
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json)
Hash identifier: WSW9RHYFFqHADKisB1havjDe5vATYTuJwZv5fjlcN2I=
Subject key identifier: 5B:E5:7F:65:13:DF:B3:3D:49:01:49:5E:63:72:71:FF:CC:7D:E5:CC
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
Manifest number: 01FD
Signing time: Sat 13 Jun 2026 03:39:18 +0000
Manifest this update: Sat 13 Jun 2026 03:39:17 +0000
Manifest next update: Sat 20 Jun 2026 03:39:17 +0000
Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: YOzz91L/G3HpK0VlMs63JEtX+GGIHbBFuDBaUAg0Ebs=)
2: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=)
3: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=)
4: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=)
5: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=)
6: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=)
7: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=)
8: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=)
9: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Validity
Not Before: Jun 13 03:39:17 2026 GMT
Not After : Jun 20 03:39:17 2026 GMT
Subject: CN=6a2cd0e6-0e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:36:72:9f:04:52:8a:24:97:03:c5:0f:d2:
36:5b:81:df:87:6e:3a:58:99:c9:dc:80:ef:4a:ca:
26:bb:39:62:00:3b:8f:f0:92:c9:46:57:24:4a:19:
45:3e:a3:a7:5f:d1:f0:f6:24:83:f7:13:8e:69:c1:
b3:be:f8:05:86:96:63:d8:f1:dd:0c:fc:21:5e:bd:
f1:26:97:c3:06:a5:a9:a7:25:12:a9:f6:fe:57:a8:
69:73:6b:c9:4e:78:c3:36:93:2e:50:0b:28:14:64:
d2:d1:f8:4c:ba:95:ba:78:ad:9b:c5:b8:7f:ea:ef:
2e:d9:9f:61:00:d3:00:df:fe:52:f4:c4:53:ff:e4:
0e:0a:ab:fb:8f:cc:d8:88:14:43:38:92:36:4b:cb:
26:02:2a:5f:31:00:6d:e9:30:7f:be:db:4c:87:df:
c9:4d:b7:53:05:c8:0c:33:62:44:78:4f:6a:c5:be:
19:bb:86:fd:ec:05:6c:77:8e:85:d3:f2:52:f6:b6:
83:e5:bb:d5:ab:40:c1:e2:e4:13:3f:95:a7:85:f0:
68:82:df:25:a6:b9:5c:09:4a:37:a0:28:37:db:b5:
f1:51:03:cf:2a:6c:95:73:5a:fb:a4:25:f6:ae:9e:
1b:a7:95:98:1a:99:a3:1e:d4:5f:07:8d:f8:75:02:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E5:7F:65:13:DF:B3:3D:49:01:49:5E:63:72:71:FF:CC:7D:E5:CC
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3d:d0:da:6c:ba:4d:50:a5:ec:e9:7b:ee:19:7c:10:9c:85:
8a:7d:9d:d5:07:e1:f2:37:10:ea:df:73:bf:9c:a3:f7:21:5a:
9e:c6:3a:0c:58:33:ee:3c:81:25:09:eb:18:ef:ba:2c:5a:d2:
97:11:8b:5b:15:40:b4:95:a0:d2:aa:6d:0e:71:04:f1:ce:38:
fb:58:ee:4a:7c:91:12:4f:16:2a:db:c2:50:59:c2:19:66:cd:
c2:2f:20:50:0e:8e:7e:6b:2f:82:e1:e0:f6:3f:2e:63:ba:b1:
90:4e:da:46:bc:fc:e8:8b:1f:b1:03:13:ec:bf:ce:77:f8:f7:
86:f2:b1:74:e7:82:94:63:c3:e6:66:43:ed:f9:f8:3a:3b:01:
3d:35:e3:91:69:e5:52:3e:db:eb:58:73:c4:ec:1f:38:7a:90:
ff:fb:d4:67:82:68:c0:6b:f2:5f:4e:3b:9c:5c:6f:18:b6:96:
4f:54:a9:db:31:ec:aa:ce:b9:de:7c:41:e8:36:ac:9c:19:a9:
73:78:19:4c:99:b2:a8:70:95:e4:40:02:19:e7:a5:d5:34:c5:
96:35:61:22:37:43:9a:33:b1:7a:af:88:6b:ec:f8:e3:91:70:
d2:40:ed:8e:5b:a9:cb:a8:df:06:0d:41:aa:56:7b:1c:c2:b5:
b8:5a:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:13:46 2026 by rpki-client