
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
File: NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json)
Hash identifier: dpQdocVvMu9JeJxnuAywb9RLT5U4xfIW9wmpNfXs+zM=
Subject key identifier: A6:96:D9:EC:F2:92:23:F1:DD:BA:1F:05:EC:D1:FB:13:1B:44:12:B1
Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Certificate issuer: /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
Manifest number: 9E
Signing time: Fri 17 Apr 2026 00:44:02 +0000
Manifest this update: Fri 17 Apr 2026 00:44:02 +0000
Manifest next update: Fri 24 Apr 2026 00:44:02 +0000
Files and hashes: 1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: m6Vb0OAOY1Y79L7+b+XHGBVn6EeIdAv8MEpffSK7dl8=)
2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: sqaF/L7BkPPx01J6zjZJOWgkKgNdgKGuBKXecAoTrY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Validity
Not Before: Apr 17 00:44:02 2026 GMT
Not After : Apr 24 00:44:02 2026 GMT
Subject: CN=69e18252-3d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:de:f7:3b:fe:8a:47:04:6e:97:6a:d4:12:
28:de:f4:ae:b3:fd:f6:44:38:f5:03:82:56:f1:6a:
5f:f7:b3:7f:5e:42:9c:12:50:17:65:33:fa:3f:bf:
4f:db:b9:56:ab:38:65:7e:0f:8e:3b:92:6d:7b:12:
dd:9e:91:a1:c9:68:b9:74:f7:9c:d0:05:7c:05:d1:
72:3c:c0:ff:7a:22:95:8b:d5:94:8f:f6:cd:48:8c:
60:b7:ab:da:33:f6:ae:a5:8a:13:52:f8:ec:b0:da:
7c:34:57:1c:2c:70:ee:a3:f7:7f:ef:d3:f5:d9:a7:
fd:44:a3:b3:73:65:ee:ed:5d:69:84:4e:5f:90:ad:
f5:28:dd:45:94:4b:e1:41:1f:a6:87:20:45:e9:0a:
2a:bc:bc:dc:68:58:d1:f0:2f:97:99:79:a0:d6:a4:
3b:4a:94:da:b3:7e:e3:74:ec:5e:ba:68:46:44:cd:
f7:40:d9:f4:35:2f:53:a9:5a:d3:30:c4:15:d1:f2:
35:1d:7d:bf:ac:aa:58:86:35:56:ba:7c:23:8a:84:
58:e7:df:00:1a:77:f2:d6:45:24:69:4e:0e:8e:d7:
29:4e:76:31:40:96:4f:87:ff:58:f0:bf:8e:36:33:
12:e1:eb:db:35:3e:b1:65:d8:82:c5:cf:79:9d:d9:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:D9:EC:F2:92:23:F1:DD:BA:1F:05:EC:D1:FB:13:1B:44:12:B1
X509v3 Authority Key Identifier:
keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:b1:49:f0:90:ed:11:41:51:4a:fb:e3:a7:dc:2a:f0:2f:12:
b6:97:e4:34:20:54:28:cf:8e:f7:a6:46:84:49:c5:0a:8d:47:
9e:7b:97:5f:b0:d5:5c:0c:0b:9a:83:00:ef:e0:70:00:55:d2:
02:a3:74:45:e9:84:a3:71:3f:65:50:26:81:02:91:9c:46:86:
71:e5:80:0c:de:f7:d3:10:da:f6:12:81:04:c5:19:3a:71:8d:
51:94:42:d3:44:49:b0:32:79:85:65:37:12:fd:0f:d2:7e:b8:
52:4c:9f:b3:c4:21:3a:f8:b2:ee:db:b3:11:f5:03:d2:f8:71:
b4:0f:a3:56:1b:12:f0:c0:68:22:61:e0:88:30:82:24:2a:87:
22:ae:5d:12:c1:02:be:f3:49:e7:8a:00:4f:5e:58:3d:e5:ab:
b2:79:cb:54:64:0b:19:55:99:f7:03:83:1c:4e:33:6a:83:a9:
89:1a:24:69:df:52:94:14:94:02:5d:d7:c4:13:55:0b:ae:c2:
52:44:0f:ab:8a:3b:93:43:ac:e2:d0:f3:41:86:23:8f:92:b5:
8a:b9:d5:d1:2b:69:b2:7f:f6:f1:ef:e2:0e:40:ac:a9:e0:96:
75:30:8a:07:3d:0a:54:6b:be:a4:ff:17:43:04:4e:2e:99:fa:
89:b7:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:43:07 2026 by rpki-client