
$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier: +RpY+OuJ67xLDa13FPKKN1XmII0QMlTx1tYsN1HGWKk=
Subject key identifier: 20:7D:C5:E9:95:53:FA:C8:40:46:9F:08:0E:DF:27:3E:3F:CF:12:3C
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number: 0106
Signing time: Sun 01 Mar 2026 07:07:38 +0000
Manifest this update: Sun 01 Mar 2026 07:07:37 +0000
Manifest next update: Sun 08 Mar 2026 07:07:37 +0000
Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: c4JSs1M7HwOJN+JqMy97IEMZ3t+NMlPoFPje3vI6bBE=)
2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: 6re4BPBhdZPlBhJ6P0bUdH0mQEDnXmK+Ed0vP4MQWeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Validity
Not Before: Mar 1 07:07:37 2026 GMT
Not After : Mar 8 07:07:37 2026 GMT
Subject: CN=69a3e5b9-faab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:7f:98:a1:5e:b5:8c:db:f2:bd:bf:81:a5:
0b:28:48:de:d1:4d:e8:88:e9:0e:f1:83:11:23:73:
27:d7:7a:27:7f:9c:6a:bd:52:8e:a8:a3:84:d0:30:
93:70:e5:ae:a6:96:2e:a2:92:5c:0e:59:98:76:f2:
b5:71:e3:66:e3:be:0e:35:b3:13:a1:f8:31:b9:d9:
ae:1f:47:ab:6f:67:3f:aa:7b:6f:37:6f:f7:25:5c:
9f:73:4d:10:99:d1:bc:b6:8c:01:2e:91:44:39:e8:
47:88:21:e1:13:0c:8f:8c:99:9c:27:c9:eb:28:09:
30:06:34:2e:45:11:d7:36:cd:8c:cd:0d:57:73:60:
ff:ce:65:12:ee:19:8c:93:35:88:2c:2a:39:e2:aa:
d1:d1:52:14:45:85:7d:ba:95:4f:c1:cc:43:2f:43:
db:21:6e:0f:ab:23:c2:7e:9d:7b:42:8f:f3:35:77:
d2:75:80:ed:97:d2:29:fb:51:c5:8a:f9:f0:26:fd:
34:a2:7d:4e:bf:a1:df:74:b0:09:3b:ba:b5:27:6f:
bc:8e:5e:82:38:4e:f2:31:50:bd:39:17:11:b4:39:
a4:8f:68:5c:a2:2f:ef:ee:f4:36:35:9c:06:1f:d2:
d9:13:bc:75:f7:de:88:70:21:87:62:c9:bf:76:f8:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7D:C5:E9:95:53:FA:C8:40:46:9F:08:0E:DF:27:3E:3F:CF:12:3C
X509v3 Authority Key Identifier:
keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ce:47:4a:e7:b6:82:c5:f2:9b:b8:05:df:2a:47:6a:a3:19:
03:3e:ac:2a:a3:2c:86:e3:af:6e:32:18:61:36:43:3e:69:ae:
ba:fa:2f:f7:c5:62:98:4f:46:fb:04:e7:b7:21:5d:99:6f:61:
1d:f5:a7:58:27:8d:57:1d:59:0f:1b:bc:c3:00:ae:e2:80:41:
00:f9:32:62:d5:13:b1:f5:f5:fa:65:1d:b3:f1:40:0f:bc:b1:
a4:6b:6c:33:97:0f:ad:66:29:9e:92:b1:8e:71:a3:be:b1:55:
d5:a5:30:d3:5f:db:94:97:6e:39:68:48:e9:bf:c9:1e:ba:be:
bd:42:31:29:46:c8:27:57:d2:94:ac:15:54:d4:e2:df:8b:cd:
1d:bf:71:25:e1:0d:98:67:f5:91:e8:bc:5d:3c:36:87:67:8e:
46:85:cd:7a:84:fe:2e:31:e6:c9:0a:80:dd:6f:7b:aa:92:f2:
05:a6:2c:cd:9d:8c:41:76:85:59:7d:87:62:a3:49:02:e4:8b:
58:11:8f:51:c1:49:01:01:96:25:09:5e:1f:30:5d:0c:8b:35:
d2:14:77:92:37:8f:a7:5d:32:43:f5:8f:63:39:b6:61:bd:65:
d1:f1:cb:32:50:3a:90:6e:ce:36:a6:84:53:f1:f3:3e:10:14:
6e:34:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:32 2026 by rpki-client