
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.mft
File: NrTbHfWmiZzFM-bZa8SddpxYzMw.mft (raw, json)
Hash identifier: J2OYvDRMvlXOw9Zex8OcdqZRddL/AaCSb3dSDXekv10=
Subject key identifier: EA:60:05:06:85:BF:37:74:74:A2:3B:50:21:C7:27:B3:D7:67:9E:5A
Authority key identifier: 36:B4:DB:1D:F5:A6:89:9C:C5:33:E6:D9:6B:C4:9D:76:9C:58:CC:CC
Certificate issuer: /CN=A9119D72/serialNumber=36B4DB1DF5A6899CC533E6D96BC49D769C58CCCC
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NrTbHfWmiZzFM-bZa8SddpxYzMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.mft
Manifest number: 0E
Signing time: Thu 05 Nov 2026 09:16:04 +0000
Manifest this update: Thu 05 Nov 2026 09:16:03 +0000
Manifest next update: Thu 12 Nov 2026 09:16:03 +0000
Files and hashes: 1: NrTbHfWmiZzFM-bZa8SddpxYzMw.crl (hash: LKk6YkJz+Wrh8hkBhPy1IyxiHQ8YdLTKkJBDHbPlxmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.crl
rsync://rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NrTbHfWmiZzFM-bZa8SddpxYzMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 09:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119D72, serialNumber=36B4DB1DF5A6899CC533E6D96BC49D769C58CCCC
Validity
Not Before: Nov 5 09:16:03 2026 GMT
Not After : Nov 12 09:16:03 2026 GMT
Subject: CN=6aec4954-5ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:36:99:f8:24:12:f8:0a:61:e7:f5:d0:47:
02:bb:e4:67:b9:26:5c:24:b6:94:63:dc:ff:af:8b:
27:8e:97:8f:f0:d8:af:41:1e:77:f8:a6:73:a7:d2:
ef:ff:c8:a2:c7:e0:25:d7:7f:73:51:ff:7e:c7:e2:
bc:ca:17:81:07:5f:1d:ab:a6:24:d1:e1:45:45:78:
d2:d0:41:53:a6:ee:d4:90:72:4b:c3:a0:fb:3e:e1:
88:48:21:6b:0b:dd:a7:de:6b:ab:f1:33:e5:2d:32:
e0:9f:0c:4d:f9:81:80:dc:a8:fb:69:e4:3f:e1:ed:
bf:07:de:f7:8f:d9:a8:79:dc:40:8a:e0:10:7b:4f:
da:a2:8a:14:9c:89:e9:a5:8a:b0:41:c2:d6:37:db:
35:de:66:29:bf:de:16:49:af:c0:45:69:5e:05:22:
ec:4c:f9:0f:ab:8d:9a:ee:28:a2:ac:a8:71:c6:88:
12:9a:bd:43:fe:bf:d2:13:4c:3a:3b:d1:dc:09:1a:
e0:28:31:25:93:d5:91:f9:6b:b0:e6:11:cb:f0:89:
e6:52:b1:57:c4:bf:11:d7:13:81:5b:ea:0c:34:56:
29:6a:51:80:b0:c1:03:c5:9d:31:f6:bf:b1:3d:f2:
8a:6d:ab:db:86:00:bf:b8:29:c4:5e:da:7d:99:0b:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:60:05:06:85:BF:37:74:74:A2:3B:50:21:C7:27:B3:D7:67:9E:5A
X509v3 Authority Key Identifier:
keyid:36:B4:DB:1D:F5:A6:89:9C:C5:33:E6:D9:6B:C4:9D:76:9C:58:CC:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NrTbHfWmiZzFM-bZa8SddpxYzMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D72/2A825DACC78411F18DFEB7F33B11F970/NrTbHfWmiZzFM-bZa8SddpxYzMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:cd:5a:42:74:ec:a1:e4:9c:35:4d:42:f7:57:c2:d3:81:0b:
fc:f3:b0:d3:08:1e:3b:ff:eb:43:2f:c5:55:5f:94:7c:91:f9:
6e:dd:d2:d1:7c:7c:8a:34:24:97:49:aa:02:bc:f4:41:48:2b:
80:e5:89:f2:c6:74:53:e1:89:f6:77:2a:2c:23:1e:34:0a:9f:
39:5c:fb:50:cc:8d:e4:0c:34:53:fc:1f:7c:32:ba:a9:b4:ed:
8a:77:3a:1e:b7:59:2e:e1:60:88:83:8c:df:90:62:c2:02:53:
2f:8b:1e:8c:ac:37:e9:a2:d1:f4:be:52:dd:dc:cd:91:50:d0:
3d:f0:9a:44:02:33:1b:fe:e5:b1:ec:c7:1e:48:e5:0b:10:cb:
3f:aa:4b:00:56:d4:09:bb:2c:c2:ae:03:57:0c:8d:6a:21:9b:
6e:c3:57:9a:da:f6:92:a0:32:2f:05:ba:29:e3:3e:d3:ae:e7:
77:7d:eb:51:09:02:2e:be:d8:fc:32:0a:75:82:ee:23:5c:7a:
26:c0:38:09:fd:ea:4d:92:1f:83:a8:94:a7:67:12:1c:aa:ee:
f5:a0:37:5c:bc:7f:cf:97:a6:4d:ec:60:60:45:7b:8c:1e:6f:
10:bc:c1:15:5a:b5:f6:1f:fb:67:b5:69:22:8c:aa:8e:65:aa:
a5:ba:e9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:49:40 2026 by rpki-client