
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
File: nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json)
Hash identifier: H5lsNVOfx08SkBtymjIYlQp7yk6Sln8N/mqCzcJwT+s=
Subject key identifier: 59:74:F7:F8:C7:70:77:35:E3:FC:02:7F:54:2A:B0:5F:1B:C5:DA:39
Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Certificate issuer: /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Certificate serial: 07DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
Manifest number: 07D5
Signing time: Sun 01 Mar 2026 23:37:23 +0000
Manifest this update: Sun 01 Mar 2026 23:37:22 +0000
Manifest next update: Sun 08 Mar 2026 23:37:22 +0000
Files and hashes: 1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: d2pmSz3PE24T1u3u2bMHdJCvpbfc/Autod/zDpkRbno=)
2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: pv+Z3nYrrzxoESGY4e/aJmMCDLaqcQjYTIDQwPuKCpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015 (0x7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Validity
Not Before: Mar 1 23:37:22 2026 GMT
Not After : Mar 8 23:37:22 2026 GMT
Subject: CN=69a4cdb3-218a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:b0:c7:d1:e6:79:82:fc:1c:6a:84:20:9d:
29:7d:25:b1:32:e7:53:f8:de:a6:8b:d9:86:34:a7:
6f:62:7d:d0:b0:6f:2a:22:26:1f:42:e2:01:5c:70:
4b:7e:78:12:34:1b:7c:9c:e7:9b:bd:6c:09:18:98:
fc:e8:17:11:31:60:70:5b:b9:d9:69:d2:47:b3:24:
44:59:b7:fb:cd:f4:df:21:01:95:5e:9e:a0:59:fd:
36:55:76:b9:62:db:b3:09:14:01:4d:a3:9b:f9:20:
c5:61:96:00:b0:eb:6b:21:d2:d9:b3:97:2e:63:df:
80:d0:d7:75:4a:f6:f1:1e:e3:4b:0e:88:75:78:f6:
7c:67:b2:00:4b:4a:f0:ad:b2:29:67:b3:cd:ed:49:
e5:38:a8:cb:08:35:3e:c1:a9:10:0e:d9:3e:c0:ca:
5f:5f:5d:31:70:78:65:1f:d5:bf:fd:e2:d6:7f:af:
f0:41:ec:ee:80:83:50:29:75:ec:f8:6b:25:bd:c4:
71:2d:b5:f3:69:a9:90:f6:4f:7a:91:89:1e:f9:6c:
91:26:9f:17:a8:c4:8d:c7:99:26:d6:33:1f:f6:e7:
19:f0:02:d7:29:a3:32:0b:b4:b5:b8:de:01:eb:cf:
b8:8e:50:6f:59:af:8e:2f:57:63:ef:07:0c:38:a1:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:F7:F8:C7:70:77:35:E3:FC:02:7F:54:2A:B0:5F:1B:C5:DA:39
X509v3 Authority Key Identifier:
keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:73:22:0e:47:2d:dc:e7:aa:e0:7a:e1:00:79:b7:50:e4:ed:
32:b9:4c:93:a8:9c:eb:dc:a7:10:c6:22:e1:d8:ff:ee:34:bb:
88:5f:d9:76:a1:7d:53:2f:c4:12:0b:aa:3c:de:32:f9:6a:56:
fd:8a:0b:b3:c1:42:e8:73:e7:ec:68:08:49:00:0d:89:01:f7:
02:00:13:23:65:8b:47:aa:28:16:2a:70:80:65:9f:ea:6d:f1:
33:eb:8b:f1:da:17:64:6f:ae:3d:4c:99:e8:a2:c6:db:1e:01:
76:ed:ff:aa:2d:12:b4:fa:41:f0:4a:7b:b8:1a:15:e0:60:9f:
6f:9a:4a:16:e1:45:6f:37:bc:5a:ce:ac:f6:f4:12:5d:da:b6:
a2:0d:a0:b4:ab:5b:bc:ff:ae:4f:fb:58:52:32:6f:6a:a2:a5:
31:91:88:65:06:36:f8:e7:26:16:5a:5a:64:08:de:a9:42:f3:
cd:43:b5:ca:09:06:4a:ff:b6:88:0c:3c:e6:d1:5a:b2:ae:93:
3b:29:ca:3b:84:ce:2b:78:bb:23:a1:77:eb:77:01:f8:9e:97:
3a:f7:74:4f:40:af:58:48:30:b5:9c:5a:ab:6b:a1:2d:c3:19:
07:9f:42:6b:60:9f:10:b1:6f:aa:dd:2e:da:dd:fc:ea:7f:b8:
a2:dc:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:17 2026 by rpki-client