
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json)
Hash identifier: AdZmFDDs8VJwMA1X/gY+8zlm2AfSIW6e8cWnlO/LoNI=
Subject key identifier: AD:AF:5C:CC:56:02:6A:BC:82:4D:7A:2B:6D:1C:D3:40:8A:52:CC:9C
Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1
Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
Manifest number: 01D8
Signing time: Sat 13 Jun 2026 03:38:19 +0000
Manifest this update: Sat 13 Jun 2026 03:38:19 +0000
Manifest next update: Sat 20 Jun 2026 03:38:19 +0000
Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: 4DpDge1ng1NwEz0/EY46O+m+Uxdi80uOIRvRw9KM53E=)
2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: KcnRjC7T6Kcnl9YrWn5mYyKPUtty/r1wIebOb0MFfxM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl
rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1
Validity
Not Before: Jun 13 03:38:19 2026 GMT
Not After : Jun 20 03:38:19 2026 GMT
Subject: CN=6a2cd0ab-f0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:15:ef:c8:56:11:49:6e:be:ac:12:c2:19:77:
3a:1d:53:af:cb:8c:d1:b3:1f:a3:0c:bd:5b:c2:8b:
ab:f0:28:b1:c0:58:46:f0:30:c3:0a:6c:1a:38:3f:
4f:02:c6:d1:32:90:d3:70:05:eb:1b:5c:6d:c8:40:
19:c1:60:73:ae:dd:e1:c7:55:c4:48:2d:bc:43:ca:
f1:b4:7f:bb:a9:60:4e:fd:4e:4f:97:76:c3:42:e5:
24:02:0a:e1:a6:53:07:d9:2b:98:b8:b1:ef:8d:d7:
f3:51:0e:67:e3:6d:12:5c:2a:62:a0:d0:74:72:9f:
e8:da:b1:63:b8:1f:d3:8f:4a:08:a2:e7:12:47:ad:
af:90:99:4c:78:83:8b:08:51:10:c0:d8:b7:c2:a6:
2c:f8:ff:dd:e0:de:05:e1:35:7f:95:c1:14:c3:22:
e0:1f:99:31:87:29:fd:0f:f4:03:94:ac:21:5b:3b:
b7:c7:a1:b4:b0:ae:5d:f9:db:c5:7a:48:61:6f:6a:
34:a9:54:cf:21:cb:9c:30:59:fa:46:01:58:b4:c1:
83:1a:8f:eb:a8:5c:f3:ba:72:3a:80:ae:bb:96:69:
cc:85:e4:d8:30:70:9e:54:48:ae:e0:a4:7d:52:3c:
a8:40:53:c6:f3:63:c7:f9:a2:c9:ca:f7:f5:e0:97:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AF:5C:CC:56:02:6A:BC:82:4D:7A:2B:6D:1C:D3:40:8A:52:CC:9C
X509v3 Authority Key Identifier:
keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:e1:3e:d4:ce:b2:e9:ee:8e:5e:ed:a0:28:08:05:09:06:71:
65:53:b3:54:14:a4:fd:45:1e:a7:c4:4e:bd:84:1c:57:3f:35:
d7:2f:94:85:c9:44:02:cd:52:87:25:6f:de:e6:ea:57:00:a8:
23:a2:0c:e5:20:8f:9d:55:48:61:d5:20:13:ff:2c:6d:96:d9:
d5:2f:f4:fb:74:42:1a:cd:e4:8b:90:38:83:a6:8c:0f:a5:ac:
82:72:54:3b:39:69:1b:ae:72:0b:89:fe:0a:38:ed:12:ae:26:
9a:27:f5:78:fb:d1:92:3b:60:43:0a:7c:71:bd:15:8b:ed:c8:
c8:59:c8:16:da:c2:04:69:e1:7c:2b:bf:a9:98:7f:83:ab:79:
fb:0f:3e:45:df:04:69:e7:72:df:b7:ca:ab:41:a5:ae:bc:9e:
be:8b:03:0a:12:52:3b:97:23:77:27:6b:dd:b1:ed:c5:01:79:
37:0e:c7:79:47:ab:0d:2d:b9:eb:39:10:98:f1:d9:9c:d6:0f:
b2:8d:1b:e7:5a:32:71:58:e0:37:74:a8:0f:59:0a:14:47:23:
ae:f1:5f:5d:94:fb:dc:ee:79:87:58:80:6e:b7:dc:74:50:3d:
1e:d4:6f:76:9a:bf:3b:db:34:77:be:7c:99:d8:91:11:85:9a:
b9:bb:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:55 2026 by rpki-client