
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
File: nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft (raw, json)
Hash identifier: 9TwalaV4GB6l1c2WEy2uV5N71HOtsFmuB7yeD1KGDYc=
Subject key identifier: 25:D8:2D:E0:25:B4:97:5E:E5:8B:7B:28:DA:09:54:8E:58:58:8F:65
Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
Manifest number: 0112
Signing time: Fri 17 Apr 2026 05:39:52 +0000
Manifest this update: Fri 17 Apr 2026 05:39:51 +0000
Manifest next update: Fri 24 Apr 2026 05:39:51 +0000
Files and hashes: 1: nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl (hash: CEacs2QHlZmxbsSig6GUfxzhnETjB2+PTyVEDOUvizw=)
2: 98D7330CA55011EFA7FFA969C4F9AE02.roa (hash: ShvQ5H1BhLJtVihTa5b32xsJhzlmQtYYfhOu0sIIiXM=)
3: 9950A304A55011EFA7FFA969C4F9AE02.roa (hash: hEBStkR1/DCZ0z36xHcDOHxYWC/maVcehXdwkQexUUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl
rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Validity
Not Before: Apr 17 05:39:51 2026 GMT
Not After : Apr 24 05:39:51 2026 GMT
Subject: CN=69e1c7a8-90fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:de:02:20:8f:a4:e1:6b:b5:f3:3f:5a:24:54:
8d:7c:45:87:c2:1e:b0:95:82:8a:ee:1a:02:d6:b6:
7a:7f:c1:46:9d:55:48:22:1c:a4:d9:3d:92:20:b3:
d7:76:10:48:a4:c0:f9:0b:b1:cf:7e:0b:e1:95:a7:
be:0b:29:e6:b5:1f:bf:a0:8b:00:fc:bd:c7:37:45:
b2:47:2c:96:07:99:4c:9a:98:f2:82:d7:30:c4:16:
25:d0:72:39:54:6e:bc:23:7b:5c:af:15:54:a1:91:
82:09:39:c1:5c:d3:cd:8d:88:2b:05:d3:27:27:03:
65:d5:b0:cf:f2:45:12:fe:1e:5c:09:61:22:9e:da:
b1:17:9a:75:ae:ef:a9:bb:e0:03:b8:ee:d0:b6:09:
de:3e:69:08:75:13:51:ee:9d:2a:d1:8e:80:c8:c8:
12:2f:c2:0a:32:b9:d2:00:e7:83:d2:ea:d6:22:72:
79:2e:b9:7d:8b:22:c6:2e:6d:eb:06:60:a2:8e:83:
8e:4e:f1:7c:85:cd:b4:4d:fd:fb:68:67:90:ee:05:
08:65:2c:46:8c:42:99:31:a8:ca:b8:78:1a:68:84:
a0:ba:ee:ee:8a:5c:17:21:7e:65:a6:54:5e:ae:26:
8f:be:98:91:21:9b:3b:8c:cd:8a:3c:b8:df:fc:64:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D8:2D:E0:25:B4:97:5E:E5:8B:7B:28:DA:09:54:8E:58:58:8F:65
X509v3 Authority Key Identifier:
keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:73:fb:c1:6e:52:a2:75:40:58:f6:50:72:0f:bd:e8:9b:02:
c8:60:81:55:6a:37:e5:cd:55:64:31:6a:67:79:7f:7e:b5:a3:
15:3a:8d:f3:9b:54:50:de:cb:8c:ba:a8:ce:81:40:a8:2f:74:
8e:79:0e:dc:7d:15:2b:09:e2:b3:b5:15:13:0f:61:81:3f:ed:
17:c1:6d:f2:82:a9:71:04:76:21:18:a9:c5:bb:c4:46:e6:43:
ba:bc:3f:97:e5:75:11:96:6a:c7:90:78:86:d3:02:11:6f:9c:
77:8c:ee:3a:5d:c0:bf:e2:4c:09:4c:23:5e:e8:3c:34:ac:bd:
bc:23:c2:4e:ed:a8:2a:c9:92:7d:32:e8:01:69:ec:66:ef:75:
e0:a0:f6:cb:44:9b:29:c9:6b:02:ad:e7:e0:85:d5:b5:5c:6a:
eb:df:e9:b3:8f:bb:aa:19:c6:94:74:df:b2:69:78:1e:f3:3a:
23:f0:78:64:fd:b7:b1:ca:cb:99:b7:87:b3:05:64:de:eb:66:
c1:64:37:bf:94:f9:e3:52:33:3b:45:4b:f5:27:e8:d6:c4:b4:
2e:6e:1b:13:62:a4:ab:56:d5:20:6d:a6:94:dc:2a:91:83:64:
ef:3a:b2:86:a6:99:0a:7e:11:5f:6e:14:53:f8:1d:48:55:4b:
9e:14:74:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:41 2026 by rpki-client