
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json)
Hash identifier: rw8J/7ZSImYnYQWx4sYpVrL0if5y2q5NKH25u4TtVvk=
Subject key identifier: B7:10:AD:C7:08:36:08:A4:85:26:36:65:CD:C5:D8:4F:BC:A8:E2:89
Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Certificate serial: 028C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
Manifest number: 0280
Signing time: Sat 19 Sep 2026 01:58:19 +0000
Manifest this update: Sat 19 Sep 2026 01:58:19 +0000
Manifest next update: Sat 26 Sep 2026 01:58:19 +0000
Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: 5e32qE/DG/3aj6WHAPAzgb3qI8j/FEpankQxT1GCLcc=)
2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=)
3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: fdMdK5Sd7Plh2Ippunexfav/xQdX66KfuslWneo0vak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Validity
Not Before: Sep 19 01:58:19 2026 GMT
Not After : Sep 26 01:58:19 2026 GMT
Subject: CN=6aadec3b-7373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:a3:2a:4e:91:36:87:f2:6e:2b:2a:fe:18:
4f:2a:29:66:d9:14:3c:72:d0:7d:88:9b:fe:95:39:
46:1b:dd:e7:ca:1b:6b:17:8a:37:43:12:e4:e1:75:
e4:eb:3f:06:19:12:89:4f:bc:15:2a:72:c5:65:06:
59:cf:1e:15:07:ed:6f:f7:5a:78:2a:cf:4c:0c:58:
ec:ba:8c:81:9a:17:11:c7:94:31:e4:19:19:e7:f1:
25:da:3a:c0:38:6a:1b:d2:5f:25:d0:6b:f1:d4:3b:
57:b9:82:49:27:d5:53:84:76:75:2a:72:27:53:63:
e1:3f:ea:bc:bb:3e:a1:1c:e6:36:9c:47:6c:fd:03:
1e:b8:78:14:d7:ea:ba:c8:36:f8:54:37:29:5b:c4:
6d:74:3c:a1:17:16:33:d7:59:39:5d:b5:87:e2:63:
cd:5d:fc:b2:ff:53:2c:73:22:8d:86:43:01:a4:a7:
dd:95:9d:e2:f6:20:eb:50:ab:cd:bb:9d:5b:e2:21:
5b:fb:2d:e0:38:ba:f4:f0:98:23:6b:7f:59:52:4a:
1e:2f:52:3d:30:0e:0d:89:ff:be:29:f5:51:74:a3:
d8:71:69:dc:91:2f:38:9e:c4:8d:b8:d3:36:98:b4:
85:86:72:01:fb:e9:a8:85:55:f1:00:10:e2:70:57:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:AD:C7:08:36:08:A4:85:26:36:65:CD:C5:D8:4F:BC:A8:E2:89
X509v3 Authority Key Identifier:
keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:d7:31:f7:82:55:33:9e:18:05:e3:36:b9:49:3d:cb:f2:bf:
f4:99:e1:00:1c:48:8a:09:59:f6:10:86:f0:0f:0d:7b:0c:70:
b3:b5:05:83:d4:bc:2c:53:b1:03:81:49:a5:fb:a6:0c:1e:03:
f3:7a:a5:3b:a3:bf:9a:4d:9a:c4:a3:59:e5:46:49:7d:b2:a8:
e9:63:96:0d:93:fc:30:8d:05:6f:4d:08:2e:07:6b:f1:40:59:
5d:c9:73:8e:71:8b:ac:69:1d:7b:a8:9f:04:95:c1:ac:42:c7:
dd:eb:4b:7c:76:56:2c:96:77:0a:74:d7:66:3f:e0:17:7b:8c:
05:7c:9e:9f:0b:d0:a5:db:3c:52:e3:e5:8f:d9:a5:8f:3c:b5:
11:e9:3a:2d:56:2f:ef:31:8d:58:78:9b:a7:f7:f7:20:db:55:
4c:7f:f3:92:6c:d1:f4:84:a9:64:de:6c:fd:45:2d:e7:c9:ad:
e0:f4:5a:98:d2:4a:0d:7e:98:6e:b2:c3:64:14:56:53:f5:fd:
53:7a:9e:01:85:f1:65:3b:8c:3e:4d:69:c0:1f:9f:4b:06:42:
2c:81:26:dd:5b:ac:50:61:c3:d2:49:d2:b7:a8:0a:f5:2e:ba:
e3:1a:06:27:60:4e:82:5a:bc:d3:5d:21:70:3e:3f:ca:e3:b5:
25:a2:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:12:26 2026 by rpki-client