
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier: sgBBvoDx14ATY6fkIhvadqVCBLoMAxSGpNf7+fVxlus=
Subject key identifier: C6:51:EE:77:A7:AB:E5:81:30:A6:AB:28:9A:BB:79:92:71:6D:37:F1
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial: 06CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number: 06C8
Signing time: Mon 02 Mar 2026 01:54:06 +0000
Manifest this update: Mon 02 Mar 2026 01:54:04 +0000
Manifest next update: Mon 09 Mar 2026 01:54:04 +0000
Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: fubQ8B8aemH1CrW9vR1QGSRBbDL09ppxB3yO2mQahnc=)
2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: LcYL4bDsuUT3zoZgud/O2L3NegCJeaxCuiBri9185ZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743 (0x6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Validity
Not Before: Mar 2 01:54:04 2026 GMT
Not After : Mar 9 01:54:04 2026 GMT
Subject: CN=69a4edbd-fb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:46:b4:4b:b1:d0:9c:60:b1:32:16:3c:df:
59:04:59:49:e7:b7:d0:47:f9:78:6f:e4:ad:c0:f1:
09:46:5a:3c:ab:9a:ff:15:de:27:05:3b:f0:23:af:
32:52:77:15:ad:2d:b4:eb:5e:3d:3b:92:4e:7e:45:
d1:ec:80:58:a2:e3:cd:11:1f:92:a9:42:0e:57:6e:
43:c6:f3:33:95:c0:0d:13:c2:00:99:51:c6:6c:c5:
0a:2c:2f:51:ed:4f:d0:e5:61:2e:b6:5b:13:24:cd:
28:76:d5:dc:b4:7b:e8:e4:77:59:f7:66:5e:47:d6:
d2:9a:67:2f:c8:40:1b:40:ad:40:ed:cb:49:d7:a6:
1f:f1:b6:77:d1:99:e3:1f:ad:f0:b9:73:b9:52:6f:
bf:86:d0:8a:82:0b:89:24:ac:da:84:ff:30:d1:62:
ff:8b:95:3f:d4:0b:06:e7:57:eb:0a:0d:ad:45:bc:
ba:c0:ca:80:96:40:a1:e9:db:9c:d8:8f:41:28:1e:
06:01:35:6f:dd:97:db:fc:ab:8a:67:a3:4d:af:d0:
60:ae:27:38:cb:4c:bd:ef:30:bd:2d:21:33:89:97:
cb:c5:27:5f:90:6b:0b:3c:3c:35:58:c3:5c:19:18:
a8:3a:c7:d4:ad:5a:53:51:c9:19:d7:e0:9d:91:e1:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:51:EE:77:A7:AB:E5:81:30:A6:AB:28:9A:BB:79:92:71:6D:37:F1
X509v3 Authority Key Identifier:
keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:75:b7:90:5e:0d:b2:e3:42:84:11:cf:74:b7:0a:f0:93:40:
03:57:98:69:4d:51:f4:97:2a:35:5e:aa:b2:9c:7e:bd:43:9a:
2c:03:cf:20:29:e1:4e:1c:62:10:23:5c:43:d1:21:59:37:9a:
c2:eb:cd:77:d7:66:c1:aa:3b:b2:5c:a6:76:c7:02:af:67:14:
33:46:f1:86:58:48:8e:d3:10:da:fa:75:8c:b7:08:0f:b4:00:
52:5a:16:d7:3e:a5:9d:45:8b:2e:24:6f:19:3d:a8:81:ca:97:
8a:e6:b5:27:86:3f:55:82:60:79:5a:0b:3b:65:d8:86:7c:c7:
f8:81:10:aa:fa:17:0b:63:3b:41:ff:86:cd:e5:10:0f:32:66:
4a:0d:e8:45:81:7c:a5:ef:0c:e0:8f:e8:72:4a:49:ec:f0:bc:
2f:e1:1d:e3:e5:05:bd:09:f6:5d:22:7f:7c:10:f7:ea:6a:fd:
7d:b4:d7:63:c9:65:b7:15:14:2f:73:f3:6a:a1:0e:a8:b1:11:
3b:3f:79:e9:17:1e:6b:7a:40:02:4a:b0:09:0a:b3:07:4c:a9:
36:31:33:33:9b:cc:43:08:7e:07:a0:06:5f:df:a6:4c:be:e5:
b8:a7:0f:bc:77:b7:03:93:ee:75:e8:35:cc:e6:ad:3d:81:e0:
ec:3d:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:13:15 2026 by rpki-client