
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json)
Hash identifier: wHrOZY8/lvnOa7A4T/S6i50e/VjRQb56eYm933i+GDM=
Subject key identifier: 7A:9C:05:B7:28:A2:2E:D5:BE:A4:30:C0:5A:A0:3B:72:9A:92:49:85
Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0
Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
Certificate serial: 07B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
Manifest number: 07AB
Signing time: Thu 16 Apr 2026 21:23:10 +0000
Manifest this update: Thu 16 Apr 2026 21:23:09 +0000
Manifest next update: Thu 23 Apr 2026 21:23:09 +0000
Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: 2bVweA0bueQRaaxvbN/+I9khr0SgFepPANRcWAUFkBY=)
2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: +UAgsVaXZoSQj/ZYR+yFyFDWt3cCf9QbUv1c+9sTgjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl
rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974 (0x7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
Validity
Not Before: Apr 16 21:23:09 2026 GMT
Not After : Apr 23 21:23:09 2026 GMT
Subject: CN=69e1533e-b6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:c9:8f:9f:1d:51:75:0d:2d:05:43:32:03:
4e:47:8b:c6:31:97:0e:c6:4b:e3:1e:db:fa:57:91:
f8:d9:3e:83:a6:64:0c:86:b4:1f:9b:d8:d2:08:5a:
ec:a7:d7:2b:79:1d:8b:e1:7c:76:1b:7f:bc:b7:e9:
bf:2b:e8:67:53:f2:3c:c8:86:50:88:ac:c7:37:04:
ad:f9:41:0f:d1:92:0a:45:2a:3c:ab:8e:0d:8c:70:
9c:2b:41:06:7e:aa:f3:43:3a:75:d9:3d:25:72:23:
d4:ca:0e:80:13:0f:82:c0:04:09:f1:f1:6f:9d:9e:
2c:4a:ab:b6:5e:dd:b1:c1:c3:9c:59:31:31:d2:2f:
ef:ef:28:d3:e7:d2:5d:aa:83:a2:2a:31:ad:04:8e:
74:d4:b4:27:ff:93:ab:9c:d6:85:af:72:12:3a:b3:
e9:ba:b2:0e:28:c7:a5:90:66:3b:90:01:8c:ae:e8:
c8:68:64:fd:a9:ae:bd:d9:83:37:98:81:d9:a9:97:
3e:63:4f:2e:4a:16:0b:39:e7:7d:ba:8d:7e:bf:9f:
94:9b:25:50:23:ad:9c:e5:4c:e1:d1:c0:7b:dd:bc:
5f:43:5e:bb:50:89:b0:e8:31:55:ae:7f:9d:5d:3c:
89:36:9d:5b:0f:76:51:96:8f:13:f1:4e:a7:29:4a:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:05:B7:28:A2:2E:D5:BE:A4:30:C0:5A:A0:3B:72:9A:92:49:85
X509v3 Authority Key Identifier:
keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0e:99:63:dc:1d:9b:55:ba:39:82:ce:7a:b0:f3:24:91:64:
96:c9:72:9c:d4:0a:fb:85:cd:6c:40:36:f5:b7:ea:58:fd:cc:
bb:57:3d:46:d3:88:5a:2d:7c:6c:83:19:92:cd:28:e7:f2:1e:
09:da:d0:9e:6c:3f:b6:81:e9:94:3e:f0:9c:32:ae:ee:bd:01:
aa:8a:8a:75:a2:fc:fc:b3:af:92:6b:ca:33:a7:99:9e:ee:ae:
80:a7:b8:cb:13:fd:f0:97:55:9b:58:bf:71:83:37:21:bd:4e:
85:97:ee:e6:fc:f3:7a:6f:6a:64:dc:bd:d1:b9:05:2c:06:9e:
1f:49:21:2a:64:7a:dd:d3:4e:0b:dc:a4:75:94:85:ad:b8:a4:
80:fb:65:a7:34:d6:98:aa:af:8d:ba:30:74:04:d8:fc:4d:4e:
37:c0:25:03:46:4a:0b:21:bb:e5:84:00:ea:5f:bb:d5:c6:b3:
02:a3:d8:5d:64:ac:5d:c5:76:07:e9:42:43:c2:1e:4e:c3:a9:
74:5e:1d:ab:bd:ca:af:7b:87:98:f9:c2:70:88:e3:ad:be:fa:
c5:dc:df:5c:ff:35:21:3b:f0:6a:1f:7a:9c:14:6d:8a:20:9b:
4a:69:16:3c:df:c0:38:2d:f5:80:90:91:d5:7b:6c:18:16:2f:
18:ea:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:39 2026 by rpki-client