
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json)
Hash identifier: tbImyhwtiY9xb1n+noy5Y2L2vjKoTV5OpNWlC78uy9A=
Subject key identifier: 9E:53:21:BE:38:B3:BD:F1:C1:94:07:B5:0B:AF:AE:F8:FF:1B:6F:0E
Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Certificate serial: 2B1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
Manifest number: 2ADE
Signing time: Sat 28 Feb 2026 15:34:25 +0000
Manifest this update: Sat 28 Feb 2026 15:34:25 +0000
Manifest next update: Sat 07 Mar 2026 15:34:25 +0000
Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: mtqL1EzGAY4F4FFz6MjJE7CT7HX+aKUTEqnFu2Mh4oE=)
2: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: foVnGp/jqxcrwmjuMi9JIuJxuKPFhTJXYXUK/5x/qrY=)
3: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Ey/Kmg1iRRIttYY5811s3SHGsRnkg9ROhR5r3BngPPg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11038 (0x2b1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Validity
Not Before: Feb 28 15:34:25 2026 GMT
Not After : Mar 7 15:34:25 2026 GMT
Subject: CN=69a30b01-5283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:1a:81:bc:99:e9:a8:a4:54:39:dd:1d:ca:
7e:57:1f:a6:83:aa:15:cd:0a:7f:50:36:42:86:4e:
87:91:dc:d4:f1:f4:e5:27:7f:6d:41:20:f8:a4:70:
dc:9d:ed:8b:e9:87:f2:74:29:1e:f8:cd:ba:63:f9:
52:27:15:79:7b:ab:25:b4:84:ae:4d:f1:4a:d9:4e:
04:69:a6:b0:5d:f1:35:32:7a:2b:e1:f0:4f:bb:05:
a3:f2:74:01:83:36:3e:a3:75:92:da:35:19:35:a5:
9c:1b:71:0a:55:c7:ed:7f:6c:1e:4b:80:4f:69:ea:
d7:c0:1d:b0:0a:00:39:68:22:e4:36:92:c1:4f:4d:
c1:fa:08:42:4b:33:b9:a4:19:cb:a3:56:8d:82:4e:
54:ad:6c:19:8b:81:91:7d:1d:b1:c8:9c:9c:d3:c1:
03:77:e5:7f:d2:e6:72:23:9f:5d:5e:ca:ba:72:8b:
76:0b:cd:63:f0:12:87:fe:db:10:a6:83:0e:cf:76:
e8:83:2c:a4:7f:c8:05:fb:62:9b:93:8e:24:66:50:
3f:c1:9e:e9:cb:99:b2:43:bf:f1:b2:e6:be:33:08:
19:c3:ad:69:29:ca:52:8d:cb:86:13:9b:a6:47:87:
43:3b:9f:e0:17:e3:73:02:79:82:e5:78:39:ce:a1:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:53:21:BE:38:B3:BD:F1:C1:94:07:B5:0B:AF:AE:F8:FF:1B:6F:0E
X509v3 Authority Key Identifier:
keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:60:93:f4:59:c2:7f:7e:06:ec:db:c0:99:e4:f9:d0:9c:6f:
9a:06:7a:a9:b6:bf:fe:a5:0e:b7:78:61:bb:8d:4e:bc:e3:b9:
e5:7c:be:a8:6f:39:41:88:81:8e:d3:5f:03:ea:0f:fb:32:46:
85:46:07:ef:27:70:06:f5:39:68:7d:60:76:94:63:37:07:f4:
28:6d:58:a5:b7:ab:5b:7d:a4:09:cd:bc:e8:06:f7:b5:95:28:
8b:d8:29:10:40:77:d9:9e:6a:5f:35:35:73:98:13:b8:ba:de:
a7:46:7a:8e:f2:27:80:d7:df:94:ad:31:f8:9c:f4:6f:93:af:
3d:17:34:73:9c:31:21:ad:e6:68:0b:6f:a1:00:98:19:a3:2d:
37:27:73:1d:39:81:34:41:63:b4:8d:4f:ac:13:49:78:f7:33:
a0:bd:b2:1d:46:53:90:c4:14:45:a3:9b:51:24:1e:8b:39:87:
2a:7d:e7:d4:5b:31:2c:25:bd:db:ba:d7:0e:c8:da:f2:66:ba:
ea:af:84:e5:74:21:a3:ea:9c:96:65:01:f1:6f:9e:d8:3f:03:
1e:23:9e:1f:d6:b7:fe:da:02:06:80:99:2a:33:22:44:7d:84:
65:b0:4b:4b:84:0d:63:9b:63:13:7a:48:08:d0:e4:b8:0a:e4:
c4:18:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:50 2026 by rpki-client