
$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json)
Hash identifier: ZqGS4tcPXrkaHKYUfdbonSuklNSlzjpx1JuqZcvVWto=
Subject key identifier: DC:43:09:42:09:30:4F:6A:3D:54:80:D6:8E:E3:8F:6A:7F:F6:C9:1A
Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Certificate serial: 0628
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
Manifest number: 0621
Signing time: Sun 26 Jul 2026 23:38:06 +0000
Manifest this update: Sun 26 Jul 2026 23:38:06 +0000
Manifest next update: Sun 02 Aug 2026 23:38:06 +0000
Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: VliDS33MdPi4g3i6jpRyfkTZbxBo8j4c3NR1gAiHOEw=)
2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: CXBbufirKme/8I4jBPe1IHI16sN/W1rfmFQ3toNZzUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Validity
Not Before: Jul 26 23:38:06 2026 GMT
Not After : Aug 2 23:38:06 2026 GMT
Subject: CN=6a669a5e-70b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:d5:fc:35:38:18:e0:e1:e3:cf:53:48:4a:
cb:16:45:d9:b6:c0:8a:2c:93:ed:13:9b:3b:0c:d9:
e6:4e:d9:c1:36:71:34:3e:72:05:45:67:61:8a:d9:
8a:d3:b6:2a:01:43:78:56:8d:ed:2f:a2:2f:4f:10:
a9:44:16:91:4e:93:82:01:cb:a5:82:63:65:e7:50:
08:f0:87:55:53:12:8c:03:0b:0e:12:3a:0d:85:8e:
6f:28:03:95:c5:ba:b2:a0:12:bc:77:cf:1c:36:ff:
b0:22:eb:3e:70:99:78:0b:50:23:91:f3:54:77:1c:
5c:25:56:1b:4f:1d:b4:46:53:2f:21:fa:47:26:d6:
91:90:33:69:58:cd:32:c7:30:f1:24:ba:28:f0:25:
d3:2f:85:be:d5:78:87:15:c2:2d:0c:48:6b:fc:f5:
51:4b:59:c4:09:75:d6:65:e5:09:60:d4:0e:fe:d8:
85:97:c2:a2:28:dd:86:fc:e9:d9:d8:7b:81:41:ae:
e6:d7:15:79:b9:3c:51:24:5e:12:24:5f:00:42:74:
77:73:d3:97:df:e8:0c:67:ed:42:e3:6a:bc:d4:28:
ee:be:0a:40:71:e9:11:2c:e6:7d:52:e8:6e:6a:98:
23:56:8b:ac:7e:0e:96:a9:bd:7f:45:d2:ca:d8:4d:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:09:42:09:30:4F:6A:3D:54:80:D6:8E:E3:8F:6A:7F:F6:C9:1A
X509v3 Authority Key Identifier:
keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:60:f2:63:d5:ee:fc:d7:d3:81:d3:b7:2e:84:72:7e:f5:12:
11:bc:04:3e:68:5f:99:0b:81:21:a8:97:b8:e6:48:e4:1d:08:
d3:a8:b5:35:9d:3f:97:03:f7:9e:16:6b:7a:2c:62:d8:7e:b3:
93:cd:21:0e:62:db:0f:dd:64:47:cd:e5:a2:d4:ef:fd:71:ce:
1b:0a:9d:09:a3:e2:2f:5c:1e:c2:94:6e:ee:a4:c1:b8:f6:62:
b4:0b:09:f2:bd:87:3f:c4:50:2b:0b:3d:48:06:21:fb:4c:8b:
ce:dd:89:43:08:9f:7c:ac:e5:5d:1c:9e:3a:4b:f3:1d:fa:19:
74:57:09:3a:cd:96:77:13:35:84:84:dd:5d:1a:d6:55:76:01:
cf:9c:a4:3b:7b:9c:9c:2b:fa:6c:90:af:3d:eb:17:42:1a:53:
96:48:c4:c1:9f:4c:4f:aa:6e:80:fa:9a:8c:4f:61:ab:3a:7f:
f0:7d:a0:14:05:61:90:3c:61:22:a3:d2:17:bc:e9:91:04:43:
0a:fb:f2:eb:73:92:9a:0d:c8:70:0d:20:e5:92:02:9c:92:ed:
1a:a3:77:33:70:4c:2e:f9:5b:d2:43:31:e2:8c:f5:4e:8e:ab:
a1:ee:95:1a:3b:38:7a:7f:e2:bf:84:77:07:79:94:65:41:79:
bd:ae:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:48:14 2026 by rpki-client