
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier: oVS9sv9pF5V66AyZKK2Xr3/k0YA/Vcb+IWzeYkSULk8=
Subject key identifier: 88:C7:AF:E7:79:C7:1E:9A:D4:90:31:CA:AE:9D:43:FF:D0:6E:39:65
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial: 0B9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number: 0B95
Signing time: Tue 28 Jul 2026 19:21:46 +0000
Manifest this update: Tue 28 Jul 2026 19:21:46 +0000
Manifest next update: Tue 04 Aug 2026 19:21:46 +0000
Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: BfozOGuoWPi6QjFridUP+8f99N3J4//V7sTf9DEGeMs=)
2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: R2rbolYd8fcNYY7tviKGs474hPNIpaUduVb/0JNP9tk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2975 (0xb9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
Validity
Not Before: Jul 28 19:21:46 2026 GMT
Not After : Aug 4 19:21:46 2026 GMT
Subject: CN=6a69014a-840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:50:b0:13:e3:b6:da:58:c4:f1:0e:0e:18:
fb:bf:7e:9b:06:33:9c:00:35:5e:6d:0e:81:a3:84:
1d:d8:1d:22:68:72:7b:cd:3a:6b:ba:7d:c6:b5:0f:
26:b3:0a:4c:d0:5b:d3:3b:0e:ef:69:34:07:03:f1:
84:59:5f:7d:f3:01:a1:0b:af:7f:7a:73:08:44:e7:
c5:38:22:c5:12:31:6b:32:9c:99:ff:a6:e9:ad:35:
a1:0b:a7:cc:fd:df:d0:e4:98:ad:50:9d:2c:f8:de:
ef:f1:67:8a:53:83:36:07:9b:20:6a:16:c7:66:fe:
ad:91:36:11:76:97:d2:97:65:cd:0d:24:0b:11:ea:
91:dc:4b:fa:7a:53:cd:65:a7:fc:14:f4:d3:c4:30:
a7:86:7b:ab:e3:85:ef:74:1d:78:f7:ed:d8:0d:f6:
eb:f9:03:cb:a2:cb:b6:86:e6:24:4c:cc:b9:6c:d4:
2c:65:b5:b2:fb:1b:1b:45:25:10:be:5d:8e:30:a7:
dc:b7:22:d4:fc:90:98:da:cf:92:95:63:ed:d3:e0:
26:5a:a8:dc:f7:62:4f:3e:55:31:5a:cd:ce:85:69:
0b:33:b0:b1:9b:4d:a9:33:fa:ba:7d:57:ef:dd:f9:
1b:7f:bf:f0:4e:c1:a6:ae:8e:9e:12:43:1b:2f:bc:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C7:AF:E7:79:C7:1E:9A:D4:90:31:CA:AE:9D:43:FF:D0:6E:39:65
X509v3 Authority Key Identifier:
keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:80:4e:f6:d7:60:67:bd:ea:1a:ac:1e:cb:2e:b9:8b:6e:2b:
78:f1:db:f8:a4:e3:be:e4:6a:95:3c:8a:b2:bb:a5:93:e0:bd:
28:7a:90:4d:d2:2a:f2:11:1d:90:7d:20:2a:10:e9:14:84:2b:
af:8f:d8:95:38:f8:15:d6:31:2f:a2:f6:97:6f:0a:56:45:4e:
f8:47:2f:80:74:dd:c4:97:44:a7:c6:2e:42:56:af:05:9f:7a:
ab:1b:86:34:a9:40:3f:2b:1b:ad:9a:ce:d3:71:b3:78:8b:fd:
ec:78:53:fd:f5:c3:2e:32:d0:1a:34:5a:dd:f4:43:8c:c3:13:
c0:8a:db:bc:d8:87:d6:a2:55:1a:c9:be:f0:18:89:78:fa:e5:
3e:cc:fe:59:ea:9a:0f:7e:8c:ec:cc:1b:43:8d:31:20:ea:46:
f0:07:af:64:58:48:79:45:fc:36:b8:74:3a:6e:1e:87:44:9c:
a0:ab:4d:c7:3e:fd:4c:0b:7a:02:e2:86:f7:67:55:f3:74:41:
d9:b4:6b:ff:f9:b8:1c:71:80:c1:94:98:9d:a7:01:fc:80:55:
5d:9a:e2:bd:cc:fb:9a:ae:34:ad:bb:8c:a7:94:61:ee:05:4b:
0f:0f:30:45:88:30:c3:ba:6a:aa:40:23:ab:ef:f0:67:26:e6:
d7:47:e9:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZEOTYxMTAvBgNVBAUTKDM0MDQxRkUzOTlDMDc2NTk2MUI3OUZFMTI0Njk0MTcy
ODcyMDczQkIwHhcNMjYwNzI4MTkyMTQ2WhcNMjYwODA0MTkyMTQ2WjAYMRYwFAYD
VQQDEw02YTY5MDE0YS04NDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoNlQsBPjttpYxPEODhj7v36bBjOcADVebQ6Bo4Qd2B0iaHJ7zTprun3GtQ8m
swpM0FvTOw7vaTQHA/GEWV998wGhC69/enMIROfFOCLFEjFrMpyZ/6bprTWhC6fM
/d/Q5JitUJ0s+N7v8WeKU4M2B5sgahbHZv6tkTYRdpfSl2XNDSQLEeqR3Ev6elPN
Zaf8FPTTxDCnhnur44XvdB149+3YDfbr+QPLosu2huYkTMy5bNQsZbWy+xsbRSUQ
vl2OMKfctyLU/JCY2s+SlWPt0+AmWqjc92JPPlUxWs3OhWkLM7Cxm02pM/q6fVfv
3fkbf7/wTsGmro6eEkMbL7wddQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjHr+d5
xx6a1JAxyq6dQ//QbjllMB8GA1UdIwQYMBaAFDQEH+OZwHZZYbef4SRpQXKHIHO7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkQ5Ni9BNjI0RkM0NDUx
OTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRsbGh0NV9oSkdsQmNvY2dj
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05BUWY0NW5BZGxsaHQ1X2hKR2xCY29jZ2M3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkQ5Ni9BNjI0RkM0NDUxOTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRs
bGh0NV9oSkdsQmNvY2djN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJIBO9tdgZ73qGqweyy65i24rePHb+KTjvuRqlTyKsrulk+C9KHqQTdIq8hEd
kH0gKhDpFIQrr4/YlTj4FdYxL6L2l28KVkVO+EcvgHTdxJdEp8YuQlavBZ96qxuG
NKlAPysbrZrO03GzeIv97HhT/fXDLjLQGjRa3fRDjMMTwIrbvNiH1qJVGsm+8BiJ
ePrlPsz+WeqaD36M7MwbQ40xIOpG8AevZFhIeUX8Nrh0Om4eh0ScoKtNxz79TAt6
AuKG92dV83RB2bRr//m4HHGAwZSYnacB/IBVXZrivcz7mq40rbuMp5Rh7gVLDw8w
RYgww7pqqkAjq+/wZybm10fpsg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:09 2026 by rpki-client