
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json)
Hash identifier: a9jSDuFd7060RsY89oQBCNgzqdbryARyT6XuRW2xLQA=
Subject key identifier: EB:BE:ED:08:19:37:3E:E7:5D:0E:48:48:BF:26:49:DB:02:F5:1C:84
Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A
Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
Manifest number: 01FA
Signing time: Mon 27 Jul 2026 04:49:30 +0000
Manifest this update: Mon 27 Jul 2026 04:49:29 +0000
Manifest next update: Mon 03 Aug 2026 04:49:29 +0000
Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: gXdJ1rcxUihJFNUjUf+UzEuZ0LjzfLdua+WilKpoSP0=)
2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: Qx6h3CTOkKIiFv1hoz1s6u5nieG3giT15j3ng44V7sg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl
rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A
Validity
Not Before: Jul 27 04:49:29 2026 GMT
Not After : Aug 3 04:49:29 2026 GMT
Subject: CN=6a66e35a-3682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:59:a9:6f:85:e5:30:16:4a:68:2f:14:97:
8a:a7:e3:a9:1c:d6:a6:24:89:95:f6:a3:d1:b9:ca:
8e:d8:35:38:42:53:5e:15:ce:7d:e3:ea:6a:d0:1c:
64:44:4d:da:42:23:ea:4f:c2:3d:4d:bb:36:b5:7b:
e0:d7:51:2b:a8:57:4e:14:c5:3d:0e:ae:ed:3f:15:
26:8b:6f:cf:6a:07:c1:86:4c:2b:68:89:db:e3:a2:
e2:7f:9c:b8:ee:23:bd:84:8e:97:23:cd:7c:ae:fd:
c1:c6:93:dd:43:90:45:8e:89:c3:8c:b5:2b:0f:ef:
04:61:d2:90:6c:ea:f9:97:2e:9c:8a:59:f7:71:b9:
94:69:cd:75:4d:73:c5:ad:c0:ff:16:3a:b0:9d:a3:
14:c9:e4:0f:62:a2:20:15:ea:6e:ea:0a:f7:fe:fe:
53:cf:f7:d7:d8:7b:56:f2:b6:7e:97:66:05:88:44:
b1:70:c2:6d:77:b9:6b:cd:de:ae:91:e4:51:f8:94:
ee:a0:ef:56:a4:36:6f:3e:a8:c6:01:b2:a6:83:fb:
ac:44:42:1c:f8:d4:c0:75:df:5a:06:d1:d9:78:2a:
24:7f:64:45:de:35:4d:38:bf:64:8d:3e:a1:41:6c:
84:73:86:37:04:50:f4:d5:9a:02:b5:8f:dd:76:43:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:ED:08:19:37:3E:E7:5D:0E:48:48:BF:26:49:DB:02:F5:1C:84
X509v3 Authority Key Identifier:
keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:1e:48:19:6e:2f:29:b9:59:0c:6b:23:73:e5:a5:db:c1:b9:
4d:76:4d:2e:e8:7b:c8:2a:cc:d9:dc:c4:cb:d2:82:d7:eb:ee:
80:71:51:6c:cc:cf:d4:49:bf:e5:10:66:f6:7d:a0:83:08:e0:
2f:99:72:fb:98:d9:64:b4:c4:5d:63:31:03:32:1a:c5:8c:43:
38:f8:74:99:08:13:23:6f:d5:f0:33:b8:8e:99:32:65:bc:4d:
d8:1a:78:42:3d:1c:4b:d7:98:a3:b7:f2:5f:29:9a:d4:90:ad:
81:3b:a8:86:7f:36:7d:13:3a:1e:2a:d3:a3:72:79:8e:3a:09:
78:22:18:9c:54:83:01:b6:7a:2c:bd:45:90:82:8a:b0:1b:92:
ee:74:9c:6b:5c:82:b8:8a:3c:4d:3b:79:2f:0d:82:d8:50:d7:
aa:d0:95:cc:33:b5:04:41:68:57:4d:fc:9c:fe:60:a6:2e:e7:
ca:17:ba:48:2d:37:ad:83:c0:39:e7:f2:8b:36:60:16:39:4f:
fa:41:7f:64:d3:db:0a:0d:ee:b5:7e:02:60:01:d7:c3:5a:64:
15:87:2e:d5:c5:8e:fc:d2:b1:91:f5:0e:92:05:84:3c:ec:47:
ab:22:b5:af:f7:d2:02:06:db:0f:a7:63:ba:11:e2:3d:7a:32:
81:21:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:11 2026 by rpki-client