
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json)
Hash identifier: pcX0z+oyTwmZ7xoxIVH/kDLlMCZRFoZi+uXbXSpseq8=
Subject key identifier: 7C:09:A7:26:C8:92:EA:E1:19:88:27:4A:E9:F8:2C:95:2E:7B:BB:A8
Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Certificate serial: 1ED6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
Manifest number: 1EC5
Signing time: Mon 28 Sep 2026 16:05:12 +0000
Manifest this update: Mon 28 Sep 2026 16:05:11 +0000
Manifest next update: Mon 05 Oct 2026 16:05:11 +0000
Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: J3CmEwEBEW/+LU/yLmsIupmSqSUn58RSXV8ASykPAE8=)
2: C038B7FE86EF11F19E006003A7EE528E.roa (hash: ZEscxUiYOhY8wr30WKkD3cENQG8jr+C0jILnAClnhKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 16:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7894 (0x1ed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Validity
Not Before: Sep 28 16:05:11 2026 GMT
Not After : Oct 5 16:05:11 2026 GMT
Subject: CN=6aba9038-f680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:fd:5f:8f:bb:b3:7f:bb:43:3e:f2:7e:0f:
59:09:b5:70:88:e2:be:db:ba:84:9f:1f:9c:1f:93:
91:ac:b8:04:01:0b:b7:ae:e1:36:3a:fe:3d:94:8f:
f0:5e:95:48:eb:4f:cc:37:aa:5d:de:70:69:79:0d:
3e:54:0b:e0:6d:05:16:de:8f:92:89:ad:87:06:7e:
5e:02:3e:9d:0e:10:c6:5c:22:90:4f:d6:25:8c:a1:
64:41:a5:d1:38:35:cd:10:f6:94:d6:5e:a3:5b:ed:
b6:c2:cb:2f:5a:27:92:87:04:2d:bd:93:95:c3:6a:
00:d8:d3:9f:07:2d:b3:2b:38:98:12:3c:c3:3c:31:
32:b6:c4:7c:12:b7:b3:12:cc:26:77:40:6a:b5:f0:
20:97:91:fe:37:58:7a:f3:63:18:39:20:f7:f7:f6:
58:69:f9:dc:99:7f:72:36:c9:e3:d3:e1:0f:6a:3e:
fc:d9:87:be:a9:b0:96:96:ed:48:7b:03:4b:b3:80:
b4:97:32:ce:3f:01:b9:68:39:22:62:b7:85:40:f7:
a2:e5:95:e3:61:cd:20:c7:b3:3c:45:fd:93:73:c4:
b5:ce:9a:e0:1f:c2:11:9d:32:2b:a1:49:c1:4e:8b:
90:d4:67:ed:7f:1d:65:b4:0e:08:8f:30:32:99:b6:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:09:A7:26:C8:92:EA:E1:19:88:27:4A:E9:F8:2C:95:2E:7B:BB:A8
X509v3 Authority Key Identifier:
keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e3:fe:88:77:b0:38:cc:6c:d0:3e:92:8c:99:6a:73:72:ea:
da:45:55:b6:3f:7d:2f:86:8e:f6:0b:98:85:e9:d8:19:39:ae:
0e:c8:2c:b7:a7:11:08:4b:d3:93:c8:70:10:e9:30:49:78:a3:
74:29:26:16:10:f4:b1:97:ac:dc:32:9b:44:15:bb:2e:c5:e2:
16:e6:2d:d4:79:01:1d:0b:eb:c0:4a:50:e0:a4:25:f7:64:79:
3a:3a:80:3e:3b:90:c3:48:c1:55:49:65:c5:2c:06:a4:f9:ef:
51:6b:e3:7c:da:af:7e:a4:cb:1d:9a:e3:45:dc:81:dd:1e:1c:
af:da:e1:0e:4d:a0:19:51:9f:e3:fa:94:52:24:69:f4:6a:8e:
ed:5b:06:7e:58:1f:04:14:e1:88:f5:5a:87:6d:a2:25:c1:30:
fb:ff:ad:be:d4:ec:00:69:ae:ac:b1:d6:fa:78:cf:05:37:eb:
9b:a2:8d:c5:f1:18:fa:96:7c:bb:fa:40:d7:71:ec:87:72:f2:
ea:06:1e:4a:0a:00:8c:0e:42:ce:18:23:71:8c:6c:22:51:ba:
f8:65:39:bb:5a:01:c6:f6:7a:5f:5e:fe:b5:a5:f2:c3:94:da:
97:8e:7c:41:b6:54:18:c4:cb:c7:8f:ef:af:97:16:3e:d2:59:
72:ae:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:34:22 2026 by rpki-client