
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json)
Hash identifier: zpAoC94DTv/Bk5cCps3eGnWTAdeZ1NVMhAUOd5ssjyo=
Subject key identifier: 5A:7A:7B:9D:89:AC:BD:20:FF:E2:BB:5A:C3:04:A7:EE:EB:41:95:D1
Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
Manifest number: 0146
Signing time: Mon 21 Sep 2026 05:21:28 +0000
Manifest this update: Mon 21 Sep 2026 05:21:27 +0000
Manifest next update: Mon 28 Sep 2026 05:21:27 +0000
Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: 9Xb6FJHL4ZzSDFAUtadV4+UgZlZZwfmVAj7O/BSiA7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Validity
Not Before: Sep 21 05:21:27 2026 GMT
Not After : Sep 28 05:21:27 2026 GMT
Subject: CN=6ab0bed7-00e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:8c:6b:5c:95:34:a0:19:44:fa:d0:29:53:
2d:29:29:ef:9d:d0:36:ea:58:16:3a:a4:43:02:fb:
c5:cf:ef:43:1d:f7:12:68:e1:b8:ea:36:7d:9e:06:
1b:26:7b:97:4f:82:f3:6f:c7:3e:18:52:e9:f2:23:
a4:11:c3:4e:cd:2a:8e:4b:23:a2:b1:2a:68:6c:f1:
54:53:59:31:ef:b2:9a:de:6c:6e:b8:ca:e7:d9:07:
f3:16:e9:76:17:9e:e3:36:8c:f9:3c:e7:33:5b:b3:
0f:99:03:22:84:37:40:e1:7e:46:a5:af:a4:1e:67:
4b:7a:53:25:39:95:e0:91:58:2b:0b:c7:10:cb:74:
b8:8c:22:f9:48:b6:c6:ed:04:45:2c:4e:cb:d9:5a:
6b:37:56:e6:21:ed:1b:36:61:c1:6a:bd:95:41:f6:
5d:bd:d5:d4:05:71:08:00:3b:45:37:a5:57:c2:f5:
38:01:fe:ae:66:dd:99:2e:24:75:a3:c9:32:19:be:
59:39:00:5c:a4:ca:9f:72:13:24:67:5a:77:9d:c6:
86:b3:5b:d3:4d:80:5a:d0:c6:7d:3c:d6:6f:54:bd:
20:73:b4:bf:46:bd:d7:35:ed:78:ef:43:cf:10:95:
c2:58:cb:cd:57:3c:e9:55:f1:4c:93:b8:13:7e:6e:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:7B:9D:89:AC:BD:20:FF:E2:BB:5A:C3:04:A7:EE:EB:41:95:D1
X509v3 Authority Key Identifier:
keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:19:d8:ee:76:17:f4:e3:c6:94:e6:f3:21:c2:79:5d:ba:58:
b2:58:24:60:4e:7c:63:62:61:02:d1:c7:7e:ba:90:8c:16:11:
33:b8:4a:bc:91:81:4e:cf:74:71:75:1b:cb:37:a8:7e:ba:d1:
e6:38:e8:71:8b:99:50:78:a8:6e:6f:52:da:3c:64:b5:bc:88:
99:91:44:da:6e:cc:5c:f7:53:b4:7e:17:19:8d:58:98:56:86:
13:e6:03:ec:44:2f:35:43:6d:5b:33:6c:76:9a:04:3a:18:02:
d9:4b:8e:f7:39:43:91:6f:1a:9a:4e:e5:3e:59:9a:53:f7:34:
19:38:0e:b4:a4:36:10:7c:f6:d6:1b:1d:18:bd:cb:bd:25:7a:
68:ad:4c:a0:3c:40:5e:83:64:73:a8:a1:25:d9:cd:6c:a5:98:
38:f5:b5:a0:80:07:59:ee:ac:e5:47:61:a4:1b:02:6c:10:89:
16:60:84:60:cd:16:32:95:ee:f2:22:63:c4:d7:b2:17:aa:1f:
73:c5:f3:ee:1a:10:a1:87:4c:89:99:9a:27:b7:b6:c4:50:02:
c8:de:c3:7f:0c:88:f9:d4:6b:a4:92:85:7e:91:72:57:19:52:
ed:74:c2:ec:05:a7:33:75:a1:ab:da:ba:a9:86:64:a0:2a:20:
4d:07:b4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:42:11 2026 by rpki-client