
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json)
Hash identifier: Tm6ncuQF27LMx378u8v/9nTLuhk4s4M8GJYlnoKBbGc=
Subject key identifier: AF:7A:D3:48:77:FA:AC:21:FF:B1:32:94:7D:44:32:6B:BE:14:A9:A1
Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Certificate serial: 2B3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
Manifest number: 2AF8
Signing time: Thu 16 Apr 2026 15:31:40 +0000
Manifest this update: Thu 16 Apr 2026 15:31:39 +0000
Manifest next update: Thu 23 Apr 2026 15:31:39 +0000
Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: Mg7rB/Cmr5OTth6OFpF7IInNw09WmXAvq/wKYtOLWJI=)
2: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: tDcO3gAeV3vTmIvIAIx8rJ91i0PU7YIxp3dKxE3Ka/Q=)
3: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Mml/GDHtSEelqn0CLVtWVAulYa1xZrTOLXsNy4rC6ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11068 (0x2b3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Validity
Not Before: Apr 16 15:31:39 2026 GMT
Not After : Apr 23 15:31:39 2026 GMT
Subject: CN=69e100dc-113c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:c6:47:64:99:0a:dc:8c:e7:ee:2e:04:b6:
67:0b:c9:76:85:0b:27:2a:24:02:fe:ae:06:79:f4:
fa:52:32:07:d1:3b:f7:ed:bb:1e:b2:03:4c:b1:fa:
2b:80:d9:e3:b0:2c:19:20:ab:e6:f5:07:94:17:a5:
99:bd:23:17:18:6a:88:34:e0:0b:cc:18:03:9f:4a:
f9:06:5b:aa:08:11:ea:7e:8f:ea:a0:c3:d8:e0:ae:
62:c2:d2:be:12:4e:af:13:c5:13:f9:75:5a:b8:22:
9a:72:d9:a2:7d:66:4d:e9:b9:09:07:f1:9d:02:3f:
dc:d9:0d:95:a7:26:c9:d6:85:54:99:3b:10:65:0b:
72:9c:41:7b:c9:24:e8:48:fe:4b:2a:12:4b:69:3b:
a1:a3:00:93:dd:38:48:80:73:9d:ed:02:51:22:c4:
cd:41:bc:17:d6:ed:a3:a1:e2:ea:b7:a3:a5:61:81:
53:2e:42:d8:ae:e2:d6:28:0f:04:b4:d9:24:85:ae:
fe:72:ab:f3:39:63:71:38:70:9b:a0:55:20:5a:6e:
30:5e:d5:d1:84:dc:78:88:2d:3e:a3:9e:f1:2c:b4:
ff:12:1b:06:3e:dc:f3:32:5a:c3:ab:86:9e:36:01:
21:ce:02:d3:01:4a:81:07:c3:f8:23:8c:87:fa:8a:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:D3:48:77:FA:AC:21:FF:B1:32:94:7D:44:32:6B:BE:14:A9:A1
X509v3 Authority Key Identifier:
keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1a:06:31:fe:f7:4a:07:1f:2e:86:5f:d3:37:b0:7a:19:3e:
6b:f8:ee:e1:4e:a4:c7:cf:5d:80:3f:20:e5:fa:70:f2:38:6f:
a6:db:96:79:ea:00:d0:79:a0:1f:bc:10:15:11:a9:b3:03:ce:
4a:67:03:e2:e6:7a:93:40:e9:d9:98:6b:af:53:2f:90:7d:cc:
1e:0a:ad:c9:fc:01:93:8d:ea:09:22:42:8b:fc:ae:ec:36:59:
b0:2b:f2:a3:05:7f:1a:ba:f7:dd:a2:21:83:b5:b8:42:3b:ea:
94:77:d1:17:0d:5f:27:41:c7:80:27:4e:7c:2a:75:86:46:8c:
ea:b2:40:13:c6:e9:54:41:da:5d:14:42:ec:0d:b9:ad:29:38:
97:5f:0d:75:eb:7b:96:c3:28:29:71:84:49:8c:33:44:1a:b0:
67:cb:eb:85:14:d4:04:e3:02:c8:ef:29:73:53:50:1c:36:5c:
45:9b:11:5b:71:81:b6:de:8e:b2:84:37:cc:c7:1f:fa:17:cc:
94:61:5a:27:d4:78:19:d6:ce:38:2b:96:f8:7e:17:63:4f:e7:
16:6f:16:34:9a:fb:98:81:fb:99:a9:09:38:46:66:b3:db:77:
1c:4b:b7:39:55:29:8c:b9:66:cc:4c:83:05:9a:8b:04:92:5f:
cf:8a:22:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:09 2026 by rpki-client