
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json)
Hash identifier: 0xKPzCvnBaxAPDnDwBqnpNqREdFvuFSCKGnRJKVoGRA=
Subject key identifier: 06:E0:F2:99:B1:EE:61:7E:7A:97:4D:BC:AD:F9:AD:FD:F3:16:FA:6F
Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Certificate serial: 0B8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
Manifest number: 12EF
Signing time: Mon 02 Mar 2026 00:02:36 +0000
Manifest this update: Mon 02 Mar 2026 00:02:34 +0000
Manifest next update: Mon 09 Mar 2026 00:02:34 +0000
Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: A4GfdbHwrg09Azz8QL/vz/0HoRZzvB1nPq1vNA83TTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2955 (0xb8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE
Validity
Not Before: Mar 2 00:02:34 2026 GMT
Not After : Mar 9 00:02:34 2026 GMT
Subject: CN=69a4d39c-2768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:6d:84:bc:a2:6a:b8:df:9d:47:f4:f2:3f:
80:74:96:00:3f:b4:14:44:53:b5:e6:52:d9:f2:07:
e1:63:ae:23:4f:33:4c:bd:34:91:61:03:a8:43:e1:
6e:93:2c:b4:ba:de:2c:9b:10:68:13:19:d7:54:89:
53:b5:fa:7b:5a:ec:2f:b3:ae:16:5a:30:ce:bc:f8:
e9:20:f3:dd:38:9a:74:8f:05:20:5a:63:6b:34:44:
ab:b8:87:a4:bd:3e:98:3e:35:de:ba:99:0b:3b:17:
31:5f:0c:0b:ad:67:f3:d3:2d:2e:f7:27:b8:d8:41:
20:8f:a8:77:71:cd:4a:7d:1b:2b:25:b1:6b:74:91:
dc:0b:44:2d:81:8f:92:0b:90:b0:af:35:67:5a:d7:
7c:ff:5a:73:4c:dd:b2:5f:45:58:16:fc:a7:f8:69:
3c:6d:60:9a:5a:b1:2b:aa:fa:ad:16:d4:f4:b1:1f:
d4:2b:f4:da:0c:67:7a:21:36:fc:b8:52:bb:a0:ef:
fd:8b:3c:74:0e:23:f4:c1:a8:f2:45:2b:ce:17:91:
25:40:6c:44:cd:e7:c2:f5:ee:49:25:e2:5d:33:cc:
8c:b1:b1:06:0c:2d:15:e1:9d:83:20:6f:f8:b5:a7:
b0:b9:92:fc:5a:bd:50:3c:aa:33:94:b6:c5:86:7f:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:F2:99:B1:EE:61:7E:7A:97:4D:BC:AD:F9:AD:FD:F3:16:FA:6F
X509v3 Authority Key Identifier:
keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:09:9c:9c:87:44:59:8e:88:9b:c0:f1:b3:c2:ae:d4:f0:1f:
93:16:b5:3f:3a:d1:31:68:1d:15:83:95:7f:df:56:64:97:ef:
11:4b:5c:ce:fd:52:63:4b:6e:8f:36:6c:a4:3d:35:8d:f8:87:
9c:ee:66:af:43:42:f3:94:a8:7d:93:dc:52:e3:8b:04:16:ad:
85:92:cc:98:82:d4:17:18:ee:bf:76:01:17:85:09:62:aa:ef:
d0:c5:65:92:ab:d7:e7:0a:09:3e:c1:78:a5:7e:a2:61:c7:fd:
40:95:bd:92:90:b7:92:c3:88:c9:02:42:45:5d:fc:4f:74:ee:
75:a9:a4:d2:40:a5:5f:43:45:1f:3d:54:15:57:45:c8:40:fa:
d7:18:12:dd:7f:2a:a7:6a:53:fa:cf:5a:5d:69:7f:b7:4e:2d:
06:34:37:c0:0c:3d:3e:d1:e3:7d:79:58:a4:66:60:6d:22:22:
84:8b:7f:37:17:7c:e6:57:8b:1d:96:f9:ac:4f:95:bb:fb:9f:
b1:7c:b5:f8:43:f4:30:01:74:f7:40:82:96:f3:35:1a:40:55:
b8:bb:a6:8f:47:e0:91:aa:26:84:be:d0:b7:35:11:fc:30:42:
73:73:d6:32:16:2e:3a:f9:e8:e0:41:18:44:a6:23:4a:e4:57:
21:f5:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:46 2026 by rpki-client