
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json)
Hash identifier: BN1zA9IFp8c8vEFf5UvdYYum5XvDP5KylfT7gbe6CHg=
Subject key identifier: 25:A4:37:4E:0D:40:AE:AF:EB:72:48:F2:3A:38:8E:3B:C8:C5:E1:0A
Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
Manifest number: A5
Signing time: Mon 01 Jun 2026 08:03:28 +0000
Manifest this update: Mon 01 Jun 2026 08:03:28 +0000
Manifest next update: Mon 08 Jun 2026 08:03:28 +0000
Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: 3Dpbh1h77IoZNijevnDKrM6zo5yAWEr3JUf0TVe5fag=)
2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: rrBoaZeZAYohnofQuu333DPGl97BqUXv9lxtd9Vptcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Validity
Not Before: Jun 1 08:03:28 2026 GMT
Not After : Jun 8 08:03:28 2026 GMT
Subject: CN=6a1d3cd0-a281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:97:ec:8c:d7:75:6d:5b:34:7b:b4:ab:06:
69:2c:16:61:90:a1:01:b5:e4:95:b6:12:eb:e8:e0:
f7:5e:48:57:44:c6:09:08:f7:a8:db:fd:20:31:4d:
9e:bf:4b:07:7d:6d:47:08:48:65:c9:75:e1:ca:11:
f3:5f:6b:fd:61:ab:5d:58:76:62:cd:a4:b3:01:e8:
c4:d4:f7:e1:f2:71:fc:cd:c1:1e:8f:b8:9a:ad:ae:
5c:88:ae:14:d2:33:01:b1:0f:98:0c:3b:73:90:b6:
60:df:1c:de:dc:97:d0:66:b9:cb:66:74:75:f6:fb:
ce:c2:46:3c:69:48:07:d7:a9:17:31:33:8c:fe:c9:
ad:0f:84:4d:2c:19:c9:a0:0c:4e:b7:d8:c4:d8:e4:
a8:8e:7d:ef:6c:d3:db:15:1c:d8:bc:00:e5:08:70:
ba:20:f8:71:72:33:a3:c2:e1:29:14:2e:b6:da:9f:
70:21:d1:32:73:cd:e0:70:fa:d7:88:67:a3:cb:8e:
8f:66:8a:0a:2e:61:af:6c:dd:96:c5:8f:c0:41:dc:
2b:36:7d:b2:41:74:83:c0:ad:fe:22:6d:cd:93:21:
02:54:ef:40:9e:8d:f3:3f:d6:93:cc:d0:16:b9:54:
d1:79:83:a5:b3:8b:0f:34:60:b8:c2:aa:53:24:8b:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:37:4E:0D:40:AE:AF:EB:72:48:F2:3A:38:8E:3B:C8:C5:E1:0A
X509v3 Authority Key Identifier:
keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:8d:ac:b9:80:11:25:b0:10:54:de:a4:16:28:2b:24:83:3d:
81:d0:d8:1a:3a:71:92:53:fb:a2:61:75:5e:cb:e0:e1:76:0e:
12:fd:3d:3c:22:f6:b2:71:83:52:96:f0:48:91:ee:c3:9f:7c:
ad:7d:7c:50:c6:8c:31:2d:dc:c4:0b:b1:3c:68:f2:9d:8d:38:
14:f1:ec:98:82:87:c8:cc:55:cc:0f:f2:c6:32:c4:4d:9d:1f:
0b:8e:2b:21:5b:c7:4e:ef:ad:8c:4d:09:f0:63:74:71:ce:20:
2f:c1:0b:c6:f2:40:52:e9:8d:5d:d1:00:5b:59:a2:d5:d3:95:
8f:e8:1e:a9:df:54:e5:3b:8f:36:42:da:f2:34:09:70:66:26:
f1:2b:0f:0e:5f:5e:46:b2:07:3b:54:f2:5b:b1:83:2f:a4:37:
89:83:a7:bf:86:a8:62:87:88:b7:9a:9c:8c:03:1e:6f:59:4e:
7f:d5:4a:28:04:6c:9d:6a:30:1c:c6:9d:01:15:73:f3:a8:cf:
09:46:20:6e:71:43:cc:0e:13:b6:ec:bd:e0:59:6a:d0:be:2c:
e3:a5:cf:7e:1a:3c:d0:bc:f8:31:a3:11:f9:94:fe:de:b2:73:
e4:a2:32:90:8a:35:e8:c6:24:d8:10:f1:70:de:22:29:02:ee:
49:18:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:50 2026 by rpki-client