
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json)
Hash identifier: Kv475EJDRij2jKoo6mnrHJZJRB5kERlJgNE/NwqlGyM=
Subject key identifier: C7:85:4D:E1:2A:87:D4:DF:A5:0F:1E:BB:26:08:54:24:3B:50:04:E5
Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
Manifest number: 021A
Signing time: Mon 02 Mar 2026 02:02:17 +0000
Manifest this update: Mon 02 Mar 2026 02:02:15 +0000
Manifest next update: Mon 09 Mar 2026 02:02:15 +0000
Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: 5K1fRf2ey3lyj1ukShAxw2WBPScKCVm5A+hb0xut+i4=)
2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=)
3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: fdMdK5Sd7Plh2Ippunexfav/xQdX66KfuslWneo0vak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Validity
Not Before: Mar 2 02:02:15 2026 GMT
Not After : Mar 9 02:02:15 2026 GMT
Subject: CN=69a4efa8-bcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:42:56:f1:23:93:2e:a1:e4:83:a7:49:94:
bf:52:9c:a5:ec:27:b6:c6:18:f4:8f:5e:c9:ee:91:
29:07:4c:ab:69:81:6f:4f:8e:3f:f6:6f:68:38:aa:
ee:1f:da:c8:08:6e:0a:ab:74:bd:7d:93:7c:2c:be:
13:ac:17:6f:38:b3:8f:f9:9b:8e:49:67:f0:45:c1:
4f:de:68:1e:95:40:55:4b:42:3a:96:a9:79:26:ef:
30:ce:0f:5f:eb:c1:d5:85:29:21:be:89:17:e9:3e:
c4:db:83:90:fa:09:08:06:d3:42:78:9b:84:7f:d2:
d5:7f:b8:20:2b:4a:77:f5:25:22:d9:0a:84:72:0a:
11:16:ec:45:e5:99:90:bf:2f:6d:c1:d5:8b:bd:6c:
59:c2:17:92:45:13:21:ca:c7:b9:35:a0:a4:da:be:
ff:1b:82:3f:55:d6:9b:dc:e2:d7:85:ba:31:b2:74:
22:58:84:b2:5e:ec:7b:d0:5b:5a:e2:61:81:10:a1:
4f:68:1a:e0:0c:e2:3c:b8:3a:ad:32:50:af:ec:3d:
ac:24:aa:ef:96:8a:68:ad:65:27:e9:b9:46:95:fc:
13:cf:00:92:a4:12:f7:71:5b:96:c9:3e:67:71:8f:
db:2d:9b:da:2f:a3:47:85:dd:01:64:e5:5c:7d:10:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:85:4D:E1:2A:87:D4:DF:A5:0F:1E:BB:26:08:54:24:3B:50:04:E5
X509v3 Authority Key Identifier:
keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:16:e9:5b:a3:8a:c0:5b:b7:a1:1e:a5:9f:f6:75:70:57:2a:
65:b2:43:01:bc:5e:b2:14:08:0a:67:dd:90:67:dd:4f:d5:d6:
01:9c:9f:8a:ed:29:48:6d:af:54:8e:ca:81:54:54:3d:18:3a:
1f:32:f1:f4:4b:1e:0c:ab:da:73:4a:8b:e4:ab:c3:30:f0:4d:
f8:44:91:13:65:c7:23:9e:0f:6a:d3:73:64:bc:b0:0b:ad:3e:
5e:63:9d:38:db:5f:2f:e7:f4:41:e0:e0:35:bd:0a:03:b1:23:
1e:7f:fd:d8:aa:b5:bb:e4:68:c9:6e:a2:23:9f:2d:d9:25:da:
37:36:cc:30:5f:38:e8:b1:c4:d7:91:2c:2e:1f:fb:27:7c:35:
16:00:15:6b:79:91:1f:e6:38:18:7c:41:e5:09:1f:2e:67:eb:
8a:c8:80:92:45:8b:3a:fc:a8:e2:a2:01:45:62:bc:3d:65:92:
4b:97:f2:0e:bc:9e:15:67:5e:dc:4d:36:74:bc:43:48:b7:3c:
6e:2b:2b:29:35:e5:62:ca:6c:70:1f:73:aa:20:d8:c2:19:24:
45:85:93:73:10:a6:b5:68:17:0c:4a:36:bf:cd:12:d4:4f:f6:
d2:d4:45:d4:97:65:d9:4b:8c:1e:31:e1:c9:5f:8d:f6:7a:98:
ad:ba:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:18 2026 by rpki-client