
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json)
Hash identifier: hc9CxApdBSbi7xzHiuumdABLd59yvbsQ1XMLnlX9go4=
Subject key identifier: 42:57:C1:A4:F8:FC:F8:B0:4D:12:2D:1B:11:D9:28:EE:AD:BB:33:AF
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial: 04B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
Manifest number: 049A
Signing time: Sat 13 Jun 2026 00:01:22 +0000
Manifest this update: Sat 13 Jun 2026 00:01:22 +0000
Manifest next update: Sat 20 Jun 2026 00:01:22 +0000
Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: 5ImNISf8yeCPN2dEc2js8A5c+FHFwU5RbMz60vrz3CA=)
2: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: Pmqjaf05ZJypDFe8YtfZZnEUHZ02b2LTX1bmYry5Vhw=)
3: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: T3sBWx7WsASIvXJipD/8/WgUdUsv5wiiZndfgeUi8xY=)
4: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: rB0rGnSozJU8NojAc45M//byk+WcellFqqyoYGAw7jI=)
5: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: HLjD7Dlj4QNO0JkX6mdLipIuyOmY6BPG8xeaEhp4ZP8=)
6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: CKul+kVwMWY4jLfuuuUbRh3TQkde1chI2jW7GmtTDpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1205 (0x4b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Validity
Not Before: Jun 13 00:01:22 2026 GMT
Not After : Jun 20 00:01:22 2026 GMT
Subject: CN=6a2c9dd2-6ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:6a:f4:9c:e6:bb:02:5c:1c:d6:92:04:2b:
c0:95:da:dc:2f:02:4d:6f:c2:31:09:6b:e8:3c:03:
e1:5d:5d:b6:80:81:e9:88:4c:72:60:be:f5:f6:ff:
85:a7:be:1f:f2:47:50:f6:76:f9:3d:da:f4:2d:85:
b1:b7:10:46:96:36:6d:b1:d5:43:4c:87:7a:08:c5:
c7:e7:56:7d:04:c8:88:fe:c8:72:d8:36:b5:d3:30:
eb:6c:6f:1a:b2:92:ed:47:a0:30:2a:7b:e5:66:ea:
06:63:07:e4:89:18:ba:31:42:a1:02:fa:55:9f:e1:
fe:fa:eb:fa:58:46:ec:e2:e0:fb:11:fa:0d:11:99:
5f:f4:f6:3d:c3:ce:27:3e:21:6b:63:7a:4d:8a:33:
af:68:3f:25:d9:f0:9c:c4:7a:cd:64:68:9b:e6:10:
da:8e:41:a3:f8:75:a0:22:4e:3e:e7:d2:33:46:b5:
0a:dd:6e:89:9f:d9:06:3b:63:f3:06:1b:43:02:14:
92:9e:da:dc:5f:7f:4c:b1:38:d9:e9:3c:5e:24:39:
5d:b0:31:de:67:05:dc:a3:e6:83:54:5a:7d:97:69:
d1:85:49:1a:af:07:25:ec:de:b8:ef:59:e5:f8:64:
12:b4:2b:6f:ef:81:07:c7:a7:08:cf:5c:eb:81:9d:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:57:C1:A4:F8:FC:F8:B0:4D:12:2D:1B:11:D9:28:EE:AD:BB:33:AF
X509v3 Authority Key Identifier:
keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:cd:b6:06:75:9e:fc:18:b0:ea:38:65:0b:0c:d6:a6:8b:e4:
23:38:ca:0a:0a:f2:31:cf:bd:6d:98:54:cb:6d:e8:92:79:64:
2d:fc:a5:bf:71:6d:15:4e:5b:e2:61:97:69:52:5c:ac:cf:11:
56:8a:fe:3d:d1:d0:c7:06:68:0a:d7:59:ef:ef:76:df:f8:15:
55:2a:93:9a:66:d8:d5:aa:46:1f:f6:82:5e:ca:b6:2c:e5:2e:
43:48:fb:ef:0a:3d:ad:d9:32:08:90:2c:53:99:a2:e4:a2:f4:
4f:09:8f:e5:97:4a:4f:72:6c:0d:50:24:58:7b:64:94:74:88:
83:f6:cf:33:39:6d:9a:eb:ff:59:3f:8e:59:f6:af:b3:f5:bb:
bc:5e:b7:68:a7:c6:97:97:92:ba:62:a3:36:06:07:e8:57:1d:
8a:d2:6f:36:f3:3c:d0:73:33:97:3c:e0:51:e5:16:a7:e3:73:
77:0f:fa:a3:86:f8:56:36:6b:75:9c:08:5c:d6:5b:2c:8f:50:
be:33:56:b0:98:57:0b:78:fc:92:bc:59:98:e3:9d:3f:19:40:
e3:b3:a5:9c:11:f0:60:4c:8b:67:5a:41:9d:69:c5:9f:d7:94:
f9:c8:e6:66:fc:b1:32:02:06:bb:7f:33:62:16:dd:70:0a:68:
d5:e6:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:40:54 2026 by rpki-client