
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier: 0fUHZx4FsxmZz409/iiCy8UcAhvAJjQoEUYPiNcncOE=
Subject key identifier: 58:EB:AC:CF:D4:90:56:D8:D6:00:8B:90:8D:D4:53:AE:16:A8:3D:44
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial: 071D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number: 0715
Signing time: Sun 26 Jul 2026 22:49:42 +0000
Manifest this update: Sun 26 Jul 2026 22:49:41 +0000
Manifest next update: Sun 02 Aug 2026 22:49:41 +0000
Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: d1LrYDnnUxnb7td5MTwRJS+qCZOI5TxgLX2AoBEP1Wk=)
2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Validity
Not Before: Jul 26 22:49:41 2026 GMT
Not After : Aug 2 22:49:41 2026 GMT
Subject: CN=6a668f05-94e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:a0:cb:7f:f5:b3:74:43:54:9f:45:de:cd:
15:09:2f:31:ff:fa:12:53:6f:0c:85:ae:58:a1:41:
6f:d3:12:37:ae:be:a2:5e:4f:da:18:1e:de:1d:af:
b4:f2:5d:73:d6:89:14:f6:0b:47:5e:ce:0a:f7:20:
ab:97:f9:5b:6f:12:7a:67:1d:e5:ee:95:51:e5:7f:
fe:52:e1:c1:d6:9a:8b:35:eb:8e:b6:76:ac:fd:2a:
d6:27:0c:22:d9:22:12:5e:11:49:99:17:ce:29:ac:
ea:47:3a:20:98:29:17:d9:f9:ad:67:b7:a6:ca:5c:
d2:8a:02:82:66:d4:d0:ee:42:26:12:ca:b6:6c:cb:
bb:eb:2b:a2:13:0f:a7:ff:e4:b9:98:67:b9:d4:a4:
29:a7:52:9b:a4:cd:47:eb:ac:15:89:6c:34:7f:22:
0f:bb:13:51:19:5b:e4:4d:d0:f7:8e:06:f7:5d:af:
20:6c:1c:e3:5b:47:15:99:9f:1b:7d:d4:c6:3d:50:
e4:c3:85:66:96:e4:8e:bc:18:6f:cf:5e:70:31:00:
da:36:32:9f:70:f2:32:8d:d8:b0:70:11:44:f3:cb:
f1:b4:b4:dd:89:b7:21:b8:a1:96:6d:71:18:30:94:
67:0b:17:d5:02:7e:59:ac:04:bf:b1:d0:38:f3:3b:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EB:AC:CF:D4:90:56:D8:D6:00:8B:90:8D:D4:53:AE:16:A8:3D:44
X509v3 Authority Key Identifier:
keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:60:75:40:ec:13:33:05:9f:32:43:66:8a:2b:46:c2:c0:41:
80:81:1b:76:58:fe:df:19:f1:b1:3b:91:74:38:ed:6f:d8:20:
e6:71:cb:a5:49:8f:1c:f4:90:9e:80:e2:c9:f0:4b:e6:07:ba:
24:5b:9f:a4:15:06:6b:10:a0:55:a6:5a:03:7e:44:0c:9e:16:
7d:35:52:19:34:50:7d:e9:2c:af:ea:24:57:e6:62:34:77:fe:
fb:a7:dc:40:0d:95:0f:2a:ba:0d:be:6b:8c:94:b5:fb:8b:b4:
82:2c:1e:eb:00:73:27:70:cf:7f:03:36:38:0d:08:18:86:21:
54:8c:a2:6c:2c:67:73:73:9a:0b:42:6c:5e:6a:e1:23:be:b6:
e9:84:d7:71:52:27:96:be:8d:5d:7f:e1:73:09:c4:f7:cf:ca:
f5:21:61:67:ee:7f:bc:02:a9:05:58:ae:8f:e8:1f:87:68:fa:
2e:1c:79:04:ee:11:9b:6b:fa:fa:5e:b4:54:8b:5f:91:24:77:
b7:c6:41:3b:42:5c:c4:75:68:0b:a1:ce:23:c6:b4:45:a1:31:
2b:ff:a9:f2:8f:a4:ea:46:86:2d:75:10:80:41:a3:e3:b0:9a:
d5:0b:c8:56:c2:89:4f:7b:90:72:44:40:09:be:15:ea:22:c0:
f6:3d:c4:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG
OUQ2MDFFMEUwHhcNMjYwNzI2MjI0OTQxWhcNMjYwODAyMjI0OTQxWjAYMRYwFAYD
VQQDEw02YTY2OGYwNS05NGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxRKgy3/1s3RDVJ9F3s0VCS8x//oSU28Mha5YoUFv0xI3rr6iXk/aGB7eHa+0
8l1z1okU9gtHXs4K9yCrl/lbbxJ6Zx3l7pVR5X/+UuHB1pqLNeuOtnas/SrWJwwi
2SISXhFJmRfOKazqRzogmCkX2fmtZ7emylzSigKCZtTQ7kImEsq2bMu76yuiEw+n
/+S5mGe51KQpp1KbpM1H66wViWw0fyIPuxNRGVvkTdD3jgb3Xa8gbBzjW0cVmZ8b
fdTGPVDkw4VmluSOvBhvz15wMQDaNjKfcPIyjdiwcBFE88vxtLTdibchuKGWbXEY
MJRnCxfVAn5ZrAS/sdA48zvHdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjrrM/U
kFbY1gCLkI3UU64WqD1EMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky
ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy
VWktdHZ4bFU3bF81MWdIZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc2B1QOwTMwWfMkNmiitGwsBBgIEbdlj+3xnxsTuRdDjtb9gg5nHLpUmPHPSQ
noDiyfBL5ge6JFufpBUGaxCgVaZaA35EDJ4WfTVSGTRQfeksr+okV+ZiNHf++6fc
QA2VDyq6Db5rjJS1+4u0giwe6wBzJ3DPfwM2OA0IGIYhVIyibCxnc3OaC0JsXmrh
I7626YTXcVInlr6NXX/hcwnE98/K9SFhZ+5/vAKpBViuj+gfh2j6Lhx5BO4Rm2v6
+l60VItfkSR3t8ZBO0JcxHVoC6HOI8a0RaExK/+p8o+k6kaGLXUQgEGj47Ca1QvI
VsKJT3uQckRACb4V6iLA9j3EcA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:43 2026 by rpki-client