
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json)
Hash identifier: OHKyCqScPhqLLD3nRDeBg+FARumWBhsxG00n7Nf2jCU=
Subject key identifier: 96:EF:4A:C2:59:4E:A5:F6:D7:3E:A1:E6:93:FA:90:41:4F:4B:C2:FE
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
Manifest number: 06
Signing time: Mon 02 Mar 2026 02:59:13 +0000
Manifest this update: Mon 02 Mar 2026 02:59:12 +0000
Manifest next update: Mon 09 Mar 2026 02:59:12 +0000
Files and hashes: 1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: 62MA3mSQOQFhdupMaJMK/vADb3B71+iIujSlDxEJH88=)
2: 2D89A3B4139A11F182E65A043E3D8C67.roa (hash: WzPoHRZ+sD0Tq4NDMGpvPyaJehMoEm7aBtLHe8LWFq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Validity
Not Before: Mar 2 02:59:12 2026 GMT
Not After : Mar 9 02:59:12 2026 GMT
Subject: CN=69a4fd01-2f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:12:1d:b6:dd:00:44:02:5c:84:53:6b:9d:
ba:04:aa:2e:21:98:a4:56:59:f1:44:2a:22:3a:39:
01:ca:a1:24:20:65:17:b9:f3:bc:ce:ae:75:f7:88:
a6:bf:15:51:f9:da:c9:b2:13:66:27:32:d6:c1:c1:
3d:7c:4d:35:ed:ab:39:84:bc:60:35:52:d9:d7:67:
e8:cc:c8:73:d9:04:e7:b5:7e:e4:ff:e9:93:f4:ca:
5f:ff:2f:0d:40:7b:97:2c:56:19:5a:81:bd:77:6d:
9b:78:eb:ca:d0:e1:41:e7:d6:4e:7e:1a:ff:75:4c:
f1:48:7d:c6:83:e0:09:5d:0c:d3:dd:14:89:c0:b6:
59:e9:51:63:6d:88:63:93:eb:4d:ab:c3:dc:5b:44:
15:5d:56:76:6b:40:0f:c8:b8:f0:68:80:be:d6:ff:
17:6d:93:0b:aa:cc:82:44:32:23:7b:15:eb:ec:ac:
5d:c9:74:9a:53:69:b6:7f:70:1d:77:57:cc:7c:57:
08:7a:2a:ec:79:7f:bd:16:ac:e4:03:cf:9b:2c:2d:
16:0c:6d:f8:26:ee:19:7c:86:0b:96:45:d0:4e:03:
6e:f7:c9:b0:83:b0:eb:a1:fb:4f:19:96:6b:e7:19:
7a:9b:82:f4:9a:59:dd:08:27:1d:8f:3a:18:c2:fa:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EF:4A:C2:59:4E:A5:F6:D7:3E:A1:E6:93:FA:90:41:4F:4B:C2:FE
X509v3 Authority Key Identifier:
keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:51:29:6c:6b:5a:1b:fa:c8:61:c5:5d:65:6f:73:1f:07:1e:
c8:7a:fd:e3:bf:00:fd:8e:e8:3e:8e:a6:a1:83:bb:34:5d:f6:
64:81:3b:ca:ff:79:82:bd:40:29:df:17:93:71:86:62:3c:ac:
00:b4:f8:7c:36:a1:92:e6:dd:01:94:4b:de:81:40:1a:d5:13:
8a:b8:84:9d:7d:7d:46:07:04:16:35:99:79:9a:ce:b1:56:93:
9f:bd:d6:fc:f2:e8:ef:e7:58:df:3d:0f:e6:87:42:3d:4b:f4:
ea:ce:0f:c3:68:bc:dd:d4:41:d0:8c:66:cd:88:4d:6e:3a:5c:
97:71:63:6f:bd:24:3b:f1:51:3c:85:1f:2e:95:ce:76:2e:d6:
4f:86:96:bc:3a:a8:45:e8:8c:b9:0c:22:96:55:a7:28:66:00:
97:36:f6:c0:c2:7c:2e:fc:10:66:45:65:09:bc:40:42:59:f2:
e1:76:17:5f:cb:7a:16:91:13:59:07:b8:c6:50:c4:d4:93:87:
63:3a:ad:a2:2f:85:d2:0e:55:b1:b6:71:02:49:0e:d4:b4:e6:
dd:17:15:59:e9:10:4f:37:01:77:e9:c9:d2:43:6d:7a:3b:86:
72:65:19:aa:76:0a:d5:0c:6c:12:8f:6f:66:16:88:98:85:fc:
87:a4:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:44:13 2026 by rpki-client