
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier: /w0S8Jpgr28JkTLNEmvH74y4q3iVR2mBAJNKWzFz9KY=
Subject key identifier: D7:87:8E:B3:F7:AC:E4:58:44:B1:5F:49:72:24:D5:4A:20:82:AA:56
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial: 088F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number: 0DB4
Signing time: Mon 12 Oct 2026 18:06:46 +0000
Manifest this update: Mon 12 Oct 2026 18:06:45 +0000
Manifest next update: Mon 19 Oct 2026 18:06:45 +0000
Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: 1vjaOR5juHybhXBiyqyvn6aDhpGd7CByDGER0Bon2n4=)
2: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: cVbPNw0C1NsVka6hgQ1NbhRNg7uHfdi0adK+IbVcOk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Validity
Not Before: Oct 12 18:06:45 2026 GMT
Not After : Oct 19 18:06:45 2026 GMT
Subject: CN=6acd21b6-d237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:75:b2:66:8d:39:0b:2d:87:ea:88:44:a9:
88:df:88:c3:6a:2f:49:04:92:71:79:12:29:78:8a:
f4:13:14:75:01:c0:19:b5:fa:c5:3c:f2:e8:05:e2:
17:31:ce:63:ed:c4:12:f2:99:23:d3:4c:43:58:18:
83:44:b9:d6:2e:10:5c:8b:a5:ed:f2:97:fe:39:f3:
31:f9:d0:f8:4a:be:16:f0:13:f8:bf:7f:c1:a5:27:
f2:68:21:c9:46:50:d1:59:5d:e6:59:ed:db:b6:54:
e4:c8:b5:84:05:e2:be:bf:b4:62:06:e1:f8:e9:bd:
d9:a6:59:33:07:ac:de:f0:75:94:ab:b1:d1:82:b2:
c1:0a:ab:56:e9:83:ee:7b:2b:de:38:ac:c2:83:ff:
45:28:86:d8:75:b7:88:53:e4:39:0e:0c:02:8b:e9:
d9:b9:24:5d:85:7a:39:8b:96:5d:8b:4f:98:3e:aa:
14:35:e9:60:ed:2c:d3:88:d5:a9:13:64:b2:09:93:
d7:2f:2b:d9:74:85:1a:33:1b:fe:3e:10:e4:73:5e:
21:26:dd:dd:cf:05:96:c2:1b:b6:3f:8e:2b:d0:d3:
e0:da:70:a3:f6:d4:aa:a6:53:da:5b:8c:41:b5:90:
6f:5d:18:0c:10:cd:df:41:07:8d:c9:93:d7:ae:34:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:87:8E:B3:F7:AC:E4:58:44:B1:5F:49:72:24:D5:4A:20:82:AA:56
X509v3 Authority Key Identifier:
keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:49:0f:28:61:a0:84:a6:34:11:f9:55:30:c7:05:64:ac:a9:
0f:3c:97:6f:bf:5b:b9:7c:61:ef:15:08:03:3a:de:9b:96:c4:
73:43:be:f1:23:fb:83:96:47:5e:68:28:3a:a3:87:ec:1b:cc:
a1:c6:05:e8:dc:cb:d7:ad:03:41:f8:63:e4:f5:20:0c:a6:ee:
26:8e:6d:5f:12:e0:a4:19:d3:42:8c:6e:0c:93:7b:cd:79:20:
ad:3b:78:ca:26:00:2b:30:ce:82:32:be:d0:ab:a5:bc:8d:14:
c5:58:24:ac:bc:2a:ff:22:60:43:21:2c:b6:df:68:83:e8:57:
64:1a:72:ab:90:fa:42:14:58:77:09:c0:2c:85:c2:6f:be:89:
ea:b7:8c:a7:b6:1c:b8:15:76:b3:92:f2:a6:d4:4e:39:04:d8:
26:d1:1b:96:0c:b3:7c:46:ca:83:06:cf:cd:24:d8:5f:7a:85:
23:5b:29:6d:a2:e1:d4:27:00:e6:8d:99:b6:4d:e8:c7:25:3a:
b7:ee:06:0f:c0:c9:4f:09:67:27:b0:71:08:17:c3:2e:01:02:
ab:f7:8c:27:f7:2d:17:9f:d4:10:4d:95:98:d7:07:5a:66:b7:
ad:20:9c:98:e5:69:cf:55:26:d5:eb:d6:e5:a5:17:3d:cb:84:
2d:53:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:00:12 2026 by rpki-client