
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
File: NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json)
Hash identifier: wTCVe65t5wVvZTWacIAqKWDgNUMVIkp1ggiGe5/UNrM=
Subject key identifier: DF:8A:9B:35:85:2A:3D:D9:E6:ED:B3:BD:72:35:EF:2C:60:46:D6:76
Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
Manifest number: 015E
Signing time: Mon 27 Jul 2026 06:53:35 +0000
Manifest this update: Mon 27 Jul 2026 06:53:34 +0000
Manifest next update: Mon 03 Aug 2026 06:53:34 +0000
Files and hashes: 1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: H2xBlI1c+dGrZovZe3x6etv+hdjT1X4sJLbcad15HbQ=)
2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: WWBACUh4p1PPK9KcHPTTQfFx5ubcC8J0wopYYr+Csh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl
rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
Validity
Not Before: Jul 27 06:53:34 2026 GMT
Not After : Aug 3 06:53:34 2026 GMT
Subject: CN=6a67006f-1385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:04:3d:85:78:f7:be:f0:f3:cb:14:64:16:
8e:ce:f5:b7:86:2d:f5:a2:22:07:08:31:3b:cb:b8:
ae:2e:7a:8b:05:57:a5:54:29:6e:7c:9a:11:5d:4f:
d2:e7:2a:59:62:d4:8b:2c:17:98:55:58:5c:15:5b:
8c:55:3e:23:e8:a5:8f:4b:7a:c6:b2:2e:f8:95:9d:
dd:0b:53:cf:b3:44:61:b6:f9:cd:03:7b:83:3c:cf:
87:bd:eb:3a:50:9f:8d:f1:6a:28:c4:74:69:94:1a:
fc:49:0d:5f:c4:cf:6b:aa:1b:07:f9:d4:b5:c5:b8:
72:6c:ce:ac:cf:d7:16:6c:f5:d5:1a:0c:3f:ae:f6:
fa:53:c0:82:55:bd:5a:44:a6:45:e9:8b:23:71:b3:
ea:0f:17:a0:b2:6d:ff:96:be:8f:df:f4:1b:2b:76:
41:56:d0:36:30:0a:06:3e:1f:a3:f3:be:7e:ce:b3:
b4:2f:e6:aa:ea:b0:95:2b:bb:f5:9e:76:a2:66:3a:
30:ad:86:da:c8:a5:e0:b7:a7:7d:98:c6:c7:ed:3f:
9f:1b:e0:34:bf:4b:94:8e:70:be:c6:03:57:e1:df:
72:9c:b1:1b:02:c4:10:51:55:16:9d:64:c5:49:c1:
fc:91:a6:b7:eb:b1:52:a6:dd:e7:b0:65:7b:e2:44:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8A:9B:35:85:2A:3D:D9:E6:ED:B3:BD:72:35:EF:2C:60:46:D6:76
X509v3 Authority Key Identifier:
keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:56:95:7d:02:3a:fe:2f:7d:f3:83:fa:05:2c:5e:a3:6d:3b:
70:ba:e5:eb:60:35:2b:a9:2c:12:34:89:79:a9:a4:13:43:ed:
38:09:38:7a:d6:4b:73:d2:3d:f8:6b:5d:8c:28:c2:63:ad:b4:
e5:2e:5b:34:75:dd:7c:87:0e:76:ef:36:cf:c7:22:1b:0c:57:
fa:1a:97:02:10:3b:a8:24:ce:95:af:32:da:cc:84:96:6f:27:
98:1a:66:36:c4:3c:11:7a:03:e3:40:1f:69:d7:97:c7:29:80:
73:32:8a:93:ae:b6:73:be:a9:a6:e4:aa:31:fa:86:86:d3:38:
36:9f:53:57:06:71:5d:ad:46:8f:ae:01:8b:ed:dd:9c:a6:94:
41:e3:08:05:73:f5:30:58:15:33:b7:11:c6:5f:0e:3e:a7:e1:
3d:71:c9:f5:3e:a8:8d:1b:ef:1f:e4:f6:d6:bf:10:fb:23:8e:
e5:5b:55:92:8c:12:d8:2d:14:e3:52:dc:cd:f1:62:ac:42:84:
7b:96:67:1d:00:31:82:f4:9a:2d:8d:14:40:19:aa:6d:e5:28:
da:52:f5:48:0f:fb:52:50:02:c3:4c:76:b3:e4:24:7f:0e:3d:
47:0e:b7:21:76:f2:c8:2e:ae:7b:0c:91:db:2d:28:a8:46:f8:
08:58:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:55 2026 by rpki-client