
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json)
Hash identifier: cHrlTIyr6Ejsl5QAMrAI0CxUJbPllJX/a/pjFz9SlLg=
Subject key identifier: 0E:7E:6B:5D:BE:B7:6A:C7:7E:CD:A9:9D:3B:A6:78:AE:BC:54:00:C8
Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Certificate serial: 2B59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
Manifest number: 2B15
Signing time: Fri 12 Jun 2026 15:31:54 +0000
Manifest this update: Fri 12 Jun 2026 15:31:53 +0000
Manifest next update: Fri 19 Jun 2026 15:31:53 +0000
Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: iwyzRUuXcsN64jru/stJSoiPt40ruwvXcMjs1SeyR48=)
2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Mml/GDHtSEelqn0CLVtWVAulYa1xZrTOLXsNy4rC6ik=)
3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: tDcO3gAeV3vTmIvIAIx8rJ91i0PU7YIxp3dKxE3Ka/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11097 (0x2b59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Validity
Not Before: Jun 12 15:31:53 2026 GMT
Not After : Jun 19 15:31:53 2026 GMT
Subject: CN=6a2c2669-ecb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:4f:1d:61:47:2b:c0:14:c8:89:56:61:69:
01:51:9f:11:12:9e:fc:c8:9a:ed:b0:6c:97:cb:3f:
c6:d9:27:d1:23:d3:17:68:3a:f1:1a:ab:49:f2:e8:
96:b7:18:3c:52:a9:36:01:c1:24:0b:5e:53:e3:69:
45:41:88:48:56:44:99:50:6c:fb:b3:87:ad:6e:70:
59:6a:36:6f:7f:e5:4e:c0:7d:d1:7d:89:97:17:21:
a5:67:67:c9:a2:e7:9f:a4:c0:ae:b4:73:66:95:43:
a1:32:f1:99:05:4c:e2:32:5c:7d:49:8e:06:bc:e0:
0a:04:5d:24:6c:32:01:84:8a:ed:34:ca:8e:0f:05:
e9:58:fe:2b:6d:ce:4d:1e:26:87:ad:8d:09:dc:c4:
cd:f4:cb:e4:26:79:db:87:96:9c:88:97:fe:d4:ff:
b9:76:39:44:40:36:8e:58:72:49:f2:e2:89:35:dd:
0b:c7:01:d0:b2:4f:1f:bd:23:b7:33:94:16:2c:df:
9a:6b:32:25:b1:6e:ec:ba:6d:dd:43:ee:08:2d:ef:
0b:39:69:9c:9d:e4:98:63:19:17:5f:77:34:87:f5:
9b:0c:14:8d:8a:92:bd:8d:30:25:8f:9b:4e:36:82:
fa:fc:e2:cd:08:39:90:f9:02:b5:28:75:3f:cb:82:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7E:6B:5D:BE:B7:6A:C7:7E:CD:A9:9D:3B:A6:78:AE:BC:54:00:C8
X509v3 Authority Key Identifier:
keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:de:91:b3:27:f7:57:3b:b5:2e:93:4e:93:1a:92:51:3d:e8:
a5:6a:da:cf:c5:08:3b:42:67:a3:0c:56:17:dc:48:cd:47:90:
e4:3b:15:de:e2:91:97:bf:c5:1c:17:e2:8f:be:ab:47:94:9c:
be:f2:eb:3f:d7:8f:ab:22:94:dc:51:3f:47:05:64:2e:11:70:
05:73:0e:bd:b9:ad:09:79:d8:1d:96:2d:4a:14:7f:b6:1f:0a:
16:29:86:69:0f:1b:55:0e:c8:f0:ac:8a:61:10:70:5f:d4:f2:
9b:34:22:08:f6:37:0a:4f:58:3c:bd:24:55:36:d3:4a:cf:20:
dd:f2:56:78:75:73:8a:8f:e9:45:4e:76:a7:5a:41:77:f6:be:
23:56:3e:7d:f0:c3:04:cf:19:46:4b:f3:c7:a6:27:40:06:0b:
da:d9:e9:a0:2f:60:57:57:dc:1f:35:f1:83:61:c5:ad:df:24:
8c:1d:f9:ba:9b:c1:bc:12:7e:66:0f:64:20:c3:03:67:53:12:
a1:4d:9b:13:40:1f:69:b9:4e:9a:b6:22:3c:65:d8:de:44:fe:
b1:9a:0d:01:be:03:c9:fd:43:b2:6f:2a:ac:21:f1:c1:71:27:
fb:65:38:d6:68:a5:5b:ea:59:3d:82:c8:e1:2f:fc:24:2e:c1:
fb:21:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:01:51 2026 by rpki-client