
$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier: lyJRPH7vPwa8pb6IAdyGKX0qJMk2gACkYgdKpLcuvSQ=
Subject key identifier: 53:1C:89:EE:04:40:75:C8:ED:F2:75:96:68:DA:9D:E9:49:3B:40:C3
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number: 0120
Signing time: Fri 17 Apr 2026 05:26:56 +0000
Manifest this update: Fri 17 Apr 2026 05:26:55 +0000
Manifest next update: Fri 24 Apr 2026 05:26:55 +0000
Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: Fa9ws9GxKxjgNARQLryf6KR3eeaLwz3PUVrZA9J7gXY=)
2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: rKOF5G1rRsnbnMYR44k5iX/Epi0JY5GfvCxRXMN0wtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Validity
Not Before: Apr 17 05:26:55 2026 GMT
Not After : Apr 24 05:26:55 2026 GMT
Subject: CN=69e1c4a0-1370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:99:16:4a:95:5e:a1:1e:d5:96:28:5a:d4:
91:52:82:95:10:98:17:4c:72:86:88:30:5b:61:81:
a1:1e:2e:45:0f:74:28:ee:ac:84:49:3b:7c:25:5c:
6d:c1:aa:bd:8b:d7:f6:03:69:f0:fa:94:06:9d:8c:
08:e6:66:b5:37:d8:e3:85:a3:86:ba:59:7b:05:08:
7e:73:02:74:d6:07:be:25:91:36:62:82:a2:a8:f2:
fc:0b:c2:32:60:bc:b8:0e:31:1a:89:09:2f:87:9e:
58:26:f8:1a:5b:6d:48:4c:ce:cb:fe:c9:97:3d:39:
f3:12:35:30:98:f7:a6:56:bf:7f:a0:56:62:6c:55:
3a:b4:1c:ae:94:98:35:79:7d:90:a1:d9:05:b7:5b:
25:40:36:e0:91:d0:1e:46:da:9c:35:68:d5:e8:15:
f8:2f:29:09:5f:4c:c4:b3:b8:7f:65:42:9d:b5:14:
29:91:d4:fc:2d:3f:73:66:c3:96:53:78:ef:fc:a2:
58:a7:2a:a9:6e:6a:4d:62:e0:27:55:45:7f:b8:1c:
87:9d:b7:3e:73:7a:36:81:71:15:de:76:fd:3c:5e:
76:ff:aa:d9:7e:1e:e9:db:a6:17:fb:21:56:12:3f:
dc:43:74:00:0c:c8:83:ed:06:1d:ad:7b:1c:2a:06:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1C:89:EE:04:40:75:C8:ED:F2:75:96:68:DA:9D:E9:49:3B:40:C3
X509v3 Authority Key Identifier:
keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:49:05:cd:07:11:c2:b6:ef:ca:93:a6:c8:07:d8:04:64:3c:
33:70:7e:95:97:d2:b5:d2:4e:74:51:f9:88:fd:3f:00:e3:61:
ca:d2:7b:ae:6e:9a:3d:02:79:27:4f:e9:a6:4d:92:47:2d:64:
54:23:00:51:c5:5b:90:4a:f5:d7:02:b7:1c:24:ba:c4:55:f1:
ba:ad:07:71:df:40:81:b1:e3:d3:05:b4:17:5d:18:bb:25:b8:
b1:e8:25:68:51:c6:8b:c0:20:af:d0:6a:8e:57:bd:d9:77:c4:
78:44:ab:19:e3:ae:4f:5c:3e:6c:71:00:b0:fc:e3:0c:eb:c4:
4d:3d:77:dc:0e:d1:21:aa:9a:5f:fd:b5:81:9b:9f:74:60:79:
cf:d0:80:66:24:f7:86:01:2e:b2:4e:d7:f6:ab:29:1f:ef:a6:
8e:3f:34:81:3e:28:39:98:96:f4:cb:8b:c7:af:f0:8e:66:29:
6e:c8:7d:29:2d:df:44:fc:cf:77:69:db:da:3c:17:bc:a9:54:
fb:16:ee:2d:d0:1d:8b:09:21:08:77:c5:73:08:70:d4:fd:75:
ad:c0:b2:a4:c0:30:35:49:f2:17:c6:2c:7d:a1:65:00:aa:d8:
2c:01:ef:a1:8f:5c:a4:41:75:34:b9:3b:c8:f9:3d:66:b3:54:
5d:3a:ec:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:58 2026 by rpki-client