
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
File: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json)
Hash identifier: XuUSm07ib4lPNSAkuOscvzsMI3rVtVN5NwITueRKDJ8=
Subject key identifier: 19:F0:14:11:E0:2B:50:CB:80:A7:49:53:32:96:5D:5C:97:19:AA:4A
Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27
Certificate issuer: /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
Certificate serial: 034B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
Manifest number: 0333
Signing time: Thu 21 May 2026 01:14:20 +0000
Manifest this update: Thu 21 May 2026 01:14:20 +0000
Manifest next update: Thu 28 May 2026 01:14:20 +0000
Files and hashes: 1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: 6UqhKp+iTkUrwUb3uBqqdZS1w04siycQc3mJIBGuAc4=)
2: 4742083A534E11F08B7C2047C4F9AE02.roa (hash: xthRLc90/XgHlCkTtB+0e16k0vdMx1eiJQ9NbjS1xYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl
rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
Validity
Not Before: May 21 01:14:20 2026 GMT
Not After : May 28 01:14:20 2026 GMT
Subject: CN=6a0e5c6c-999f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:3c:fb:a4:00:47:4c:d7:d2:cc:2b:48:15:
06:42:f2:d7:d8:0e:8f:82:ec:a2:12:94:08:1d:5e:
bf:a3:af:be:89:ac:bc:36:32:17:2b:a8:b1:e6:a4:
c1:ab:3d:3f:18:a2:b5:b2:ce:f9:d1:3d:55:1f:0e:
95:db:1c:73:20:47:eb:20:f3:8e:b5:c0:ae:36:e3:
9c:75:e7:76:f6:76:6a:c0:df:14:8e:12:90:e6:ff:
74:5a:f6:a2:18:ac:cf:41:a8:87:66:c5:4b:b3:fd:
fd:e3:05:90:a6:6b:81:04:88:1e:7d:2a:bc:a5:f3:
27:2f:cc:cf:88:48:cd:f2:a3:49:1a:c6:50:db:72:
8e:db:19:80:4f:66:47:5d:25:e4:02:58:85:2f:52:
f4:08:ae:13:33:f0:71:17:80:13:e7:75:52:75:09:
ca:e8:96:d2:5a:80:26:e8:ff:0e:8c:65:0f:c1:36:
eb:ad:a6:b4:bf:1a:f9:df:fd:f4:f7:f0:ac:43:c1:
d5:7b:54:2d:09:61:f7:e9:3e:d5:ee:4b:db:29:75:
9f:38:1d:9e:3c:c9:2e:e5:40:cc:16:fa:92:e6:7a:
d7:e1:b6:8c:34:f9:3f:4c:4c:e1:26:8b:22:44:85:
fc:e4:26:fb:48:f9:99:c8:f1:fc:05:dc:9e:9c:2d:
df:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F0:14:11:E0:2B:50:CB:80:A7:49:53:32:96:5D:5C:97:19:AA:4A
X509v3 Authority Key Identifier:
keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:bd:e3:e6:e4:70:19:44:d2:3e:fb:87:dc:6b:15:c8:fd:92:
79:d7:02:11:d8:fc:e8:1e:52:45:fd:0f:8e:4c:fe:92:ed:fd:
31:7d:24:6e:2a:5d:e7:11:e5:05:fe:c4:ae:69:64:a9:4e:6c:
5d:97:51:8d:af:32:1a:f5:93:e6:66:15:03:2e:2f:70:90:66:
ab:af:62:45:6f:94:76:ea:2e:06:f4:04:dc:d1:88:d3:b1:07:
6a:8e:4e:1f:a2:a8:47:52:11:d7:b5:64:ea:ff:08:c0:f8:96:
ad:0d:51:62:83:3c:ec:5f:eb:e1:71:b9:35:a3:5e:ff:28:b7:
92:d2:06:89:c8:65:e1:dd:92:c2:04:86:a7:4d:4e:3d:2b:ad:
34:11:69:09:b3:58:56:da:e5:f4:b2:db:a2:d2:61:a7:ba:44:
a4:e6:48:72:74:d1:61:22:a2:67:e0:63:79:60:b3:59:45:e5:
ce:77:e0:65:e2:54:37:47:57:e5:bb:1c:3f:ce:fe:80:13:6e:
ff:4d:90:26:7c:dc:7d:71:7e:90:4e:be:b9:94:07:26:ec:21:
44:65:9e:e1:b5:e2:d3:bb:9d:40:2e:25:4d:48:b7:b3:b2:03:
fe:b1:2b:e0:c4:ea:59:df:36:30:f6:64:f7:d0:c4:28:5d:c8:
fe:8c:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:59:18 2026 by rpki-client