
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
File: NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json)
Hash identifier: NlX7mQDYJbw1/k0jG+GZvJdn2wfxyYcHpOAAbH5jg54=
Subject key identifier: 00:B8:44:A0:57:C7:30:6C:E5:F6:03:FE:19:8A:9D:73:B3:20:7F:75
Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
Certificate issuer: /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
Manifest number: F3
Signing time: Sun 01 Mar 2026 07:23:51 +0000
Manifest this update: Sun 01 Mar 2026 07:23:50 +0000
Manifest next update: Sun 08 Mar 2026 07:23:50 +0000
Files and hashes: 1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: re9/hyboMRYz3sGQTFO+tbHHWomNOBU4f67XIlazFa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Validity
Not Before: Mar 1 07:23:50 2026 GMT
Not After : Mar 8 07:23:50 2026 GMT
Subject: CN=69a3e986-3d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:72:b4:7c:fa:d3:94:0f:af:46:70:86:fa:
c6:14:61:a1:d7:73:81:95:69:81:61:c2:2d:a4:0e:
96:9a:da:57:d4:23:b0:f9:16:bc:15:d7:8a:20:e0:
db:90:df:4e:4a:0b:b6:b5:4e:6d:fa:9e:8f:a1:b5:
0d:01:9c:f9:c8:10:75:10:e9:09:f2:2e:95:c8:a1:
bb:45:fe:88:22:78:3d:45:17:47:2e:58:63:7c:dd:
99:62:a4:8c:30:8a:92:f4:74:4a:0d:da:09:b8:d2:
9f:06:02:00:ac:77:80:00:b0:85:3a:52:8f:f4:41:
0c:55:b8:8e:98:ee:75:e6:bf:cf:cd:f3:01:37:09:
3e:6c:13:88:99:f1:d4:71:a8:27:56:16:60:fd:a6:
15:13:f6:03:79:92:2d:a1:a7:e3:e3:2d:74:19:c8:
c1:2d:6e:39:4d:60:9a:c4:4e:2a:05:be:6f:37:45:
18:dd:45:87:ec:19:0a:64:76:1a:b0:b6:6c:bc:c7:
74:e1:fe:69:4a:06:9d:d0:0f:80:42:4a:f3:35:03:
63:2f:d8:02:f8:58:ac:24:a8:a1:32:76:91:35:36:
1c:46:73:28:d9:4b:34:66:44:85:5e:89:98:5b:f6:
8e:aa:e2:47:a2:2b:77:5a:cc:3b:68:e9:5e:71:8a:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:44:A0:57:C7:30:6C:E5:F6:03:FE:19:8A:9D:73:B3:20:7F:75
X509v3 Authority Key Identifier:
keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:59:0e:64:ae:77:de:0c:c6:42:22:2f:4c:3c:f2:66:65:9e:
e3:35:16:e5:2c:78:1f:84:2a:e8:0c:7e:73:d7:82:30:20:be:
e1:09:26:d7:6d:f1:8d:0e:c7:8f:93:55:17:36:48:a9:cf:35:
43:4b:fe:bd:6d:80:a7:9b:97:b5:03:a7:6f:8b:7e:ee:2f:82:
eb:57:19:a5:aa:ab:12:17:1d:a0:ed:1a:42:86:7c:6e:67:c5:
18:87:c3:ee:8b:38:5d:1f:c6:a7:d8:ee:86:83:d5:4b:fa:32:
78:31:56:f0:98:04:da:53:3f:0c:aa:8f:0f:e3:26:2a:4c:d7:
5a:fd:ce:25:c6:85:ea:e0:b1:e9:fd:a8:3f:ca:b8:aa:82:c2:
13:4b:b8:ee:62:59:9c:2f:1b:42:73:c4:a1:d0:9d:54:27:99:
84:dc:c9:c2:e9:9c:77:9b:e1:62:b4:a3:51:ac:2e:58:04:f2:
b1:18:0e:19:28:cf:47:a2:64:a5:a8:d6:9e:3e:50:b4:d9:ff:
88:74:d3:05:b8:3c:f4:94:73:5b:1d:b6:8d:48:57:bd:48:60:
e1:33:92:77:ec:f8:ff:20:d7:8e:81:4a:9c:56:7d:f2:92:bb:
3f:60:f9:90:21:e4:c0:70:8c:b3:2a:44:8c:0c:91:4a:31:4e:
7c:9f:43:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:10 2026 by rpki-client