
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
File: NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json)
Hash identifier: ahz9wnXXktSA5R1SV43byj63GMAevk3s254QaEI/bLc=
Subject key identifier: DF:14:56:CA:A1:77:BC:FA:75:11:D4:9A:E4:BD:EB:C4:2E:D1:67:4C
Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
Certificate issuer: /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
Manifest number: 95
Signing time: Sun 27 Sep 2026 08:03:19 +0000
Manifest this update: Sun 27 Sep 2026 08:03:18 +0000
Manifest next update: Sun 04 Oct 2026 08:03:18 +0000
Files and hashes: 1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: bl5ZmC1EEcTzaGpkzwIJ1y70bW6ixxkJe6Xl6WuX48c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Validity
Not Before: Sep 27 08:03:18 2026 GMT
Not After : Oct 4 08:03:18 2026 GMT
Subject: CN=6ab8cdc7-b1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:44:33:b5:67:ac:86:6b:de:ea:37:8e:bb:ab:
28:ad:a2:16:57:80:8a:1c:78:90:db:72:cf:20:be:
17:11:6c:be:4e:46:83:68:8c:c8:cb:86:b3:4d:8a:
00:e2:b8:53:c8:8c:1f:eb:49:81:5d:7c:e7:48:4a:
50:81:c5:82:54:38:e9:0b:e0:e0:24:a5:4d:aa:2f:
8d:60:01:79:6c:c7:88:22:dd:fd:a8:3a:22:aa:f7:
9e:34:4c:50:61:19:81:37:b5:c7:a1:5e:ec:39:06:
7c:fa:d7:58:c6:94:cd:b4:2b:67:4c:7c:44:63:9c:
a4:a8:cf:54:de:05:84:dd:42:66:0a:cf:4d:59:6e:
88:5a:67:62:cb:46:1e:72:f9:fc:4a:0a:ed:09:7d:
76:91:da:c0:19:e3:bc:a3:39:08:64:d4:4f:06:13:
5c:72:ef:b8:21:c7:1e:e3:6a:8f:e0:bb:34:f8:16:
38:7b:53:51:79:56:4e:ad:23:ce:b9:67:48:2a:ea:
31:8c:12:d1:e7:15:bf:8a:89:de:34:f2:62:d7:6d:
ef:dd:a6:c1:62:65:b3:b4:1d:06:fe:97:3c:70:35:
a6:c9:cf:bb:9f:07:d8:fd:b8:be:31:e5:06:b3:fa:
b3:a0:f2:69:d4:33:15:a7:e5:44:54:dc:06:6a:9c:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:14:56:CA:A1:77:BC:FA:75:11:D4:9A:E4:BD:EB:C4:2E:D1:67:4C
X509v3 Authority Key Identifier:
keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8f:2a:83:d4:20:94:19:4c:3d:9a:7d:9b:e6:8c:9e:41:ff:
38:79:63:88:dc:d8:6b:c7:65:8e:cc:e9:0c:8c:4f:e3:f1:58:
79:c0:cb:8d:e2:f8:e4:04:b6:4f:47:aa:2b:02:48:66:6a:83:
21:4a:76:e6:5b:66:0b:98:88:05:e5:ac:74:fb:e5:ce:ab:5d:
c8:ef:ac:9a:40:fd:98:4b:70:9c:90:56:d4:91:bc:c7:ce:06:
fd:4f:35:20:45:49:b2:b4:46:0d:1b:08:41:bc:55:40:14:09:
1f:40:2c:bf:70:13:88:6a:09:57:c3:c8:d3:14:e2:ba:bf:4e:
9f:7b:d8:ef:93:c0:f5:fd:d3:16:74:52:1c:09:14:da:c4:7b:
21:61:da:82:24:67:b8:2a:97:ed:bc:e7:13:2a:b4:f2:47:0b:
e8:3a:4d:46:30:cb:33:93:98:da:a4:e9:cf:46:05:81:18:a1:
ee:97:6e:be:04:a6:fd:20:97:fb:f2:bb:30:99:eb:e0:be:4c:
3e:18:b1:f3:d7:bc:18:ba:3e:26:0c:b1:af:20:fb:27:99:cc:
20:1c:f6:76:67:05:9b:32:d8:50:a1:4b:c6:ce:ac:cb:b1:ab:
9d:b5:7f:8c:42:98:ef:7e:e9:ad:0d:d7:72:25:60:4d:d7:c5:
9a:9d:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:12:57 2026 by rpki-client