
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
File: NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json)
Hash identifier: /whG2HUKhNsHVv2AJs6VwtPK8kfsrmf3UVcZP9b1ka4=
Subject key identifier: E7:E5:ED:6D:36:82:A6:20:34:0A:21:48:8A:D5:F8:C3:EE:CC:D5:FE
Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
Certificate issuer: /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
Manifest number: 74
Signing time: Mon 27 Jul 2026 10:09:13 +0000
Manifest this update: Mon 27 Jul 2026 10:09:12 +0000
Manifest next update: Mon 03 Aug 2026 10:09:12 +0000
Files and hashes: 1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: IRh/+bMa+vhBnkz3QSIDBeiw6t92EkbnXm63S9sQl54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Validity
Not Before: Jul 27 10:09:12 2026 GMT
Not After : Aug 3 10:09:12 2026 GMT
Subject: CN=6a672e48-debd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:76:73:fd:7b:09:ef:3f:2b:1d:0d:e3:cb:
0c:9b:be:c3:3d:4c:d5:a3:c6:e6:ca:d2:29:14:a8:
d6:a1:77:12:15:42:3f:61:07:13:3e:6e:d0:4e:25:
1e:3a:dc:e6:50:d1:fe:b6:1c:9f:14:e3:d6:25:9f:
30:ea:6a:f3:e7:b6:63:fe:ea:86:07:2a:0b:60:b1:
bf:5f:f6:3d:e1:d8:16:1f:03:92:85:46:f8:e8:9c:
62:11:7b:f2:b1:04:98:a0:54:2d:bb:1a:72:d8:bf:
02:c4:2e:e3:77:9f:55:f7:29:a4:b7:8d:27:3f:36:
bc:28:40:04:85:0b:c9:0d:7a:df:d6:3c:4c:16:3d:
ad:1b:fd:07:2a:63:12:4b:45:2a:f6:d0:27:de:3b:
fe:8d:0f:ce:ef:be:57:a0:77:ff:b1:46:49:a2:75:
f1:b6:78:f0:cb:de:05:c1:a8:28:97:ee:f7:67:0c:
d8:c7:35:43:6e:e5:31:1f:82:dc:0a:aa:79:99:d8:
c5:f4:94:18:ec:c1:59:d6:87:c3:10:13:6e:07:4c:
92:f9:9d:3e:3f:26:76:08:5e:57:dd:d5:e7:87:15:
f6:61:ed:d9:8f:d3:bf:6d:81:d7:18:d1:a0:80:f2:
3c:72:ec:2f:85:ed:ed:8e:86:58:54:b3:4d:72:a4:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:ED:6D:36:82:A6:20:34:0A:21:48:8A:D5:F8:C3:EE:CC:D5:FE
X509v3 Authority Key Identifier:
keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e2:17:43:ba:21:f5:c6:1d:3d:3e:52:d5:43:9c:c5:16:68:
a0:99:d6:a2:68:0f:b5:30:64:30:07:69:7a:55:bb:d0:e1:9f:
b3:71:2a:f2:64:41:6f:5c:9d:28:45:42:45:d8:29:d1:b2:0f:
c5:7c:c6:7f:36:1d:9b:5d:49:bc:b1:23:ea:2c:07:60:67:25:
28:96:56:17:84:bd:30:e1:c7:8a:04:89:07:28:81:01:6a:88:
02:7e:05:74:ca:c7:81:bb:71:ef:16:8f:85:91:3b:de:71:0c:
9a:53:0f:81:cc:da:64:dd:b0:20:00:d5:6d:eb:f8:a1:5e:b2:
00:cf:56:43:de:31:d0:42:f3:f9:10:2a:83:3f:52:08:01:b8:
3c:50:df:23:eb:af:fe:54:f7:c7:76:44:4b:44:df:72:f3:2c:
d9:db:98:86:3a:7b:df:24:fc:6a:53:7f:eb:43:b7:25:54:01:
4c:5d:74:87:f3:12:18:31:11:2c:aa:1d:53:55:02:09:8e:ee:
15:f7:f7:0b:3c:3a:85:00:a6:d9:94:ec:3f:e6:9d:06:b6:28:
86:ef:68:6f:d1:bf:08:f7:c1:bf:13:a3:8f:3a:2c:15:19:74:
b8:92:f2:43:a0:70:3b:18:32:28:d7:54:09:ab:4e:f8:f0:30:
8a:a1:e4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:15 2026 by rpki-client