
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
File: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json)
Hash identifier: PSqDHDe6lD78mIjKMcVnDxZCzMgVhjU6eamFPnkjnsc=
Subject key identifier: 03:76:2A:C5:B0:E0:ED:8D:A0:4D:0A:0F:B5:34:FC:A6:D8:03:8A:C2
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial: 0CE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
Manifest number: 0CD3
Signing time: Tue 28 Jul 2026 18:38:43 +0000
Manifest this update: Tue 28 Jul 2026 18:38:43 +0000
Manifest next update: Tue 04 Aug 2026 18:38:43 +0000
Files and hashes: 1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: Qhqu+OhLezR7GXsaeVMcQSGD1rzv9lbNgcT+1yJz47U=)
2: 702B683202E911F097290F2EC4F9AE02.roa (hash: rI6CUqLsowTOLtyO7DNDkcwPYanAGAnTwH1MMmvgqt4=)
3: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: 6zjWf/XY90sdoVIq4cT7u20smUM7Fv1xXkq+Qggk3cI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Validity
Not Before: Jul 28 18:38:43 2026 GMT
Not After : Aug 4 18:38:43 2026 GMT
Subject: CN=6a68f733-27dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:6c:55:cd:10:f4:c8:30:3f:51:3b:69:1a:
71:10:cb:60:1b:36:85:00:d7:c6:81:7f:f2:65:dd:
eb:3b:27:06:ac:98:14:2a:b8:92:a4:63:48:52:5e:
24:0b:7b:c2:f0:94:2c:5b:15:55:70:09:a3:68:9f:
a0:65:87:46:8a:58:68:fc:18:3f:8e:e9:8f:00:03:
da:c7:ec:18:88:14:8b:05:57:8b:7c:d3:51:d7:10:
b4:81:b0:da:1e:cb:82:64:15:1f:43:c6:6a:6c:69:
aa:c9:5e:50:29:4c:be:8f:dd:47:f2:78:65:20:da:
6f:38:f9:1c:28:32:6c:47:35:bc:15:f3:4d:ce:48:
9e:37:af:b2:0c:df:ba:e3:e3:b7:4e:cb:0e:08:90:
6f:ec:5b:5f:13:68:ff:c6:98:fa:f6:aa:33:7b:00:
a4:16:9e:4b:25:e7:58:63:16:cc:f4:d3:87:81:78:
47:44:ad:53:08:cd:b9:67:1f:ef:4c:9f:4c:b6:4d:
e8:c8:b3:ee:94:ed:84:a5:3a:cf:26:bf:a4:86:b4:
53:b8:d2:d3:a2:6a:1b:c7:aa:1c:c4:83:b6:7d:79:
84:c6:64:19:aa:ad:a5:0f:81:1a:ea:92:3e:0e:d1:
e4:a7:22:52:e4:ad:4c:78:84:51:54:75:7a:21:22:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:76:2A:C5:B0:E0:ED:8D:A0:4D:0A:0F:B5:34:FC:A6:D8:03:8A:C2
X509v3 Authority Key Identifier:
keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:9e:af:91:5f:13:54:62:e3:50:24:19:f0:99:58:f6:88:6c:
7a:df:06:43:97:e2:d4:4f:61:a9:8b:87:6a:db:14:71:86:28:
56:bf:f2:3f:65:89:82:cc:1b:a8:c0:bd:90:2a:ff:aa:15:ce:
53:3c:50:c8:bb:c2:f6:a9:57:35:7c:c3:ee:fa:23:7d:1d:22:
49:58:af:37:a2:59:58:41:57:e4:e5:1a:04:69:61:85:95:07:
df:60:3c:74:05:73:d0:0e:f8:e8:7e:33:79:ce:66:19:0b:9b:
d5:53:05:81:a4:b9:f2:20:24:35:f6:1a:9e:66:f7:2b:d2:ae:
41:76:41:ac:51:00:d8:7b:d2:71:c4:6b:fc:56:e9:be:df:6a:
3a:76:c7:21:f2:34:6e:a6:78:7f:7a:3e:95:57:67:a0:5f:d0:
ea:b8:32:69:19:e0:b2:0e:e9:71:05:a6:be:37:5d:0f:2f:14:
74:19:8a:1d:35:0a:05:dd:38:7e:2e:60:f2:89:a9:59:ea:57:
c7:63:90:f9:4e:23:45:fc:26:37:5e:a5:9d:75:b2:77:f6:e6:
99:cb:61:41:6c:c2:02:3d:15:8b:ad:6c:02:9a:c9:ac:4c:fd:
6e:11:e2:11:f0:b0:1b:1d:74:f2:3f:57:8e:e4:44:81:51:2f:
76:81:25:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD
QkYxRDI3NTYwHhcNMjYwNzI4MTgzODQzWhcNMjYwODA0MTgzODQzWjAYMRYwFAYD
VQQDEw02YTY4ZjczMy0yN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAry1sVc0Q9MgwP1E7aRpxEMtgGzaFANfGgX/yZd3rOycGrJgUKriSpGNIUl4k
C3vC8JQsWxVVcAmjaJ+gZYdGilho/Bg/jumPAAPax+wYiBSLBVeLfNNR1xC0gbDa
HsuCZBUfQ8ZqbGmqyV5QKUy+j91H8nhlINpvOPkcKDJsRzW8FfNNzkieN6+yDN+6
4+O3TssOCJBv7FtfE2j/xpj69qozewCkFp5LJedYYxbM9NOHgXhHRK1TCM25Zx/v
TJ9Mtk3oyLPulO2EpTrPJr+khrRTuNLTomobx6ocxIO2fXmExmQZqq2lD4Ea6pI+
DtHkpyJS5K1MeIRRVHV6ISKKTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAN2KsWw
4O2NoE0KD7U0/KbYA4rCMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0
RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTU3OS8yRDJGNDM3NDE0RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVp
NkF5NWRjX2t6c25MOGRKMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlZ6vkV8TVGLjUCQZ8JlY9ohset8GQ5fi1E9hqYuHatsUcYYoVr/yP2WJgswb
qMC9kCr/qhXOUzxQyLvC9qlXNXzD7vojfR0iSVivN6JZWEFX5OUaBGlhhZUH32A8
dAVz0A746H4zec5mGQub1VMFgaS58iAkNfYanmb3K9KuQXZBrFEA2HvSccRr/Fbp
vt9qOnbHIfI0bqZ4f3o+lVdnoF/Q6rgyaRngsg7pcQWmvjddDy8UdBmKHTUKBd04
fi5g8ompWepXx2OQ+U4jRfwmN16lnXWyd/bmmcthQWzCAj0Vi61sAprJrEz9bhHi
EfCwGx108j9XjuREgVEvdoElKQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:10 2026 by rpki-client