
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
File: Njjfo7mFahWtnVQwa1v3BjD2NkY.mft (raw, json)
Hash identifier: xVZUGMJXrjFWkalwujrm6h4IGCHbNvRwvpkFbVEsKiQ=
Subject key identifier: A0:EF:2E:68:95:08:18:E1:7E:10:19:6B:4F:D8:A1:D6:78:5E:2D:EE
Authority key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
Certificate issuer: /CN=A9151932/serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
Manifest number: 44
Signing time: Fri 17 Apr 2026 05:17:09 +0000
Manifest this update: Fri 17 Apr 2026 05:17:09 +0000
Manifest next update: Fri 24 Apr 2026 05:17:09 +0000
Files and hashes: 1: Njjfo7mFahWtnVQwa1v3BjD2NkY.crl (hash: oEIIDnINGVLvPdwEPvqj+A7CvJd9B4JVBD/o1zTfZjk=)
2: 8C622D46DF0811F0A8BEBB315D6F56BC.roa (hash: My8bbZyTvpN44ycJe7YDuAWa7grPMOBDyAIg81uBjQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Validity
Not Before: Apr 17 05:17:09 2026 GMT
Not After : Apr 24 05:17:09 2026 GMT
Subject: CN=69e1c255-b18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:18:e7:4d:de:34:c5:83:20:d3:46:d6:ef:
ef:c3:b7:0b:16:42:ca:a9:c9:77:34:9d:c2:66:51:
66:be:fb:67:97:2f:bb:0b:87:e6:fc:e8:63:d4:e4:
62:8f:38:5d:4c:3a:dd:7b:6d:f1:27:c9:dd:a5:d9:
b0:49:9c:d4:8e:15:63:2b:7a:c1:99:99:0d:20:09:
5f:cc:06:2a:39:93:0d:87:50:17:d6:40:60:fe:2a:
cd:c1:63:c9:54:90:59:bf:85:1e:92:2a:39:b1:a7:
47:ec:ab:c0:50:84:a8:d0:b4:01:7c:08:8b:32:7a:
36:fe:06:cc:e3:c6:fb:f3:b0:4d:b7:41:d2:86:a3:
66:0e:14:a7:52:7d:b0:07:73:f7:28:3c:62:e6:f7:
1e:12:6d:bc:b6:82:8a:a7:49:fb:8f:b1:cf:ed:ab:
70:62:91:21:24:8c:d8:cc:55:06:76:93:7d:4b:82:
e6:96:26:55:41:00:e6:94:e0:45:29:e6:41:72:f8:
27:ad:fe:01:13:23:26:dc:8c:3a:fc:54:ab:4a:4a:
52:6d:33:33:29:99:64:02:68:6c:f3:1d:a1:a0:a2:
6a:07:37:93:52:00:0a:4a:cf:58:37:45:0f:30:58:
88:8c:e4:aa:4e:bc:95:bc:eb:b0:77:c9:fb:51:90:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EF:2E:68:95:08:18:E1:7E:10:19:6B:4F:D8:A1:D6:78:5E:2D:EE
X509v3 Authority Key Identifier:
keyid:36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:b5:a6:fd:71:b2:ca:00:79:e6:79:d0:3f:d0:82:68:91:70:
b1:d8:f3:91:6c:18:a5:c1:1a:f4:ef:e7:7d:68:39:b7:19:db:
61:c2:7f:ad:0e:be:3f:07:33:cd:0b:4e:b0:d9:c1:06:11:30:
fc:35:81:8a:26:6c:66:ee:30:a7:85:dc:81:99:af:29:b3:0b:
b6:d0:f6:19:c4:56:b6:f1:d6:ad:0c:18:18:5d:32:cd:c1:27:
1b:27:47:14:16:39:47:47:0b:25:e0:6f:a6:42:2c:32:93:06:
91:22:3b:c7:59:5f:43:3f:7f:c6:e3:3b:d3:3d:39:c0:c6:94:
a0:50:92:ff:6f:11:4a:a3:ad:83:4d:89:3a:bc:96:cf:85:f7:
09:a7:e6:6e:c0:d1:be:99:f4:eb:b5:77:34:12:5c:f0:42:70:
34:ee:35:20:cf:75:e8:39:82:c3:2a:38:f8:8d:85:fd:34:b3:
27:1e:4f:b0:11:dd:0d:23:2b:69:d4:53:ac:87:de:52:c5:22:
65:1b:79:8c:7f:bc:f8:ae:20:6e:66:1b:e4:17:4a:f4:e7:75:
ef:89:a2:a0:86:00:b1:54:fb:17:d2:aa:6e:f2:60:fe:f0:de:
f9:46:71:b8:1c:37:6f:83:73:36:93:8a:8a:a5:b0:2c:c4:77:
95:2a:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:12:18 2026 by rpki-client