
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier: 8Ktlxc7Kh3au10jpP0XnxIMZwpIKGsOs+66r1fvGO0o=
Subject key identifier: 59:B5:D8:77:6A:E7:3E:39:43:16:8D:76:97:B7:A8:35:20:DC:7E:B0
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial: 1EA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number: 1E93
Signing time: Thu 16 Apr 2026 16:00:57 +0000
Manifest this update: Thu 16 Apr 2026 16:00:56 +0000
Manifest next update: Thu 23 Apr 2026 16:00:56 +0000
Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: rwpzDm94Qs0RkdsR9hVcZSpONjOBj8A+rDrzjTvcz5g=)
2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: eCYFvmibmPBlkZfZuVIvvu3GZJAAha/tKB/Zp7DAtUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7843 (0x1ea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Validity
Not Before: Apr 16 16:00:56 2026 GMT
Not After : Apr 23 16:00:56 2026 GMT
Subject: CN=69e107b9-b75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:43:87:a1:24:19:83:de:20:6b:29:03:40:
27:12:6d:c6:10:b0:9f:a8:b6:29:2b:24:bb:b4:14:
a4:76:10:76:19:51:4d:56:d0:28:09:c4:95:1d:30:
1d:48:4d:b7:ae:ac:cd:1c:7c:08:64:fa:ca:b1:3e:
cd:d1:2e:a4:40:4d:59:d6:95:4b:6e:3f:ca:28:8f:
b9:b3:ee:3f:56:7e:a9:72:7e:3c:80:38:fb:81:e6:
53:01:47:5f:f8:95:fb:17:8f:5b:d7:d6:a2:6f:35:
bd:16:e6:1e:f5:cf:33:76:07:ee:5d:a7:ac:03:2f:
c4:a2:7c:40:0b:93:52:70:3d:74:e3:4e:eb:8b:b9:
23:6e:fe:99:db:03:73:fe:81:83:1c:60:51:5c:b6:
12:be:f4:96:ef:c7:28:d9:19:23:a7:26:2c:9a:42:
91:04:00:c9:e0:23:dc:03:ce:45:37:1b:ff:33:c3:
9d:9f:89:15:3a:68:07:ed:73:c3:50:4c:d6:e6:07:
ee:02:70:20:91:cb:c9:74:19:a3:70:19:7d:a2:0b:
d0:37:28:5e:de:76:4a:43:53:9e:8a:8d:2b:f7:ea:
9e:77:cc:d1:b0:61:d1:02:39:3c:eb:7b:0c:cf:3e:
2e:ea:cd:68:41:1d:5b:0a:6c:3c:7e:b1:9d:3d:9a:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B5:D8:77:6A:E7:3E:39:43:16:8D:76:97:B7:A8:35:20:DC:7E:B0
X509v3 Authority Key Identifier:
keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:1c:9a:31:f0:f2:05:d8:e0:43:cd:23:44:0c:fb:49:c2:0d:
7b:46:4f:be:de:f3:7c:33:38:7f:99:5d:c6:32:53:be:36:74:
b9:77:db:6c:fa:4a:a9:3a:b1:09:26:92:01:dd:8b:59:90:3d:
77:51:29:40:42:b7:98:b4:1a:84:b8:31:ea:25:5e:9e:3b:79:
25:13:65:f7:f0:43:e7:e9:28:6b:62:df:04:e6:6f:40:71:38:
69:14:7e:0c:88:d9:3b:5a:bb:de:8c:ca:67:b6:21:56:23:f5:
a4:f8:50:57:d3:0e:e1:8d:2f:0e:06:cf:23:77:67:fb:c2:bc:
71:78:c6:88:0d:71:dc:94:52:bb:27:c5:a6:7f:24:d7:2d:a1:
32:33:6a:6b:f9:ff:63:f0:75:bd:26:48:d1:0d:3e:64:ed:d4:
22:04:a6:51:b8:d3:e4:37:8d:cb:70:d0:c0:e4:10:2e:82:a9:
1a:db:bb:8c:b7:82:c4:f9:c3:5e:a0:7e:13:d4:6d:4e:42:6f:
4c:0b:2b:64:77:d7:4d:35:f9:3b:55:05:26:0c:07:a1:94:ff:
2c:b0:aa:35:f3:83:b5:15:d6:cf:33:f3:22:f7:76:f8:09:e8:
74:59:1b:27:aa:38:35:e5:74:7c:3a:6c:42:05:4c:a9:87:d8:
b7:fb:92:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4
NDQyMzY2NzkwHhcNMjYwNDE2MTYwMDU2WhcNMjYwNDIzMTYwMDU2WjAYMRYwFAYD
VQQDEw02OWUxMDdiOS1iNzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs2lDh6EkGYPeIGspA0AnEm3GELCfqLYpKyS7tBSkdhB2GVFNVtAoCcSVHTAd
SE23rqzNHHwIZPrKsT7N0S6kQE1Z1pVLbj/KKI+5s+4/Vn6pcn48gDj7geZTAUdf
+JX7F49b19aibzW9FuYe9c8zdgfuXaesAy/EonxAC5NScD10407ri7kjbv6Z2wNz
/oGDHGBRXLYSvvSW78co2RkjpyYsmkKRBADJ4CPcA85FNxv/M8Odn4kVOmgH7XPD
UEzW5gfuAnAgkcvJdBmjcBl9ogvQNyhe3nZKQ1Oeio0r9+qed8zRsGHRAjk863sM
zz4u6s1oQR1bCmw8frGdPZrxJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFm12Hdq
5z45QxaNdpe3qDUg3H6wMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG
NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm
MjRUZU8ybVBaMjZFUWpabmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABRyaMfDyBdjgQ80jRAz7ScINe0ZPvt7zfDM4f5ldxjJTvjZ0uXfbbPpKqTqx
CSaSAd2LWZA9d1EpQEK3mLQahLgx6iVenjt5JRNl9/BD5+koa2LfBOZvQHE4aRR+
DIjZO1q73ozKZ7YhViP1pPhQV9MO4Y0vDgbPI3dn+8K8cXjGiA1x3JRSuyfFpn8k
1y2hMjNqa/n/Y/B1vSZI0Q0+ZO3UIgSmUbjT5DeNy3DQwOQQLoKpGtu7jLeCxPnD
XqB+E9RtTkJvTAsrZHfXTTX5O1UFJgwHoZT/LLCqNfODtRXWzzPzIvd2+AnodFkb
J6o4NeV0fDpsQgVMqYfYt/uSCQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:48:56 2026 by rpki-client