
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier: UK9iThGMYfI0ClBe26BOkKGoD6xEUo0TDeMvWdmHErA=
Subject key identifier: CD:D6:4E:34:F9:12:9B:5E:BB:85:13:A0:B6:16:F6:F8:1F:B0:07:88
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial: 0B85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number: 0B7C
Signing time: Fri 12 Jun 2026 19:09:44 +0000
Manifest this update: Fri 12 Jun 2026 19:09:44 +0000
Manifest next update: Fri 19 Jun 2026 19:09:44 +0000
Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: wQz8MBF1yMi87ywrXcEm6wlzARasqASzgZzKj/OAC94=)
2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: sh5UH2ZBn9wBTa697FDn0y/l7y45xFGnVGbIE4BxV4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
Validity
Not Before: Jun 12 19:09:44 2026 GMT
Not After : Jun 19 19:09:44 2026 GMT
Subject: CN=6a2c5978-70d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:37:ae:4c:a4:93:6d:b6:cc:51:7f:97:ff:
95:66:86:10:17:5e:e8:a3:db:26:d2:e4:74:41:59:
30:5f:d3:2d:0c:9a:1b:06:01:17:8b:56:d0:95:4e:
21:29:c8:2c:c5:18:79:53:52:e8:6a:c4:82:73:d4:
0e:6b:5e:ff:f4:27:09:4e:78:d4:70:ce:96:19:08:
56:69:8f:89:34:bc:0f:58:f2:6f:4a:9c:68:4e:54:
8a:3e:f7:b1:a5:12:39:56:84:91:fc:fa:88:f0:3e:
38:eb:52:df:d3:30:57:a8:ae:c5:a3:55:2f:fd:8e:
cf:39:d2:dd:10:0e:24:ce:93:de:d8:42:20:69:09:
c6:bf:8d:3f:4e:17:06:1c:f2:fd:73:ec:ee:51:08:
be:35:79:67:d3:4d:0b:63:49:f2:9c:ee:c6:0a:98:
78:b1:03:cc:e2:a0:0c:9d:2b:1c:44:a8:ff:fa:46:
87:1d:a0:78:05:58:f4:3d:52:65:26:4a:9d:ef:1f:
fb:49:dd:21:51:dd:39:6b:6e:20:6b:0c:a4:d0:8c:
74:3c:27:e2:ea:9d:a6:d2:cf:46:91:9c:c3:33:05:
36:e3:77:51:38:fb:e3:5c:84:31:b6:68:51:84:39:
21:ae:19:76:0b:76:65:34:20:c4:ba:18:44:ab:22:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D6:4E:34:F9:12:9B:5E:BB:85:13:A0:B6:16:F6:F8:1F:B0:07:88
X509v3 Authority Key Identifier:
keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:af:c7:05:09:bf:38:c0:54:dc:0b:70:56:35:95:26:ef:60:
e7:75:09:cc:b8:47:80:a8:27:5e:dc:e1:db:3a:ae:7a:81:bb:
de:67:42:b8:c0:80:15:08:c1:eb:d2:c1:88:0e:83:c6:c1:a5:
5d:77:e9:70:39:2f:ae:90:a4:2e:50:e7:42:4e:d4:af:ff:6d:
1b:73:1f:38:08:39:99:95:7b:6b:94:f5:0d:cf:96:7f:4f:c6:
d8:94:2b:7d:f3:e2:ce:1a:96:f7:5f:d6:c6:77:c1:46:b2:b0:
41:5c:89:11:5a:a8:47:3c:8a:f8:7b:f8:6c:f9:d4:64:84:4c:
8f:ff:22:09:69:7b:8a:98:72:d4:05:f3:3e:7a:4c:be:b8:75:
37:34:c9:85:bf:1e:4e:de:b8:cf:69:2e:e1:3a:96:8e:8c:d1:
ae:ca:5a:01:ca:ac:fe:15:86:68:17:9b:d5:b1:cf:df:16:e9:
70:68:3f:58:78:2f:05:5b:d9:8a:55:74:9b:ea:b3:36:5f:2e:
13:99:96:a2:d6:f4:20:e7:3f:0d:b6:0a:d5:98:c3:4b:c6:c1:
48:53:0f:b6:e9:00:eb:3c:90:d4:1c:5d:f4:e7:65:74:47:42:
6e:4f:69:d7:1e:93:07:19:15:31:9c:8a:a3:5a:ff:4d:31:b9:
19:37:b8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:12 2026 by rpki-client