
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
File: Njjfo7mFahWtnVQwa1v3BjD2NkY.mft (raw, json)
Hash identifier: 7nBqipGpHlrTmaiZ83iht3yt6pk2O69n1Ap37m8zIGY=
Subject key identifier: 54:F5:83:5A:6B:8B:23:25:DE:E2:80:DB:1F:B4:08:AA:72:08:41:A2
Authority key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
Certificate issuer: /CN=A9151932/serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
Manifest number: 2B
Signing time: Sun 01 Mar 2026 06:57:00 +0000
Manifest this update: Sun 01 Mar 2026 06:57:00 +0000
Manifest next update: Sun 08 Mar 2026 06:57:00 +0000
Files and hashes: 1: Njjfo7mFahWtnVQwa1v3BjD2NkY.crl (hash: MKaaMLa889qWzMLzQBue8aN48hB4MLjRV7b2zLDKXa4=)
2: 8C622D46DF0811F0A8BEBB315D6F56BC.roa (hash: KedrC2RldVkXMiiFmDrr/0MwleKVLiPU0WWeEWVqrHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Validity
Not Before: Mar 1 06:57:00 2026 GMT
Not After : Mar 8 06:57:00 2026 GMT
Subject: CN=69a3e33c-946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:2e:d3:d5:a3:8c:4a:d0:79:a2:e9:3e:73:
c1:32:36:8f:98:b3:21:34:4e:85:0d:7f:2f:cf:b9:
6c:05:99:6c:1e:19:1a:40:cd:d3:09:bb:7d:00:07:
b7:a8:b3:0d:2e:49:43:c3:e4:e9:27:f9:76:c5:fe:
2e:22:e3:c7:d6:53:60:53:0b:18:3d:f2:1a:91:43:
67:98:04:9a:ef:87:8e:3c:9f:8d:83:97:40:b1:a5:
2a:27:75:57:0e:22:74:da:c0:7b:68:ae:1f:2e:96:
c5:5f:b0:42:e1:a1:74:b9:20:cf:9b:e0:ff:41:06:
93:64:1f:5f:76:3f:60:ec:59:b6:80:25:46:f3:1c:
19:b2:6b:f5:9f:63:df:87:b6:54:b5:cf:38:23:05:
46:e8:50:67:ca:09:16:6b:d4:92:d9:f9:9d:11:3f:
ad:c5:03:e5:eb:5a:15:ce:5c:5d:6f:cb:b8:0f:f2:
72:b8:05:b8:62:dd:8b:e8:8d:8e:ca:7b:19:5f:84:
df:ca:18:21:ac:36:5a:2f:05:b1:a6:b1:72:7e:06:
d3:f5:4b:fd:66:83:b5:cd:a7:c7:0f:3e:09:37:6d:
c5:c8:83:ab:3d:ba:6f:71:e6:18:14:48:1e:59:f6:
a7:e0:aa:3a:d3:61:e9:b1:80:bf:00:ae:9f:03:b4:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F5:83:5A:6B:8B:23:25:DE:E2:80:DB:1F:B4:08:AA:72:08:41:A2
X509v3 Authority Key Identifier:
keyid:36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:50:10:79:13:f4:bb:76:4a:23:fa:4c:3c:b3:61:29:df:0c:
38:b5:50:61:b9:5a:56:3e:0a:77:4f:5c:0e:21:8c:df:dd:36:
9a:47:6e:9f:32:17:5f:10:9c:af:1f:7b:cb:1a:0e:01:f6:d7:
a4:0d:12:f6:c3:93:6c:ff:b5:92:a0:c4:c6:a1:67:27:d3:05:
90:31:38:86:78:6f:3a:09:88:af:e7:3e:4a:70:ad:6e:71:20:
94:97:29:6f:00:6e:28:e3:80:d0:91:8e:cf:3f:3c:30:4c:ca:
78:38:19:d5:e1:4e:f4:55:31:52:5b:7b:41:a0:0c:43:ab:05:
a4:5f:6c:42:24:bf:32:b4:cd:32:db:77:65:17:25:10:b7:7e:
03:c7:b0:66:e6:91:01:0b:85:c8:6b:97:2e:26:2b:fa:67:84:
46:57:a4:48:ed:49:27:1a:7c:62:48:92:81:58:7e:6b:85:28:
12:11:a7:b3:39:05:cc:e3:38:f0:99:82:ad:d5:e4:df:ff:1e:
2d:25:9d:29:c4:84:e6:9c:8a:61:eb:f3:bf:52:3f:8f:75:0f:
a3:d9:b3:c7:5d:9a:ae:25:e7:db:7d:48:7b:99:b3:fd:3d:dd:
ff:b3:a4:82:c2:ac:28:80:77:59:ed:71:cf:72:67:7b:cf:f4:
80:3a:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:04 2026 by rpki-client