
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json)
Hash identifier: tcA6WnTcZOOxY7WSX/m71whAfy4UV8JVaACLapTSJqs=
Subject key identifier: EF:EE:6D:75:AC:C8:31:61:4D:29:1C:4A:CD:D0:BC:F3:A9:27:43:FC
Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Certificate serial: 02DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
Manifest number: 02D7
Signing time: Wed 07 Oct 2026 01:30:52 +0000
Manifest this update: Wed 07 Oct 2026 01:30:52 +0000
Manifest next update: Wed 14 Oct 2026 01:30:52 +0000
Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: pe7Sh/tbb0pAFaewRqI3WJ+oQz82X1aJIDlttLFOYq0=)
2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: JhQP+mcUaNPHBqxU1e/1HhxGjSkQQVMKp70bq/iMgKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Validity
Not Before: Oct 7 01:30:52 2026 GMT
Not After : Oct 14 01:30:52 2026 GMT
Subject: CN=6ac5a0cc-d751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:fe:95:ab:b5:60:2c:04:b5:33:53:9c:99:
17:7c:5f:7d:fd:9d:17:b6:09:c5:c1:55:fd:78:22:
f0:28:50:4c:17:82:40:4b:ca:d7:58:ec:7c:88:62:
bb:65:e4:20:fd:21:4e:19:ad:8d:c6:54:2b:6a:de:
dc:4b:94:b1:ee:b0:f1:15:63:d1:f5:59:04:96:45:
53:08:c9:df:c0:61:75:0d:53:bf:bb:c1:ae:89:a6:
dd:bd:18:b5:1d:76:c1:cd:ee:40:95:5b:14:6a:30:
81:6e:cd:df:0d:65:60:14:fd:71:7b:66:0c:c4:1b:
b0:ca:d2:36:f7:d4:ae:c9:cf:48:d0:2f:4a:76:5e:
2e:7b:bc:36:e5:76:0c:c7:77:e5:ad:ae:f6:db:1b:
f1:19:2b:4b:f4:f1:05:48:4b:b3:98:84:e7:c3:10:
35:d0:b4:e1:eb:a4:4f:fb:3c:1e:10:3e:08:04:60:
a2:de:f6:2b:5f:f6:94:1f:3b:52:ae:d1:3e:48:5d:
3d:e1:aa:f8:7c:5f:c3:43:6f:a1:ef:06:3d:8a:6a:
72:85:6d:e2:d1:47:9d:3d:ce:3c:d4:d9:f2:43:a2:
86:4f:59:21:f2:5f:6e:ef:61:b9:7b:d7:0f:58:13:
81:5c:98:d9:8c:d2:1c:7c:cc:e2:73:cc:cd:e4:2e:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EE:6D:75:AC:C8:31:61:4D:29:1C:4A:CD:D0:BC:F3:A9:27:43:FC
X509v3 Authority Key Identifier:
keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:37:a8:e0:a7:bf:49:db:7d:ca:f0:53:bd:79:f7:7f:41:13:
92:7e:f8:c5:5c:1e:cb:be:70:e3:72:5c:a4:07:b0:8c:e0:2b:
90:81:01:81:50:47:9d:9e:b2:c5:22:46:d2:9d:51:b1:c4:55:
e3:a4:b5:9c:66:1c:08:5c:40:6d:fc:e7:41:88:4a:0b:c5:60:
bd:38:e9:b5:26:9e:cd:c1:00:b3:2d:97:1e:45:34:c6:6a:9b:
e8:2f:36:4b:6d:04:c0:7c:e1:c8:7d:18:12:fb:9e:68:c1:91:
fe:fb:2d:97:01:a6:9a:fb:9e:1a:33:73:7a:a9:ff:48:ec:bd:
52:50:dd:b4:be:39:97:04:86:18:13:ee:9b:46:15:72:c8:58:
cb:5a:18:d4:85:6f:90:9b:f1:8c:7c:d3:7d:3d:27:ea:a0:20:
ee:ab:2d:2c:d8:19:7f:08:f8:a4:15:5f:46:39:32:5d:7e:0f:
e3:19:5d:57:89:5e:a9:f1:fe:34:12:6d:c3:f8:b1:94:6e:61:
b1:71:bb:29:51:34:79:25:30:f2:f0:29:a0:98:e8:44:0b:09:
de:81:72:bc:69:55:b4:93:b5:e2:10:8a:50:42:01:18:14:b5:
ec:4c:07:9c:42:e9:fa:93:69:5a:9d:94:15:27:d6:9f:19:09:
ac:83:1d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 06:02:18 2026 by rpki-client