
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json)
Hash identifier: HLvqmzst+lQ7XAeYDbLLRbtl1j4CFRJ/QYNQrvoBz04=
Subject key identifier: 70:7D:76:4F:1B:97:F8:CC:4C:45:15:74:D5:44:DD:4D:39:63:A9:F7
Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7
Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
Manifest number: 022C
Signing time: Mon 21 Sep 2026 02:44:32 +0000
Manifest this update: Mon 21 Sep 2026 02:44:31 +0000
Manifest next update: Mon 28 Sep 2026 02:44:31 +0000
Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: 5cMWDVGQQtnVi99sdqIdQk/cGIgn8+Vm9C6aQAUykSQ=)
2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: KWP1UBy8boz7pJPm05GmDW82fCp04v/CANctx4p0U0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl
rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7
Validity
Not Before: Sep 21 02:44:31 2026 GMT
Not After : Sep 28 02:44:31 2026 GMT
Subject: CN=6ab09a10-11c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:f3:91:e7:dd:60:b4:ad:33:67:aa:03:89:
86:34:6b:30:c2:b9:b8:39:15:9a:a2:8b:e3:63:06:
a1:24:28:20:89:68:aa:26:fa:7c:42:9b:ec:18:d7:
24:45:15:c1:2a:16:0e:1d:3f:fd:66:45:1b:fb:e4:
88:e2:ca:33:1c:2d:eb:3e:1a:7b:5a:28:3a:6b:57:
e6:db:c5:ce:f1:da:5e:75:f8:9f:f8:ec:47:c1:07:
d3:ed:cd:f2:12:c0:7c:35:08:87:ca:55:a2:15:49:
76:33:ff:21:5a:07:dc:99:a5:cc:bf:c5:9a:a9:ed:
22:a4:28:65:34:5b:d7:80:5d:8d:16:2d:3c:70:88:
90:1d:d3:5a:3b:46:a8:ab:f1:fa:29:b5:82:ca:fb:
19:14:e8:8a:b4:76:54:00:9f:f9:06:e8:fc:2d:52:
89:fd:3d:86:da:7f:ba:39:62:37:e3:43:cb:99:97:
17:a7:56:f7:a5:20:0d:8d:06:e0:fb:3a:7f:fe:e5:
2e:64:ec:61:c7:f2:58:c5:41:43:df:c7:ef:1a:a6:
a0:0f:c6:51:4a:aa:a7:9c:46:cd:93:9d:86:b2:98:
2e:62:02:de:bb:e9:61:9b:1c:88:3d:1e:28:5b:44:
7c:c0:e3:fd:6b:5a:b2:87:44:57:95:58:45:43:36:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7D:76:4F:1B:97:F8:CC:4C:45:15:74:D5:44:DD:4D:39:63:A9:F7
X509v3 Authority Key Identifier:
keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:33:dc:be:f1:5d:0c:40:60:ef:5a:8b:d9:6a:62:00:5e:78:
8e:90:b0:01:02:e9:e0:5e:01:34:43:3a:9c:4c:63:6c:29:a9:
08:58:49:c1:d5:6a:71:1f:de:b5:9d:b5:5e:2e:a5:98:0d:3f:
f4:71:e7:f7:d8:1b:c6:36:96:23:6e:3b:e0:fa:dd:ba:58:a5:
11:77:f2:72:45:72:12:cb:18:f2:71:d6:21:7e:3b:0d:f5:49:
08:ef:3f:8f:e5:6c:3e:12:69:23:50:d4:a6:4e:3f:59:f6:07:
4f:4d:4c:12:c3:a2:34:8e:14:c5:25:e6:60:83:fb:5b:50:ce:
aa:b8:65:8b:20:be:b4:d3:26:41:26:69:34:51:5c:73:53:01:
d6:ea:c0:0f:38:12:45:2a:fb:11:17:ac:84:ce:34:e6:01:a2:
a0:17:42:cc:7f:1f:05:ea:e9:9a:88:4c:67:a8:e3:52:0d:88:
e5:4f:10:b6:c7:85:9b:6a:34:e5:a0:4e:7a:cd:24:45:ef:61:
e4:b4:c1:2c:dc:de:d0:13:10:9f:3a:30:7e:f6:69:13:7e:83:
dc:6d:c8:4f:31:72:70:c7:4e:58:45:68:fc:f1:f9:87:e2:30:
1b:e8:1e:46:54:bc:02:be:e6:ec:8f:b2:aa:87:6f:df:8a:24:
18:55:55:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:09:03 2026 by rpki-client