
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json)
Hash identifier: rx84/B4d7c52Tpkl03d7pVq/0e6VuExEJdGmGysyYkw=
Subject key identifier: 96:26:78:DC:DC:FD:F6:E5:D1:35:31:3B:8C:06:72:BF:B7:A9:F8:87
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial: 0707
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
Manifest number: 06FF
Signing time: Fri 12 Jun 2026 22:09:21 +0000
Manifest this update: Fri 12 Jun 2026 22:09:21 +0000
Manifest next update: Fri 19 Jun 2026 22:09:21 +0000
Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: sTYtZrMJQtG7P+mLo3MoPdeeGDN/A5LHTPxddS6i8NI=)
2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799 (0x707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Validity
Not Before: Jun 12 22:09:21 2026 GMT
Not After : Jun 19 22:09:21 2026 GMT
Subject: CN=6a2c8391-25fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:8c:34:e7:29:3a:99:68:c2:0f:26:0f:ff:
f0:92:0c:67:f7:69:a1:c5:e4:1b:37:28:72:65:8d:
b2:a5:55:dd:47:2f:bc:84:85:93:3d:82:d2:98:41:
e5:95:db:fd:92:12:70:6a:be:36:1b:06:cf:7b:fb:
d4:d7:bc:1f:aa:07:07:e8:16:e4:92:16:a6:d0:14:
88:78:94:aa:f3:f4:f1:51:70:c3:fe:a2:0f:6f:38:
4f:75:27:c5:b6:0b:87:45:ba:58:dc:83:3f:c2:b3:
ea:46:83:6c:7b:77:23:5c:fd:db:f4:e5:fb:ea:69:
1a:6b:0c:16:06:b2:ff:14:30:3a:a6:fd:ca:ad:12:
e8:93:1d:11:8c:71:01:7b:71:9f:09:13:1e:2f:f1:
79:2c:9b:b0:d3:86:20:83:d9:ae:c1:00:dd:b1:16:
97:85:f5:6a:1e:9a:ff:71:8c:bb:ab:83:47:0d:19:
b3:73:9a:39:32:71:26:59:53:d3:83:e7:58:b8:ee:
76:e3:60:80:21:6c:ed:2a:c6:96:01:94:2d:f1:ec:
f2:5b:c4:67:96:b6:4e:6a:15:1e:96:c7:0e:04:aa:
41:56:3a:f1:8c:ed:5e:b2:c6:8c:7d:de:aa:63:e2:
25:50:b1:d2:24:3c:7c:2f:68:c1:c0:46:ee:c5:7c:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:26:78:DC:DC:FD:F6:E5:D1:35:31:3B:8C:06:72:BF:B7:A9:F8:87
X509v3 Authority Key Identifier:
keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:de:2b:e3:a6:65:ea:c4:18:b3:06:73:d6:98:88:1d:55:af:
3c:d9:c3:f2:76:65:ed:f2:9d:ff:15:25:2a:58:38:69:64:05:
87:be:aa:a5:ca:40:e7:6f:3f:c4:68:ca:68:64:77:11:b3:e7:
a2:68:e1:d0:d6:64:cd:77:8b:47:c9:76:e2:03:b1:a0:6b:f5:
38:c8:a8:89:af:48:49:f5:71:15:00:a6:83:ec:c1:73:74:de:
c1:60:b2:34:69:63:c4:da:b2:b7:22:50:87:32:31:69:78:62:
17:ac:6c:a8:08:0e:99:89:0c:06:cf:0b:6e:7e:26:ed:ad:cc:
8b:e9:3f:6c:41:5c:ff:83:ec:33:f9:b1:f4:e0:21:78:94:ab:
e3:57:7a:a8:d9:24:e1:ad:c7:ae:9d:34:57:ff:e6:f7:44:3a:
e5:49:56:fa:6b:6d:24:07:2d:58:42:80:06:a1:a5:c7:b7:8a:
86:66:c6:29:89:5a:ca:84:fb:9a:2b:c8:b1:a6:a6:f0:6f:75:
a9:82:82:bd:3e:20:5f:8c:b1:32:e2:56:cf:ef:f5:f7:7b:c2:
08:68:2f:32:dc:ce:9a:07:f0:f0:65:e6:a2:86:da:3a:ce:6e:
4d:53:b4:0c:b0:46:38:7d:c1:59:6a:3b:b7:d7:42:df:03:42:
92:78:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:22 2026 by rpki-client