
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
File: NQgZehD-pGpxhGMxT-upOUS2JIs.mft (raw, json)
Hash identifier: xCf8EQ/sbvrQdgZgsIIYSQXR+lD3d6PcxvtiVdfuRk8=
Subject key identifier: DA:FD:54:F7:DD:DB:92:A4:F1:3C:0E:16:CF:BB:91:E9:27:1F:99:6E
Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
Certificate issuer: /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
Manifest number: A9
Signing time: Thu 01 Oct 2026 08:38:42 +0000
Manifest this update: Thu 01 Oct 2026 08:38:41 +0000
Manifest next update: Thu 08 Oct 2026 08:38:41 +0000
Files and hashes: 1: NQgZehD-pGpxhGMxT-upOUS2JIs.crl (hash: Jo/s7bapEgNhxS73W6iDOnIsKd1SiBMFOJs1FsALUVI=)
2: 86227722C92A11F0872AB883C4F9AE02.roa (hash: OntMkkZwdIbl5SrNRK1u5UfChSdJYJCs+EVkHCslByQ=)
3: F084D9AADF1B11F0BDFBE1B1616F56BC.roa (hash: CpQzWFpl+Gw/RBNLdgsUn2ZniQcwnVLZoguxqXTYKyI=)
4: 21D4377C8C4511F19227BDCF5411F970.roa (hash: Q5nqflo0XdbDKgMTEhv81FckTDKKK7RQBGI9jc5A/cI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 08:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Validity
Not Before: Oct 1 08:38:41 2026 GMT
Not After : Oct 8 08:38:41 2026 GMT
Subject: CN=6abe1c11-8fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:b3:7c:59:73:2f:e7:b0:09:f7:b1:20:8c:
ef:38:89:74:51:8c:c6:2c:c5:b5:d5:74:22:52:98:
d1:f2:8a:f8:b0:a9:b7:9b:4a:63:ef:b6:b3:74:3e:
29:6f:0f:8f:1b:a9:b3:31:89:20:52:6e:10:1b:1f:
80:ef:52:a6:e6:4d:4e:fa:8c:fc:23:3a:cd:2d:d6:
ae:44:8d:52:ff:1b:3b:27:1a:dd:82:5a:51:b7:9b:
de:0b:9e:30:71:c5:df:0b:99:22:91:6a:f8:ba:d2:
ea:29:d8:05:48:a2:5f:b3:ba:61:11:d4:5d:f6:eb:
78:ce:df:bf:41:7a:94:b1:47:3e:8a:f2:e5:a5:33:
ce:13:9c:a0:45:a2:5e:87:c7:ef:5a:77:59:e9:35:
1c:3d:8f:ce:08:18:41:ad:02:ad:25:f8:66:b2:05:
00:6d:8a:4e:12:91:a9:5d:91:d2:ed:ee:39:79:2c:
fa:82:59:03:23:d2:c5:99:f9:0f:5a:d7:65:d6:f1:
2b:1e:5e:6e:c2:f3:3f:f5:19:fb:00:b4:c3:c7:c2:
ac:a7:6d:35:ee:c9:67:d8:0e:d7:5c:44:75:82:3d:
23:ab:f2:76:ab:a2:91:06:e8:a8:44:12:fa:e8:fa:
74:74:c6:7e:4c:ef:24:e0:29:85:1a:9a:67:13:4e:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FD:54:F7:DD:DB:92:A4:F1:3C:0E:16:CF:BB:91:E9:27:1F:99:6E
X509v3 Authority Key Identifier:
keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:73:95:d6:c9:74:de:71:f5:e7:e1:97:98:16:a6:12:c9:0d:
db:53:1b:39:09:4e:22:8e:d1:2f:21:9e:93:0a:32:bf:55:2d:
82:3a:16:6f:69:c8:a4:70:17:64:a6:44:21:6b:b5:e0:a0:5a:
18:3d:57:eb:e7:2e:d5:48:21:d6:8e:5e:63:ec:6d:b3:52:99:
b5:f8:0d:1b:cf:1d:3c:c2:50:f9:3c:6c:2e:e4:ba:65:8d:96:
39:09:2f:5a:f5:d2:f5:58:dd:e4:29:8f:bb:2d:5d:b7:3c:df:
bf:8c:e1:cc:ba:2b:63:95:46:be:f0:1f:86:81:a8:29:09:20:
c7:40:ef:31:ac:31:3a:a7:a3:bc:4a:43:c8:a8:50:04:91:fe:
1d:84:40:d9:e9:93:b1:d6:f7:85:d7:31:f0:23:14:8c:9d:56:
54:b5:22:7e:c7:89:77:58:8c:34:77:43:21:0e:21:01:d2:da:
65:6e:85:76:3c:27:6b:0e:22:0c:7c:6b:7a:68:f7:04:32:7a:
18:f7:96:36:a9:04:6e:3d:9f:1f:76:cf:0e:d7:8e:3f:83:a4:
37:0f:be:6f:da:93:ec:ef:34:a4:f3:41:e5:e4:fd:ab:37:59:
c9:1d:e0:9a:b0:24:b6:a5:a0:f2:ee:4d:1f:61:af:62:8b:cc:
8d:e4:05:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:19:23 2026 by rpki-client