:72:e1:dd:2c:fc:e7:cc:89:7e:e7:2e:46:f6:2d:05:
e5:71:db:20:7b:1b:3a:52:7e:7b:2d:a9:13:da:7f:6e:72:ce:
ff:20:e7:6c:d8:61:9c:80:67:0c:c8:b2:e7:da:36:cd:4b:81:
15:fc:8b:4d:e9:31:d4:2e:46:12:5b:93:59:a8:a5:9f:65:d9:
30:66:c3:d5:dc:92:08:1b:04:86:2a:a9:57:fb:50:f1:27:b3:
c6:cb:1f:91:a4:d3:63:9d:ba:95:ab:ce:92:ee:aa:a4:e9:d7:
75:fd:e5:b8:c8:56:07:ad:a5:cd:b6:99:9f:c3:40:3e:4f:1d:
0b:84:e1:0d:a3:de:ac:e7:1b:fa:55:1b:dc:3a:fc:d3:35:51:
c3:90:a1:55:ae:ff:e4:af:d3:59:aa:02:92:09:5f:12:c3:2c:
3e:b0:c2:b0:60:be:99:e4:63:fc:ce:34:ce:5a:e8:f3:8e:71:
c7:59:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:03 2026 by rpki-client