
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier: 3hugv8XEjzPrroeCsQzkwCj/D+oQDeLVE7//w/EA/sU=
Subject key identifier: AA:F6:2A:5D:AF:43:71:8E:C4:79:2D:46:DC:1A:4D:56:93:EE:77:4B
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial: 0BD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number: 138E
Signing time: Sun 26 Jul 2026 19:22:56 +0000
Manifest this update: Sun 26 Jul 2026 19:22:56 +0000
Manifest next update: Sun 02 Aug 2026 19:22:56 +0000
Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: iQg0sawmtxYCAAUcaIGagBJyUTQ5rflCBMR+TIFD+vQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Validity
Not Before: Jul 26 19:22:56 2026 GMT
Not After : Aug 2 19:22:56 2026 GMT
Subject: CN=6a665e90-7734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:09:d9:0a:8c:e2:21:25:af:34:d2:fa:c2:
24:26:3d:15:a1:94:da:d7:6a:b6:c9:cc:32:bd:35:
56:5c:b0:60:33:64:20:45:4d:27:c0:6a:1f:5d:d5:
4a:1b:62:5d:56:5e:1c:e7:9e:02:72:e7:7f:d8:e2:
7d:33:81:c5:4f:56:42:b4:59:d6:ed:4d:72:15:d4:
c3:08:da:ac:1a:83:46:60:99:ac:73:df:65:05:42:
21:21:35:2c:c5:43:3f:f8:e9:bd:d1:22:55:79:41:
55:f6:4a:e8:50:c3:85:a0:62:1f:bf:23:7d:2d:7a:
49:1a:29:81:c1:84:bf:4a:d8:93:11:62:73:0a:ef:
53:37:64:d3:86:35:7f:cb:a4:3f:20:db:30:c9:5f:
e0:d3:db:fe:26:df:e4:19:44:58:39:46:bd:f0:e4:
af:94:f1:82:b5:c5:6e:d7:56:14:c5:8a:73:a5:11:
6b:6f:33:83:53:f8:eb:f0:5c:7b:eb:3d:3a:65:30:
fd:5f:8e:08:e0:9e:b3:d2:e6:16:e3:0f:30:eb:f1:
83:74:4f:44:db:e5:06:20:f6:1b:e5:67:a5:b9:6e:
2d:57:6c:dc:df:17:b4:88:ed:52:6e:9e:81:9f:1e:
e4:36:56:ac:f0:1c:30:8c:85:b0:d0:ad:0e:10:d4:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F6:2A:5D:AF:43:71:8E:C4:79:2D:46:DC:1A:4D:56:93:EE:77:4B
X509v3 Authority Key Identifier:
keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5b:ce:ec:8a:0d:ff:c3:d0:59:08:bc:1e:e2:51:b2:7a:5a:
57:1b:62:66:3a:97:54:b7:d1:b8:2f:66:59:1a:ae:48:64:3f:
11:e8:8b:42:ca:e1:76:50:52:fa:da:0b:5b:2b:9f:4a:da:7e:
a7:46:23:a5:8f:41:e2:49:9e:8c:f8:98:4b:8e:23:9e:2c:a1:
ae:93:89:bb:1f:3c:ea:a9:aa:6e:54:92:32:ad:13:5e:19:fa:
cf:0b:72:22:3e:98:46:56:6e:7c:25:52:11:a1:61:fe:46:a4:
be:3b:cc:62:3a:41:37:ef:bd:f4:8d:3f:16:c1:d4:a0:43:b8:
f5:5d:ab:40:e6:60:86:fa:ac:94:b9:35:c1:7d:0c:ad:86:e2:
15:d7:e0:e8:a0:cb:4a:0e:b3:56:4c:90:d3:fe:35:1e:31:0b:
35:de:8c:f8:69:89:10:f3:ce:cf:1c:0b:98:1b:32:d4:23:22:
f0:e0:e7:eb:48:77:f0:15:e2:e1:3e:b8:6b:a4:6b:5f:95:16:
d3:f6:29:1f:27:6d:b5:75:7a:ea:9f:c3:8b:3c:43:52:f4:a0:
35:11:13:e3:94:98:52:7b:64:36:12:88:1d:15:d8:d0:b3:59:
5f:47:6a:9a:eb:32:b0:ae:c2:71:88:d1:14:18:e7:4f:fb:69:
96:2e:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:09 2026 by rpki-client