
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
File: NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json)
Hash identifier: xL2Ui0xvJKayduhsLByhFJJPyFqk87+PVlvwjWXFFq4=
Subject key identifier: F5:81:70:87:EA:B8:6C:9D:E8:76:76:E9:52:68:DE:FD:77:87:61:6A
Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
Certificate issuer: /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
Manifest number: 0128
Signing time: Thu 11 Jun 2026 07:58:04 +0000
Manifest this update: Thu 11 Jun 2026 07:58:03 +0000
Manifest next update: Thu 18 Jun 2026 07:58:03 +0000
Files and hashes: 1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: beztmbG8XUZMd80FZlNaon0r3Y24qAHPM12JqJumJtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 07:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Validity
Not Before: Jun 11 07:58:03 2026 GMT
Not After : Jun 18 07:58:03 2026 GMT
Subject: CN=6a2a6a8b-52ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:f0:db:12:68:70:fc:18:27:45:05:4d:17:
9a:f6:fe:75:6e:10:4e:a3:a1:51:4b:f5:3d:35:56:
97:bd:4d:8e:fc:30:04:c2:26:04:fd:bf:8d:cd:bd:
d5:53:6d:53:d7:08:48:fa:60:40:f1:a6:d3:d7:11:
6b:bd:59:fa:dd:d9:84:30:0b:05:12:18:34:f2:7e:
b4:46:87:14:30:e4:51:af:e2:81:b1:08:6f:96:b0:
9a:10:17:3b:ad:51:cf:92:b9:ce:75:c2:01:9f:09:
1f:3d:dd:eb:ba:cb:a8:7f:e2:c7:2a:47:0b:ac:0f:
9b:53:62:0f:00:76:d4:7a:15:9e:14:e1:fc:07:b1:
0d:0d:2b:20:43:27:27:53:a8:05:f0:58:e0:93:f9:
59:96:3f:6a:f1:26:67:50:da:45:e4:4d:44:65:4f:
d0:23:c8:e2:5e:82:9d:14:56:c1:1f:ee:34:f5:9c:
fa:00:2b:0d:0b:6a:89:c0:69:97:a4:d1:45:ee:a1:
3f:d3:4a:53:21:fc:45:73:e8:c3:b5:a4:84:fe:b3:
0d:e5:7e:33:ca:82:58:e3:0d:b3:fe:39:33:fd:4b:
10:dd:d1:54:3b:a0:9a:7b:5e:6e:54:e0:54:93:ef:
1e:cb:5b:21:4e:15:10:c3:90:34:2c:b6:79:61:e6:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:81:70:87:EA:B8:6C:9D:E8:76:76:E9:52:68:DE:FD:77:87:61:6A
X509v3 Authority Key Identifier:
keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7a:96:6f:12:ce:e8:09:68:0b:25:04:3b:e2:be:22:fe:9a:
75:04:3e:78:78:17:db:05:ab:eb:99:fd:05:21:22:b2:7b:f6:
c2:f9:7c:65:c6:ca:6b:18:94:12:5c:d9:df:60:76:be:a7:d4:
1f:b5:19:32:59:f0:1e:48:3d:98:9f:6a:4f:e6:e8:f2:81:9f:
f4:ca:79:68:69:fc:f3:b0:9f:bc:40:4b:ab:5f:4a:41:c4:dc:
d9:41:b6:bd:55:4c:b8:ab:7a:7b:6e:c2:f7:18:4a:5a:57:ce:
72:d9:76:ec:f2:47:6c:87:8c:2f:a7:53:b1:31:7d:cd:3f:75:
17:3f:de:13:d2:f3:f7:56:a3:5d:ef:08:0d:8f:81:7f:99:55:
97:65:7b:90:55:6e:74:95:cb:6d:45:9e:8e:86:0e:16:e3:f3:
e5:63:72:56:a9:55:5f:f5:fe:81:71:b0:68:25:85:2f:1a:17:
08:77:1c:7f:3f:0c:a2:49:54:91:3f:ec:27:2c:12:9b:4f:2c:
b6:4f:cd:99:18:90:ed:e9:77:e7:80:2a:fe:ad:95:bc:5c:b4:
4c:a2:94:fb:e3:9d:6f:55:13:2b:c5:9b:09:ce:fe:e7:7b:14:
87:8f:f3:69:31:c7:fe:4d:8b:fa:a4:16:c7:f0:b3:0d:27:dc:
a8:0d:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:36 2026 by rpki-client