
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json)
Hash identifier: qMnMeWp2ftlTaqawoeNa0mG+YlJtvDZYGAelMVC38/E=
Subject key identifier: FC:FD:92:A1:E0:2C:B0:2F:A0:5D:F9:99:AE:56:22:2B:13:43:95:5B
Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Certificate serial: 07A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
Manifest number: 07A1
Signing time: Fri 18 Sep 2026 21:27:45 +0000
Manifest this update: Fri 18 Sep 2026 21:27:44 +0000
Manifest next update: Fri 25 Sep 2026 21:27:44 +0000
Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: 2injsW2bgQ8lz8qTWn6gVdt0bRzqMmog1MYo3SAxBLk=)
2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: degQa76ry1qg50W9u2/YZGG6PCGmrbOjwy5QlyzcKog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Validity
Not Before: Sep 18 21:27:44 2026 GMT
Not After : Sep 25 21:27:44 2026 GMT
Subject: CN=6aadacd1-8c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:b1:92:86:3a:25:14:63:01:87:d6:2c:e7:
1e:a2:46:fd:35:95:a3:35:05:af:29:c7:df:37:0b:
b4:91:04:73:bd:f1:c0:fd:f5:47:27:d2:17:66:3f:
4e:f5:42:08:19:27:f0:99:cd:d8:51:4a:86:3a:fd:
3d:46:6a:a5:03:03:65:73:2a:73:dc:76:51:01:a4:
9a:8f:69:ea:24:5c:b7:8b:c1:b7:cf:94:c7:b9:10:
8d:b7:c5:79:31:9c:f0:bc:6d:65:bf:7d:e5:5c:24:
2a:20:52:2f:2f:48:15:99:26:64:a8:28:de:4e:6d:
4f:37:c1:ea:41:7e:26:8c:08:13:5a:83:f3:f2:c2:
ab:ff:ad:d8:a8:26:ff:0a:57:75:fd:d2:b8:98:12:
f2:9b:1e:44:be:07:8a:81:03:e3:68:3a:82:72:94:
d1:b0:02:8b:57:7e:b0:80:14:8c:92:d4:ab:a1:1f:
b9:29:33:d8:21:4a:fc:61:d2:6f:08:1e:4d:c3:87:
da:4a:c3:a0:e0:e6:da:8c:7e:61:18:7d:4a:09:e3:
f3:88:43:5b:ac:36:2a:27:fa:09:05:fc:e6:03:7e:
0f:36:8b:76:91:82:21:b8:4b:93:dd:b0:1f:a9:de:
97:e5:7e:0b:4f:48:c9:91:59:67:39:e6:61:2c:83:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FD:92:A1:E0:2C:B0:2F:A0:5D:F9:99:AE:56:22:2B:13:43:95:5B
X509v3 Authority Key Identifier:
keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:51:f0:7f:03:e3:92:b8:48:76:eb:e9:95:16:7f:b2:7a:4c:
ae:9b:d4:ed:58:c2:39:e4:ff:55:b8:25:48:0a:5d:84:73:f4:
81:e4:2e:3d:ce:00:a0:29:c5:51:ee:76:97:70:50:a1:f0:5a:
43:55:97:55:31:52:c9:26:5a:e0:74:ec:31:a2:a5:b7:f4:69:
cc:cd:bf:5b:20:20:25:64:ba:c2:04:42:89:32:64:eb:13:7b:
45:58:f2:a8:aa:3c:33:b5:44:4a:31:26:f1:2e:22:ba:f3:a0:
f9:7b:a4:32:51:ef:74:3d:8e:9f:9e:12:f9:27:88:97:83:b8:
ac:11:84:41:aa:64:52:7b:87:44:d4:5f:f8:15:5c:cd:cc:ff:
4d:ca:ff:18:24:db:cd:0d:7a:46:67:ed:9a:0f:93:2a:ad:0b:
be:c4:50:d8:01:fc:ef:6a:84:4b:92:fe:3f:e3:46:e0:e9:0f:
5b:c0:78:62:b3:18:be:72:7f:d9:55:05:cd:18:b0:62:5c:b6:
85:7e:40:18:9f:8a:61:63:22:f7:75:4b:57:85:79:00:50:b1:
c2:9e:dc:37:29:fc:82:75:1e:34:2d:f8:e6:bc:eb:88:3d:43:
90:39:30:b6:8c:55:bf:4a:2d:01:7a:9a:97:7b:0d:39:7e:86:
28:e3:01:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:12:42 2026 by rpki-client