
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
File: NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json)
Hash identifier: Xq9C4WjsW52r4dwck+5WvdN6LaCJD7Pi3rs1JjnCPhI=
Subject key identifier: F7:9E:48:C7:8C:01:41:3C:E7:0F:F7:C6:47:65:46:29:AA:F7:3F:C0
Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Certificate issuer: /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
Manifest number: BB
Signing time: Sat 13 Jun 2026 00:45:35 +0000
Manifest this update: Sat 13 Jun 2026 00:45:35 +0000
Manifest next update: Sat 20 Jun 2026 00:45:35 +0000
Files and hashes: 1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: WmWe0aIwUfc72vsv3J6WGzuLlwQgCatjnVyDA1dA7ek=)
2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: sqaF/L7BkPPx01J6zjZJOWgkKgNdgKGuBKXecAoTrY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Validity
Not Before: Jun 13 00:45:35 2026 GMT
Not After : Jun 20 00:45:35 2026 GMT
Subject: CN=6a2ca82f-4792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:14:9e:7a:48:60:a5:4e:09:82:46:6f:38:
34:92:ee:02:b0:7b:62:48:e8:a6:03:9c:33:a0:7f:
c6:9f:0b:f0:ce:77:e7:69:60:37:51:1a:5a:85:2d:
99:77:c5:d7:43:d9:fd:d3:9b:31:3f:5b:9d:8f:d0:
33:37:59:17:19:ba:23:45:8f:34:56:78:6f:da:77:
4c:a5:4d:51:7d:90:f1:79:66:0d:3a:e7:33:31:a1:
7a:5b:a3:df:c9:16:a9:38:15:b1:8e:93:54:d3:03:
a8:e4:0c:a1:ca:b0:25:b8:1e:9f:21:d0:77:44:a3:
aa:04:f5:f0:54:97:55:e4:0b:80:69:25:f9:17:1f:
50:09:94:86:c9:09:90:a9:0d:ee:1a:2d:ce:07:34:
7e:87:83:33:ea:63:98:62:27:c6:77:bd:ad:01:b0:
f9:2c:c9:2a:e8:ec:9c:59:f7:8f:33:ee:aa:d2:02:
f5:15:2c:8f:b2:70:0f:37:17:9c:5c:f8:60:2e:3b:
f3:ac:74:7f:61:ab:7e:3b:d4:98:94:5c:8b:19:53:
b3:8c:3c:b3:9d:e1:22:b3:57:4a:ea:40:69:29:6b:
3c:5c:d9:a9:43:fb:0c:ef:c3:75:a7:41:f0:73:a7:
89:fe:29:3f:42:36:ef:2d:05:f6:ce:93:2a:07:6c:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9E:48:C7:8C:01:41:3C:E7:0F:F7:C6:47:65:46:29:AA:F7:3F:C0
X509v3 Authority Key Identifier:
keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:09:b4:40:40:fa:69:b2:1f:04:a6:19:7f:f6:a7:ac:f1:02:
47:69:a0:76:85:2e:45:cb:d8:31:13:a2:4e:22:32:9b:4e:ef:
96:a9:00:6e:d9:1e:87:65:4d:3a:53:6d:22:c1:e6:43:55:74:
f7:a9:be:1c:0c:81:28:59:47:76:69:5e:88:84:51:8e:32:84:
b9:29:eb:fe:e6:33:68:a3:ce:8e:1d:50:d3:e8:b1:a3:3d:be:
46:df:7e:49:f0:6e:db:ee:9e:6b:a4:fa:8d:60:49:56:b8:0f:
31:f1:f2:dc:f4:fe:95:98:1a:21:ce:0e:23:5c:5b:7c:c8:91:
8b:46:72:de:50:26:77:26:9e:fd:80:a9:27:c1:ae:02:44:32:
4d:c6:14:4a:7a:d3:51:ff:3f:bc:2e:24:72:0b:9a:da:5a:f7:
d7:54:fb:f3:8b:65:49:77:5a:ee:e4:94:c0:e2:8e:cb:99:02:
e3:95:63:a3:26:e8:c0:df:69:35:60:22:73:e1:4d:c9:7d:c9:
5f:94:7a:8d:a4:39:59:83:8a:dd:95:0d:74:c2:22:9d:a4:c0:
a2:f0:f2:40:3a:08:0c:f5:ee:47:7f:36:32:32:3c:00:0c:b2:
d8:aa:e5:bd:0f:d2:df:69:a3:fb:e9:3d:96:60:c8:b1:11:46:
71:f0:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:46:47 2026 by rpki-client