
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
File: nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft (raw, json)
Hash identifier: Jsd4x1BQAXieF8vb2R5yDElTfKgRc+0olTlKXjXxgPo=
Subject key identifier: 7B:4B:0D:46:90:4A:F4:35:D8:D8:6B:F7:12:E6:8D:E5:7D:3F:7B:BE
Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
Manifest number: 0130
Signing time: Sat 13 Jun 2026 05:37:02 +0000
Manifest this update: Sat 13 Jun 2026 05:37:02 +0000
Manifest next update: Sat 20 Jun 2026 05:37:02 +0000
Files and hashes: 1: nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl (hash: upTPdfuYGpRbg73+jH9WqENu1DP0y7zDRbEkq4F+joE=)
2: 9950A304A55011EFA7FFA969C4F9AE02.roa (hash: XilaImQu46B9jPKVcbwjXLWcBtRVnClw766ex/P0Ysc=)
3: 98D7330CA55011EFA7FFA969C4F9AE02.roa (hash: yE9a/ZyGYDplCKh7xPqrttWHwRMZNhflIHqsAwrG0zQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl
rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Validity
Not Before: Jun 13 05:37:02 2026 GMT
Not After : Jun 20 05:37:02 2026 GMT
Subject: CN=6a2cec7e-d772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:47:31:f9:a8:5e:37:76:15:35:00:69:f6:
7c:7c:9b:68:d7:28:d4:ff:d9:40:d3:cb:30:f5:08:
b1:17:aa:03:b4:35:a4:95:08:b9:34:d8:fa:b2:d6:
30:dc:12:88:3b:11:8e:94:7b:a9:8d:e9:cf:eb:97:
35:07:83:93:0d:15:0e:9f:df:a1:53:33:87:50:78:
40:53:3c:77:63:ad:ab:ca:2f:2c:f5:04:1d:c9:0e:
28:be:ae:7b:85:ec:d5:5c:27:7a:41:01:5c:bd:8d:
73:c4:3f:ce:0e:f2:23:43:dd:eb:6f:94:fc:f3:e3:
26:de:02:2e:c9:f5:01:a9:e9:f9:88:4f:83:11:fb:
58:72:cb:25:5b:70:a7:e8:da:e7:fa:ab:0f:42:cd:
cc:c5:54:a8:12:87:18:31:e3:d4:bc:7f:5a:bf:6f:
f3:03:7f:99:aa:d7:0e:cf:ed:ba:ef:9a:6a:b4:31:
98:2b:02:52:ed:97:1f:87:b0:68:5a:a1:b1:87:07:
6b:72:74:75:c8:a9:ba:e8:17:8a:36:8c:a6:9f:a9:
ef:f8:db:18:ba:96:22:a7:72:c3:74:f5:e9:90:eb:
43:31:7a:32:ff:b7:d4:0e:9a:73:74:d5:46:01:09:
34:29:a3:c8:b4:85:05:5c:94:ad:ef:f0:fd:5b:b7:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4B:0D:46:90:4A:F4:35:D8:D8:6B:F7:12:E6:8D:E5:7D:3F:7B:BE
X509v3 Authority Key Identifier:
keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:02:b9:a1:0d:8d:6b:e7:c7:71:60:3f:e3:01:ea:23:a4:4d:
07:cb:cf:dc:ad:cf:d2:c2:37:4b:68:67:3e:ae:3f:40:65:15:
bb:c1:f4:c3:df:95:a1:79:8d:a3:46:4d:f9:c5:43:34:22:5f:
7f:88:67:cb:eb:3c:81:47:69:50:da:de:a3:6a:74:73:c0:01:
c1:2d:b8:ed:b6:6f:d8:6b:27:b7:65:84:05:79:29:e2:c5:de:
6c:45:1f:04:4b:a8:f9:2c:ab:70:cc:16:1b:18:c6:fa:fe:3a:
b9:d6:34:a5:2e:7e:22:0a:4a:e8:30:45:26:60:47:66:2c:2f:
e7:fa:9f:4b:db:a9:6f:6f:97:0a:e6:02:66:fe:e0:5f:d3:8b:
91:44:12:b2:dd:05:a0:0c:4f:15:87:fd:de:df:8d:60:6c:13:
53:b1:29:ec:95:58:78:24:6e:81:65:fc:5f:02:49:20:10:1e:
21:9d:8d:4a:a7:6f:8e:ff:1f:af:9e:15:5a:cc:1a:39:2b:46:
b9:84:f5:d5:f7:fe:7f:a7:33:c7:e6:ee:be:de:a7:ea:8a:3c:
ed:46:99:f3:a0:46:54:06:f5:43:8f:bb:b1:5c:a3:34:11:28:
c7:0d:17:f3:91:f7:da:5f:42:f8:da:79:8f:10:cf:9b:a6:8b:
e7:92:72:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ4NDAxMTAvBgNVBAUTKDlDRjcxNDc4QkY1OUIwMDhCMUI1NDJGQTkzQTdDMTBF
RkI3RjRENjIwHhcNMjYwNjEzMDUzNzAyWhcNMjYwNjIwMDUzNzAyWjAYMRYwFAYD
VQQDEw02YTJjZWM3ZS1kNzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsblHMfmoXjd2FTUAafZ8fJto1yjU/9lA08sw9QixF6oDtDWklQi5NNj6stYw
3BKIOxGOlHupjenP65c1B4OTDRUOn9+hUzOHUHhAUzx3Y62ryi8s9QQdyQ4ovq57
hezVXCd6QQFcvY1zxD/ODvIjQ93rb5T88+Mm3gIuyfUBqen5iE+DEftYcsslW3Cn
6Nrn+qsPQs3MxVSoEocYMePUvH9av2/zA3+ZqtcOz+2675pqtDGYKwJS7Zcfh7Bo
WqGxhwdrcnR1yKm66BeKNoymn6nv+NsYupYip3LDdPXpkOtDMXoy/7fUDppzdNVG
AQk0KaPItIUFXJSt7/D9W7feRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtLDUaQ
SvQ12Nhr9xLmjeV9P3u+MB8GA1UdIwQYMBaAFJz3FHi/WbAIsbVC+pOnwQ77f01i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDg0MC8zNDJGODBEMDlG
QzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNBaXh0VUw2azZmQkR2dF9U
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDg0MC8zNDJGODBEMDlGQzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNB
aXh0VUw2azZmQkR2dF9UV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmQK5oQ2Na+fHcWA/4wHqI6RNB8vP3K3P0sI3S2hnPq4/QGUVu8H0w9+VoXmN
o0ZN+cVDNCJff4hny+s8gUdpUNreo2p0c8ABwS247bZv2Gsnt2WEBXkp4sXebEUf
BEuo+SyrcMwWGxjG+v46udY0pS5+IgpK6DBFJmBHZiwv5/qfS9upb2+XCuYCZv7g
X9OLkUQSst0FoAxPFYf93t+NYGwTU7Ep7JVYeCRugWX8XwJJIBAeIZ2NSqdvjv8f
r54VWswaOStGuYT11ff+f6czx+buvt6n6oo87UaZ86BGVAb1Q4+7sVyjNBEoxw0X
85H32l9C+Np5jxDPm6aL55Jymg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:56 2026 by rpki-client