
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
File: N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json)
Hash identifier: ez+4okOhpFCQzASllIDKieyi8LuRM4ggobdW2XThFjw=
Subject key identifier: AE:E5:82:3D:96:B4:D7:42:F4:F9:37:EF:79:2D:A4:12:00:FF:BD:18
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial: 062D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
Manifest number: 060F
Signing time: Sun 26 Jul 2026 23:45:47 +0000
Manifest this update: Sun 26 Jul 2026 23:45:47 +0000
Manifest next update: Sun 02 Aug 2026 23:45:47 +0000
Files and hashes: 1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: UuaAAcb1oWhhAqOc7/toxXyV7ZFd9bLeKhkdmr4Uc40=)
2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: jiJ/Apxk0RCnezc8z5hn0e9XoDw9lt0qYbyy+Q1Gh0Q=)
3: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: JJ5ZiLh38XYP4D8yimnjxevWv+FpQHjzlnERYLydtT4=)
4: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: 7uquT9D1sV2YgdxdolpJDoZ9g+QO6lmrDAgSjgdq8+w=)
5: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: UnloyJqO5mDJNTuFL9b9idDNwOwv5RK3dGrtJoBgFTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1581 (0x62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Validity
Not Before: Jul 26 23:45:47 2026 GMT
Not After : Aug 2 23:45:47 2026 GMT
Subject: CN=6a669c2b-3003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:ff:3a:af:5f:b9:50:cd:d1:92:c7:80:96:
11:05:28:c5:6d:49:08:ab:4e:21:e8:89:fe:24:2e:
52:8b:13:d3:48:03:c1:03:50:16:07:69:df:6a:a3:
41:af:21:66:ca:15:04:0f:50:0f:22:b5:46:ce:b8:
1f:02:9a:df:3d:2c:7d:fc:41:bf:cb:cb:5c:ae:73:
9b:ee:47:94:41:cd:c7:d6:76:d3:04:e7:59:9f:1c:
3f:ef:15:c9:fa:02:5c:31:c7:65:42:70:9e:87:b9:
c0:41:ae:ea:fd:61:fa:c9:9b:d9:43:da:60:5e:c1:
86:39:b5:02:0f:35:fe:f7:90:c9:6a:75:13:4b:ef:
e1:d0:43:d1:dc:a0:de:83:c3:f6:b4:9d:41:1d:43:
dc:54:c7:8a:59:8a:87:97:d7:63:ab:db:4a:91:f8:
f0:99:08:2b:94:ca:9a:17:f3:f6:d5:4b:e8:36:13:
87:b7:54:57:af:a8:6b:b7:db:00:88:89:57:5d:b4:
a9:70:90:34:c0:75:e1:b3:32:7a:a1:1c:00:f4:56:
81:6a:55:10:fe:dd:16:62:79:7b:3b:85:19:60:7c:
15:30:19:07:e7:e3:02:f0:b4:bd:88:9e:5e:f7:72:
43:9c:67:63:56:fb:67:a8:b9:db:e6:23:e1:03:94:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E5:82:3D:96:B4:D7:42:F4:F9:37:EF:79:2D:A4:12:00:FF:BD:18
X509v3 Authority Key Identifier:
keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:13:ed:7d:89:3b:aa:17:58:c6:ef:1d:05:81:7e:43:b1:7f:
3b:23:b3:3d:f8:85:8a:1d:69:95:0a:d0:d3:48:8d:de:fb:1e:
70:42:28:f1:a6:32:0e:be:01:16:9c:96:69:8b:d2:54:ab:2a:
b4:6f:91:3e:8a:b1:2e:cb:86:29:86:09:f7:c8:ef:39:46:4d:
37:7e:3b:b0:4b:0c:0c:47:94:b8:e3:af:a7:b8:17:d7:6c:ee:
1c:84:d4:dc:7f:57:87:aa:8e:13:fa:01:d1:d4:ff:bc:d8:16:
9b:dd:81:08:fd:8d:46:f4:01:57:fd:c7:5f:09:b9:2a:28:3b:
75:8c:11:43:c2:44:b8:0b:af:b0:82:15:e0:85:2f:58:51:e0:
11:a8:71:cd:ca:a5:fe:e4:a6:cd:77:c2:28:28:2e:c0:8c:cd:
ff:7c:89:a5:1c:af:78:69:47:67:d8:35:b5:94:45:89:19:96:
41:09:8a:b3:2d:ba:94:71:11:15:02:84:7f:12:4b:86:e1:e5:
31:0b:3d:dc:fd:a9:b9:62:3a:20:47:13:45:93:7f:78:0b:85:
cd:aa:20:39:3c:1f:74:1c:6a:a7:04:15:a6:97:a6:24:53:65:
fd:18:aa:09:72:c5:9c:39:24:de:49:8f:5e:3b:29:23:19:6e:
de:c1:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:16 2026 by rpki-client