
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
File: nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json)
Hash identifier: wY+sOqYuGOqU/Z3iOpkVBlI4YBB7gaTW9mljmPo+orc=
Subject key identifier: 78:36:68:96:C0:EF:00:19:CE:E0:06:90:1C:BE:0A:BE:12:84:C6:55
Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
Certificate issuer: /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Certificate serial: 0BB0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
Manifest number: 1517
Signing time: Sun 04 Oct 2026 19:05:53 +0000
Manifest this update: Sun 04 Oct 2026 19:05:53 +0000
Manifest next update: Sun 11 Oct 2026 19:05:53 +0000
Files and hashes: 1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: xz75x5etI/jhM8R8YVcCljp9FueGRevXNfta2Za5mPc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl
rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992 (0xbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6D8, serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Validity
Not Before: Oct 4 19:05:53 2026 GMT
Not After : Oct 11 19:05:53 2026 GMT
Subject: CN=6ac2a391-9154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:79:70:91:97:cd:eb:8a:69:0f:82:58:8c:
2c:79:b2:63:f1:23:3c:43:1d:60:2c:a4:8e:64:31:
f1:33:6e:96:3a:12:34:d3:f7:39:4c:61:ae:3b:df:
f3:89:a6:87:eb:4d:2a:11:96:c4:8c:11:29:71:ee:
25:d4:d9:18:aa:94:d6:c0:59:cc:f7:d2:4f:bf:38:
18:45:7a:b2:78:f2:2d:a2:7e:c4:25:b4:98:06:26:
84:43:f8:73:f4:ca:dc:31:2d:af:64:1b:75:3a:2b:
b5:b8:95:ad:cf:bf:71:d8:f5:eb:99:58:47:8c:d8:
d3:01:0b:47:fd:a5:8e:19:77:3f:60:62:5c:13:b8:
13:d9:cd:27:f8:6a:18:a0:b7:6b:d7:f6:3c:00:94:
c5:13:07:42:af:74:9c:1b:d9:a2:3a:85:8a:0b:da:
b0:79:72:22:7b:8e:da:8b:5c:8e:61:c2:9f:b6:94:
76:3c:1a:60:c0:bb:4b:4e:9d:57:44:de:1b:7b:20:
38:5f:c3:20:2d:70:92:fd:b0:b6:d5:e1:58:79:d6:
6c:64:54:eb:9a:78:6b:47:0e:71:35:a9:49:20:10:
5e:b1:62:bd:2f:33:7c:f0:34:49:23:ed:1b:d2:2c:
f7:b5:ab:45:f1:9b:e5:3b:d4:f5:8b:ea:e9:04:26:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:68:96:C0:EF:00:19:CE:E0:06:90:1C:BE:0A:BE:12:84:C6:55
X509v3 Authority Key Identifier:
keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:46:b5:90:57:58:d1:36:d1:8f:fb:d0:7a:7d:e5:91:f4:b0:
65:54:46:fd:0c:fc:50:91:b6:27:19:77:52:dd:2e:ee:6d:c1:
22:23:0e:20:fc:11:b3:5b:fc:01:ae:e5:f5:4e:05:ae:93:48:
37:4f:a6:fa:c2:fa:2f:f4:1a:2c:49:87:c7:4b:4e:e7:30:57:
f2:58:aa:22:b7:98:47:50:fb:71:9a:cf:82:dd:bc:6e:2d:21:
a2:eb:d6:72:58:cd:fa:eb:76:c9:15:e4:df:d9:5f:80:a6:63:
54:f5:0b:9c:a2:03:1b:48:02:30:7c:48:db:e0:39:5c:86:d8:
40:66:2e:b6:8d:06:d3:f9:a5:fb:28:79:35:5d:82:36:0b:ff:
ed:6c:cc:e8:61:90:21:08:95:e8:d0:3c:41:54:ff:dd:cd:26:
a5:08:12:f9:5b:5a:c7:ca:45:53:bb:cb:6d:08:4a:0f:62:77:
f1:41:f0:6e:0b:6d:3e:b2:72:8c:da:c3:d8:7a:a3:6e:a7:d9:
b3:ab:c4:fb:86:84:66:eb:c5:4b:d1:9c:e2:d7:9a:84:e3:43:
f8:31:d7:54:0a:4f:5e:5e:27:cf:93:e4:be:8d:47:5b:7a:75:
9f:78:2b:1e:a0:5b:d7:f0:12:1b:6f:b9:ea:eb:20:57:9a:a9:
6f:78:c1:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ2RDgxMTAvBgNVBAUTKDlEM0UwMjA4Qjg1REYwNDlFMDIzQjM0N0RBOUIxODNG
QzU2QkFCMUUwHhcNMjYxMDA0MTkwNTUzWhcNMjYxMDExMTkwNTUzWjAYMRYwFAYD
VQQDEw02YWMyYTM5MS05MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoNB5cJGXzeuKaQ+CWIwsebJj8SM8Qx1gLKSOZDHxM26WOhI00/c5TGGuO9/z
iaaH600qEZbEjBEpce4l1NkYqpTWwFnM99JPvzgYRXqyePIton7EJbSYBiaEQ/hz
9MrcMS2vZBt1Oiu1uJWtz79x2PXrmVhHjNjTAQtH/aWOGXc/YGJcE7gT2c0n+GoY
oLdr1/Y8AJTFEwdCr3ScG9miOoWKC9qweXIie47ai1yOYcKftpR2PBpgwLtLTp1X
RN4beyA4X8MgLXCS/bC21eFYedZsZFTrmnhrRw5xNalJIBBesWK9LzN88DRJI+0b
0iz3tatF8ZvlO9T1i+rpBCb2TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHg2aJbA
7wAZzuAGkBy+Cr4ShMZVMB8GA1UdIwQYMBaAFJ0+Agi4XfBJ4COzR9qbGD/Fa6se
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZEOC9BMDM3OTZERTUx
QzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhFbmdJN05IMnBzWVA4VnJx
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25UNENDTGhkOEVuZ0k3TkgycHNZUDhWcnF4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDZEOC9BMDM3OTZERTUxQzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhF
bmdJN05IMnBzWVA4VnJxeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASUa1kFdY0TbRj/vQen3lkfSwZVRG/Qz8UJG2Jxl3Ut0u7m3BIiMOIPwRs1v8
Aa7l9U4FrpNIN0+m+sL6L/QaLEmHx0tO5zBX8liqIreYR1D7cZrPgt28bi0houvW
cljN+ut2yRXk39lfgKZjVPULnKIDG0gCMHxI2+A5XIbYQGYuto0G0/ml+yh5NV2C
Ngv/7WzM6GGQIQiV6NA8QVT/3c0mpQgS+Vtax8pFU7vLbQhKD2J38UHwbgttPrJy
jNrD2HqjbqfZs6vE+4aEZuvFS9Gc4teahOND+DHXVApPXl4nz5Pkvo1HW3p1n3gr
HqBb1/ASG2+56usgV5qpb3jBEw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 02:40:48 2026 by rpki-client