
$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
File: nxsx-ncAt0WPwYibhiVBzp1IJMo.mft (raw, json)
Hash identifier: pbcpcigDt/pty/DP4qf/ymuhVMnoXdgPfcU+wmxQUiw=
Subject key identifier: DA:9B:29:75:F2:CF:63:91:AA:7B:23:05:C8:FF:FF:4E:2E:00:25:31
Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
Certificate issuer: /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
Manifest number: 1085
Signing time: Tue 28 Jul 2026 17:34:35 +0000
Manifest this update: Tue 28 Jul 2026 17:34:35 +0000
Manifest next update: Tue 04 Aug 2026 17:34:35 +0000
Files and hashes: 1: nxsx-ncAt0WPwYibhiVBzp1IJMo.crl (hash: kEDHII7FqOhShQt4LJnpbO5FElgaKnQ6CZhWpQYCwyo=)
2: B2F3EE3C12C911F1AFB167917BEE528E.roa (hash: VhqZnu8kzqQxVrcP2wLUdoKfWprmpAgRyy5IRUHDzoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Validity
Not Before: Jul 28 17:34:35 2026 GMT
Not After : Aug 4 17:34:35 2026 GMT
Subject: CN=6a68e82b-18db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:2d:5f:94:e3:38:c5:da:7b:b6:21:82:b2:
29:61:33:1e:c3:27:57:08:ad:72:81:eb:3c:1e:e0:
e3:56:58:5a:19:99:6d:4a:17:19:d6:b8:ff:0a:16:
58:69:a6:40:3b:8a:9b:2d:38:1f:22:65:4b:43:50:
21:ff:67:2c:22:f6:24:36:6d:5d:e7:ed:03:c6:d0:
a4:65:48:a7:77:f7:16:1c:12:9b:a6:23:1e:ff:f2:
32:c9:4b:52:fd:16:8f:40:d9:b0:7a:c7:5f:97:b7:
a9:4f:40:bc:d3:b9:a4:2e:78:1d:f4:90:0e:6b:12:
81:ed:bc:ce:4a:1f:7e:a8:84:0e:e3:3d:b4:65:77:
2b:9f:c7:71:f3:51:97:f9:22:4e:02:23:19:c8:5d:
af:58:b0:9d:e2:bb:77:44:12:2c:16:ce:d0:49:f7:
ca:83:74:41:0b:55:72:a5:0b:08:0b:95:91:1f:8c:
09:ad:d3:4c:4b:b6:cc:83:bc:41:ba:db:d6:50:26:
44:57:85:2a:5f:d7:f0:1a:51:d7:d6:af:e1:6b:31:
1c:25:06:d3:6c:7c:3f:1b:4b:a2:ff:0f:09:67:5c:
5b:dd:6a:ef:16:34:cf:53:dd:d0:ad:a1:6e:5f:e4:
c6:c5:2c:4e:54:48:48:08:5d:28:19:82:d5:53:b9:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9B:29:75:F2:CF:63:91:AA:7B:23:05:C8:FF:FF:4E:2E:00:25:31
X509v3 Authority Key Identifier:
keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:eb:80:bc:a1:a6:d8:ef:70:7d:c6:7d:dc:a3:4d:76:27:b1:
70:19:89:d8:0d:aa:ad:df:37:da:e8:8a:81:4f:74:c5:7c:1a:
1f:fb:b7:c5:0e:8e:bd:b0:7c:74:38:ec:30:d9:53:9e:c6:ab:
36:17:53:78:d1:05:a4:f2:9c:01:54:9d:66:ff:ca:29:14:64:
16:53:d5:c8:72:15:d7:01:1d:4d:ee:c8:64:29:d0:c3:a8:fc:
2f:ec:21:f5:df:5b:a9:7f:3c:45:97:ce:df:a4:4c:10:f2:31:
23:04:af:35:6a:47:a8:74:a7:06:d7:d0:9a:1b:03:e5:5f:9b:
a7:dd:ea:78:97:b1:8c:a1:a1:f5:3b:96:01:2b:45:dd:0e:d9:
ac:0b:a7:c8:bc:3a:b1:43:29:87:45:4b:9f:ce:b9:55:96:43:
b0:e9:99:36:66:15:fb:17:c5:2b:e1:f7:aa:6c:0a:a2:80:52:
15:bb:d6:ed:22:61:a0:ba:31:1c:95:81:f9:8b:16:91:0e:8f:
c6:1c:f4:54:ba:a3:db:d6:4b:3c:97:1d:8b:52:0b:44:c4:3b:
cb:3b:e1:ee:4a:52:86:25:7c:6d:5b:4c:95:9d:6b:98:d0:6d:
11:e3:43:12:95:70:85:ee:c7:43:75:7e:74:86:ec:38:e6:37:
9b:b5:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:57:32 2026 by rpki-client