
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json)
Hash identifier: yz57XyoMOdY8h1SaRvPbU1/mlN9TqRiOQRIhKOAC09U=
Subject key identifier: D6:DB:31:25:C4:1F:5F:8D:3C:BB:2C:63:6D:77:31:29:24:BF:8F:7E
Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Certificate serial: 035F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
Manifest number: 034E
Signing time: Fri 09 Oct 2026 01:08:39 +0000
Manifest this update: Fri 09 Oct 2026 01:08:38 +0000
Manifest next update: Fri 16 Oct 2026 01:08:38 +0000
Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: De4kq75MGrbuT2+3gzxEu90WcibAQejn3b2qwquqGCg=)
2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: W2elL5IfPSqn4ywyt6yNfSULfkUCxwa6QPF7Ucquq/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl
rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Validity
Not Before: Oct 9 01:08:38 2026 GMT
Not After : Oct 16 01:08:38 2026 GMT
Subject: CN=6ac83e97-6089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:fa:25:5c:25:74:ef:69:e2:86:2c:46:be:
0b:c0:c9:01:b4:9f:8c:56:fe:74:bd:95:34:71:a2:
bb:47:8b:c1:22:12:54:4a:b7:3d:38:94:1b:7e:a3:
1a:27:8d:9b:06:fe:e3:c4:47:87:b9:2e:b3:1e:84:
db:0b:b6:55:11:18:c3:2f:be:a5:f9:a5:2f:c4:ae:
91:c9:be:80:8c:20:59:6f:30:7f:f8:d9:bf:9d:63:
ca:ee:13:7d:61:7a:3f:2b:f1:6c:f9:43:9a:a2:f1:
06:ea:af:03:50:fb:7f:27:fa:00:a5:b6:71:97:9c:
6d:f5:27:53:01:09:7f:cb:9e:50:b3:50:4c:6d:38:
06:a3:5a:f9:9d:41:7f:c2:f1:9f:6b:58:71:a9:d9:
8b:f9:c3:e2:32:dd:eb:29:73:95:fa:24:2d:ea:c9:
93:e5:08:44:0a:41:92:c8:86:48:fb:93:6d:d4:87:
79:35:af:b8:48:41:d9:ba:03:c5:f7:d6:7e:3c:e6:
c2:2d:a9:2b:55:e6:75:ea:01:33:ab:45:04:59:00:
03:c5:03:68:73:7a:24:ef:cd:60:06:ad:0a:79:2e:
d7:83:43:a2:92:32:a6:d4:b3:4b:b0:51:fb:37:45:
64:8a:b0:a3:a2:af:c1:93:7b:46:1e:42:9a:6d:5b:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DB:31:25:C4:1F:5F:8D:3C:BB:2C:63:6D:77:31:29:24:BF:8F:7E
X509v3 Authority Key Identifier:
keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:0a:55:a8:2a:fe:1e:8a:84:6f:91:a3:42:f6:99:db:2e:61:
37:68:f9:ac:82:4e:8d:30:62:f7:c6:a1:03:6f:fe:78:16:f8:
a2:63:5e:f6:3a:8e:37:bd:39:49:11:eb:34:dc:18:4e:5f:46:
d1:2a:53:d3:28:0c:88:af:76:ed:f6:d3:a7:67:4d:16:70:ac:
c7:d2:c7:c0:e5:1d:3b:83:fa:35:8c:6f:cd:bf:7c:f5:cb:47:
83:3f:05:ef:1b:1e:58:f1:f9:80:80:03:35:74:3f:6c:5f:37:
f2:d6:45:73:ac:92:95:81:15:ba:0e:2b:08:ef:9b:ce:ed:f4:
f7:94:33:e8:1a:69:f0:4f:09:3b:2f:5c:de:90:bc:b1:98:5c:
43:20:a2:21:53:9a:64:72:99:d1:f7:17:53:70:bd:b3:f7:0b:
a2:86:d0:37:39:12:3b:b8:cc:b6:ac:67:c8:ab:6a:94:5e:e4:
19:4d:29:66:49:25:e1:d8:7c:3c:41:5c:0a:7a:a2:9e:84:b5:
8e:ca:01:34:3e:15:14:5e:d5:ad:92:50:d2:38:e8:5f:05:bf:
da:bf:53:5e:8b:0f:8a:88:7c:d9:79:63:3b:f4:70:de:08:63:
7a:20:a1:c7:88:d3:da:56:e0:c4:a2:d2:a3:cd:4b:0c:60:27:
5f:3c:ab:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF
M0UwN0E2Q0QwHhcNMjYxMDA5MDEwODM4WhcNMjYxMDE2MDEwODM4WjAYMRYwFAYD
VQQDEw02YWM4M2U5Ny02MDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvyz6JVwldO9p4oYsRr4LwMkBtJ+MVv50vZU0caK7R4vBIhJUSrc9OJQbfqMa
J42bBv7jxEeHuS6zHoTbC7ZVERjDL76l+aUvxK6Ryb6AjCBZbzB/+Nm/nWPK7hN9
YXo/K/Fs+UOaovEG6q8DUPt/J/oApbZxl5xt9SdTAQl/y55Qs1BMbTgGo1r5nUF/
wvGfa1hxqdmL+cPiMt3rKXOV+iQt6smT5QhECkGSyIZI+5Nt1Id5Na+4SEHZugPF
99Z+PObCLakrVeZ16gEzq0UEWQADxQNoc3ok781gBq0KeS7Xg0OikjKm1LNLsFH7
N0VkirCjoq/Bk3tGHkKabVv0FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbbMSXE
H1+NPLssY213MSkkv49+MB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz
OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0
SWtpdl9yN3R1eURqNEhwczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANApVqCr+HoqEb5GjQvaZ2y5hN2j5rIJOjTBi98ahA2/+eBb4omNe9jqON705
SRHrNNwYTl9G0SpT0ygMiK927fbTp2dNFnCsx9LHwOUdO4P6NYxvzb989ctHgz8F
7xseWPH5gIADNXQ/bF838tZFc6ySlYEVug4rCO+bzu3095Qz6Bpp8E8JOy9c3pC8
sZhcQyCiIVOaZHKZ0fcXU3C9s/cLoobQNzkSO7jMtqxnyKtqlF7kGU0pZkkl4dh8
PEFcCnqinoS1jsoBND4VFF7VrZJQ0jjoXwW/2r9TXosPioh82XljO/Rw3ghjeiCh
x4jT2lbgxKLSo81LDGAnXzyrgw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:16:32 2026 by rpki-client