
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
File: nxlDAU2jmDwfXHj3bM8tpWpKNro.mft (raw, json)
Hash identifier: 9UAmGfEBGivwReWSVXMwPv6MKbw0YHPgGEB00Kf6F/M=
Subject key identifier: 34:8A:1F:40:58:8A:79:67:4E:C8:13:E5:B9:0D:C0:E3:48:E1:CD:48
Authority key identifier: 9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA
Certificate issuer: /CN=A912E3B6/serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
Manifest number: 30
Signing time: Sat 13 Jun 2026 08:44:46 +0000
Manifest this update: Sat 13 Jun 2026 08:44:46 +0000
Manifest next update: Sat 20 Jun 2026 08:44:46 +0000
Files and hashes: 1: nxlDAU2jmDwfXHj3bM8tpWpKNro.crl (hash: CMOd3hQiN3hpO+lVn7diF7D9ovSz1TDWUqBp+86mPNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl
rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3B6, serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA
Validity
Not Before: Jun 13 08:44:46 2026 GMT
Not After : Jun 20 08:44:46 2026 GMT
Subject: CN=6a2d187e-eb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:7f:33:7c:ba:f5:03:9d:db:ba:25:5e:0b:
71:e2:ee:77:f8:cb:37:9f:13:fe:81:c7:d0:49:39:
19:d9:85:d5:57:12:a0:1d:dc:d7:5f:6e:35:01:46:
0b:da:a5:c8:f8:d8:0d:39:4a:0e:51:ce:f1:eb:4d:
21:bc:86:e5:b7:79:42:cd:55:f5:24:0c:79:42:b3:
79:fd:5c:da:f1:25:d7:7a:19:13:38:ab:a8:32:4b:
d7:ba:b7:1c:7d:0c:e8:a6:ab:a5:e3:fe:f8:61:19:
99:c0:92:c6:71:92:71:c0:b5:9a:2c:e2:de:a0:84:
4d:a2:02:c6:65:45:cf:5c:5c:ca:e4:a6:1b:ca:4f:
5c:74:f0:ac:f4:e2:9b:c1:af:01:67:44:52:11:91:
31:16:1a:d3:b1:2f:24:e1:1c:20:eb:91:24:ff:a8:
bf:e6:cd:f3:0b:99:c9:5c:d0:d7:90:6d:a3:e2:bd:
ea:22:ef:1e:4a:b9:eb:b5:7d:f0:e8:cd:3f:66:1b:
14:6b:aa:a6:51:aa:c3:8b:94:28:1c:31:82:ee:dd:
2d:26:c7:06:e3:a3:ff:94:da:c7:0b:1f:12:f9:7b:
7b:f3:10:51:43:80:8a:d2:e9:9a:87:d9:28:7d:4f:
b6:c4:57:07:57:0f:14:55:a7:65:96:19:75:b5:1d:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8A:1F:40:58:8A:79:67:4E:C8:13:E5:B9:0D:C0:E3:48:E1:CD:48
X509v3 Authority Key Identifier:
keyid:9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:74:84:42:87:b0:8e:e6:fd:ed:62:27:5f:a1:ae:4f:47:da:
07:17:34:d9:e9:87:1a:87:57:a1:77:8f:bf:e1:d1:73:ad:af:
04:0c:95:8a:d6:b9:dd:46:95:37:8d:8a:86:4b:cd:a3:5e:83:
7e:f4:13:19:46:30:4f:ee:49:6d:b3:a8:00:6e:5a:ed:e1:14:
3d:32:03:7c:96:b5:63:9c:69:1e:e7:90:ca:36:a9:b3:ad:1c:
80:48:78:fc:33:47:6a:6c:2c:42:a0:e0:8f:af:75:ee:5e:ea:
84:b2:ae:9a:21:cb:52:66:13:6a:f8:f6:e0:67:d9:4d:81:86:
9b:a5:cf:d6:80:00:9a:57:86:cc:52:a9:be:a9:3b:b3:b2:f7:
ec:f2:dc:25:b3:1c:09:1e:fe:ec:01:0d:10:ae:14:97:e5:a0:
a5:4e:a1:50:03:84:f8:8c:33:d0:a7:4c:f4:28:c3:56:f3:92:
e0:51:c4:aa:b6:b7:39:de:a4:f0:ce:6b:19:7b:19:c7:8a:d1:
4c:cd:a2:b2:8c:9f:b3:b4:dd:86:45:ca:67:18:ae:ff:92:9a:
ea:00:bf:f6:0c:30:5e:f8:21:17:bd:a9:6e:45:07:e1:e1:c4:
07:70:59:f5:da:01:93:a6:c0:57:38:c5:d8:2e:b3:ad:bf:33:
7b:0f:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:36:46 2026 by rpki-client