
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
File: nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json)
Hash identifier: 43qjhMAV2L3CjzPJNNOMcMjLdMd+5X+V2AN3XBUZcdY=
Subject key identifier: 4B:D0:14:CC:EA:3D:CA:BB:09:CB:88:E4:ED:F5:DE:F1:4B:A7:87:FE
Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Certificate issuer: /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Certificate serial: 082A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
Manifest number: 0820
Signing time: Sun 26 Jul 2026 21:49:01 +0000
Manifest this update: Sun 26 Jul 2026 21:49:00 +0000
Manifest next update: Sun 02 Aug 2026 21:49:00 +0000
Files and hashes: 1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: IqdP2tOC4vCzITISWNls/3cAJurUoPv9qIY+CwibTow=)
2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: pv+Z3nYrrzxoESGY4e/aJmMCDLaqcQjYTIDQwPuKCpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2090 (0x82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Validity
Not Before: Jul 26 21:49:00 2026 GMT
Not After : Aug 2 21:49:00 2026 GMT
Subject: CN=6a6680cd-74ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:33:23:d1:e3:50:39:e9:cb:1a:89:b5:92:
8a:24:0d:69:69:dc:56:b4:9a:40:63:54:5a:25:71:
61:e7:08:aa:1a:30:37:fc:a8:90:8d:85:31:89:ca:
ee:3c:43:10:db:78:76:d7:53:3e:6c:b8:5c:84:e7:
6a:be:0a:06:63:66:e5:4b:c9:c6:3f:4c:de:16:27:
1e:ce:a8:3a:ab:66:80:60:58:d1:5a:e1:d0:8d:a3:
a3:ae:ae:aa:7d:12:3d:b8:e9:a0:c3:30:57:2e:68:
84:41:35:e0:76:70:97:da:f0:50:c9:49:42:d1:9c:
5c:71:c7:3c:1d:62:73:f6:f3:d4:af:86:10:f2:76:
38:93:b2:c4:a6:f1:a6:44:1c:22:36:83:9b:fc:b2:
c7:e8:74:ea:ba:c9:4e:a7:b7:32:52:6e:16:d0:bc:
05:1b:e3:59:fa:63:2b:7e:ec:8a:9a:e8:00:4b:67:
f8:15:be:be:12:45:d6:b2:d5:53:02:85:00:a4:35:
fb:f3:6c:ea:ad:ad:c8:97:ae:13:59:31:ca:8e:9f:
7e:be:52:54:b6:28:bf:85:da:fa:0e:1b:c6:1f:be:
e4:a1:74:ee:8c:03:d5:ef:62:90:d5:c5:0f:9e:47:
cf:f7:39:6e:81:46:19:81:82:d3:8f:9d:d2:94:82:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D0:14:CC:EA:3D:CA:BB:09:CB:88:E4:ED:F5:DE:F1:4B:A7:87:FE
X509v3 Authority Key Identifier:
keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:75:22:c5:35:e1:72:56:64:42:2f:d0:bc:bc:0b:75:c1:12:
78:a8:d0:c2:45:c4:99:b3:79:6b:77:74:14:d9:b9:bf:1d:db:
80:48:a3:32:9d:63:4d:76:43:28:ce:21:77:b2:37:e6:7e:d2:
a8:53:f3:9f:e1:e0:d5:d3:60:ca:c4:98:dc:c5:05:2a:f2:e2:
78:3a:90:6b:50:51:25:96:8c:da:41:9e:b7:73:a1:3c:61:f2:
13:bf:26:b3:63:6b:21:92:a3:c1:54:e2:57:84:17:a9:80:23:
17:77:c4:61:e0:96:ab:7d:25:32:6a:01:2e:38:ed:86:c8:20:
ec:3e:b3:2a:b7:67:89:13:be:ef:c0:c2:19:75:a5:c6:f5:69:
f7:c7:bf:da:98:4c:66:90:8d:96:de:91:5a:9a:e9:79:ae:25:
a4:4c:77:80:4d:23:c5:c8:53:bb:88:5a:91:41:2c:35:53:85:
8e:5c:18:b5:e6:04:3d:16:86:08:30:0f:da:cd:c5:d7:c5:f8:
66:04:a6:88:23:75:61:2c:34:72:58:25:66:63:98:00:d0:9c:
09:b7:d0:a6:55:2c:85:73:c3:ef:cc:7b:ea:cb:59:5b:8d:23:
c2:b3:6e:83:b9:2a:2c:6e:69:98:a4:d8:18:cc:31:7f:2f:32:
e2:9d:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:15 2026 by rpki-client