
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
File: NNz0cp9FgmKIjvB6K9RnX24xE4A.mft (raw, json)
Hash identifier: lhpEWpsytZtqWjBJwYdLY2CJAQusvVLR31Nzc8tTVsc=
Subject key identifier: B7:64:88:77:E2:20:4C:4D:3A:9D:C7:47:39:A2:57:76:31:0F:E8:5E
Authority key identifier: 34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80
Certificate issuer: /CN=A9157B7F/serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
Certificate serial: 0761
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
Manifest number: 0753
Signing time: Fri 12 Jun 2026 21:44:58 +0000
Manifest this update: Fri 12 Jun 2026 21:44:57 +0000
Manifest next update: Fri 19 Jun 2026 21:44:57 +0000
Files and hashes: 1: NNz0cp9FgmKIjvB6K9RnX24xE4A.crl (hash: UtN+qxwGbCEhEkTAcS0cB1A9v9f/OkcKHPcJt8GRFFE=)
2: AE27A8A671B311EBB90BB364C4F9AE02.roa (hash: Yz43RwlZ5yy4nBg8j+EwoqSiXNci2+WLpvODtls54Cc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl
rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B7F, serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
Validity
Not Before: Jun 12 21:44:57 2026 GMT
Not After : Jun 19 21:44:57 2026 GMT
Subject: CN=6a2c7dd9-7491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:3a:30:dd:2b:8b:39:64:7b:a4:60:3b:c5:
e0:8d:63:28:d8:96:1b:90:d3:f0:66:ff:74:81:06:
6a:d6:5a:f4:36:97:d1:18:32:20:a1:fc:d9:4d:05:
4a:0a:03:18:8c:57:27:30:f3:de:31:1f:d7:00:f1:
d8:91:2b:bc:34:5e:f2:5d:8e:bf:e2:29:03:5a:90:
e8:06:5b:8b:cb:02:b1:01:29:31:53:e5:68:0c:c6:
29:eb:ab:08:e6:27:d5:e7:49:86:2a:82:b7:1a:ff:
22:00:7b:ee:78:22:49:ab:94:4d:f5:35:e2:f9:9f:
63:33:69:78:29:78:40:14:b1:51:55:90:a6:e5:d9:
ee:1a:ec:3c:45:f4:04:40:32:6c:09:a1:81:f5:fc:
35:51:90:d1:53:cb:f8:3d:a7:90:97:71:49:43:62:
fa:55:79:33:61:b5:1b:e7:a3:49:c7:83:eb:0f:40:
cf:33:81:fc:b2:6d:ed:02:b6:0a:ed:bc:0b:2d:18:
62:0f:f5:7a:e4:5d:1e:5c:6f:ea:fa:3c:1b:31:c5:
41:b6:a3:2c:95:71:bb:d8:8f:de:fe:78:a4:35:cb:
4d:af:50:c8:52:50:04:d4:35:cc:b4:1c:7c:0b:7c:
f5:7f:87:c6:ac:81:5b:d6:fe:32:98:e0:8c:8e:5e:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:64:88:77:E2:20:4C:4D:3A:9D:C7:47:39:A2:57:76:31:0F:E8:5E
X509v3 Authority Key Identifier:
keyid:34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:c2:fa:5e:25:d6:1d:4d:5d:fc:f1:43:28:66:17:77:da:35:
b2:df:ad:d0:cb:2e:0e:ca:d0:86:48:0b:bd:b1:20:5d:22:1a:
c1:7e:74:90:f0:bc:50:d7:ae:64:09:66:bc:d4:9b:2f:50:91:
5c:e3:b5:3d:dc:c0:49:08:a7:4f:52:91:d0:7d:e1:b8:ed:39:
ad:d1:69:ef:0d:69:2a:8f:5c:c0:df:5e:49:44:6b:cc:3c:ad:
8b:4a:4f:5f:c0:56:e8:f9:ab:ff:56:35:21:0e:a3:80:10:70:
f2:70:a4:56:86:79:c1:8f:ae:e7:4a:f3:73:e1:27:ed:28:09:
37:21:0e:e5:9f:36:d8:6d:5d:e7:db:35:d1:d3:a4:86:25:21:
b7:8c:40:5b:ef:64:1c:d7:d0:a4:4b:dc:26:1e:df:66:d5:b0:
2a:0c:47:74:c0:50:66:fa:f7:3e:3a:e5:22:23:78:a3:67:df:
28:c7:a2:b5:b8:01:6d:92:9d:b5:d0:ff:97:8d:51:8b:8f:0d:
dd:d0:77:ae:5f:eb:9f:8b:ae:f8:2f:9a:75:4b:f3:41:d8:05:
a6:77:a9:a6:8e:7c:11:92:71:fd:16:42:9f:32:e7:9f:c2:22:
c0:69:25:3e:06:ef:7c:b1:78:b9:12:d2:55:0e:a5:8e:66:50:
9a:1d:a0:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdCN0YxMTAvBgNVBAUTKDM0RENGNDcyOUY0NTgyNjI4ODhFRjA3QTJCRDQ2NzVG
NkUzMTEzODAwHhcNMjYwNjEyMjE0NDU3WhcNMjYwNjE5MjE0NDU3WjAYMRYwFAYD
VQQDEw02YTJjN2RkOS03NDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwHA6MN0rizlke6RgO8XgjWMo2JYbkNPwZv90gQZq1lr0NpfRGDIgofzZTQVK
CgMYjFcnMPPeMR/XAPHYkSu8NF7yXY6/4ikDWpDoBluLywKxASkxU+VoDMYp66sI
5ifV50mGKoK3Gv8iAHvueCJJq5RN9TXi+Z9jM2l4KXhAFLFRVZCm5dnuGuw8RfQE
QDJsCaGB9fw1UZDRU8v4PaeQl3FJQ2L6VXkzYbUb56NJx4PrD0DPM4H8sm3tArYK
7bwLLRhiD/V65F0eXG/q+jwbMcVBtqMslXG72I/e/nikNctNr1DIUlAE1DXMtBx8
C3z1f4fGrIFb1v4ymOCMjl7zZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdkiHfi
IExNOp3HRzmiV3YxD+heMB8GA1UdIwQYMBaAFDTc9HKfRYJiiI7weivUZ19uMROA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I3Ri8zN0I4MkM1MDcx
QjIxMUVCQjQ0QTg0NjNDNEY5QUUwMi9OTnowY3A5RmdtS0lqdkI2SzlSblgyNHhF
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05OejBjcDlGZ21LSWp2QjZLOVJuWDI0eEU0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0I3Ri8zN0I4MkM1MDcxQjIxMUVCQjQ0QTg0NjNDNEY5QUUwMi9OTnowY3A5Rmdt
S0lqdkI2SzlSblgyNHhFNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAy8L6XiXWHU1d/PFDKGYXd9o1st+t0MsuDsrQhkgLvbEgXSIawX50kPC8UNeu
ZAlmvNSbL1CRXOO1PdzASQinT1KR0H3huO05rdFp7w1pKo9cwN9eSURrzDyti0pP
X8BW6Pmr/1Y1IQ6jgBBw8nCkVoZ5wY+u50rzc+En7SgJNyEO5Z822G1d59s10dOk
hiUht4xAW+9kHNfQpEvcJh7fZtWwKgxHdMBQZvr3PjrlIiN4o2ffKMeitbgBbZKd
tdD/l41Ri48N3dB3rl/rn4uu+C+adUvzQdgFpneppo58EZJx/RZCnzLnn8IiwGkl
PgbvfLF4uRLSVQ6ljmZQmh2gnw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:08 2026 by rpki-client