
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json)
Hash identifier: VNU/HGscXnS+uxMrl+deGcwND+L+uYopHVNRICaiA9U=
Subject key identifier: 58:BA:B2:2E:2C:A9:3B:59:F8:E6:44:0D:DC:23:38:B7:72:BA:BD:6D
Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
Manifest number: 0264
Signing time: Mon 27 Jul 2026 03:35:00 +0000
Manifest this update: Mon 27 Jul 2026 03:34:59 +0000
Manifest next update: Mon 03 Aug 2026 03:34:59 +0000
Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: pfObjpabfq6I0eUvW8qceuhHL0lYg+RcKs3h/zzA2mA=)
2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=)
3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: fdMdK5Sd7Plh2Ippunexfav/xQdX66KfuslWneo0vak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Validity
Not Before: Jul 27 03:34:59 2026 GMT
Not After : Aug 3 03:34:59 2026 GMT
Subject: CN=6a66d1e3-aafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:09:ec:6c:67:d9:f6:80:d4:0c:1a:23:03:
4d:75:16:f6:db:17:68:04:d2:90:b0:b3:2f:e4:59:
54:ca:8e:23:eb:c9:42:d5:02:83:8c:d9:d4:08:fe:
50:9c:cd:d6:27:72:f6:92:a1:d7:e8:56:4f:2a:cc:
c6:19:97:df:f9:0c:98:60:ad:7f:f6:78:e1:c1:92:
00:7d:c9:e4:7a:10:ab:53:dc:26:aa:ef:df:95:c2:
c2:c8:6d:4a:0c:41:c4:4e:1b:7e:e7:fb:d9:e5:64:
ce:2f:0b:ad:ac:95:f4:22:ef:74:2c:8e:2f:d3:81:
7f:a6:42:f7:3f:f8:fc:4f:a6:05:49:1b:a7:2b:b2:
04:d2:8b:b6:bb:95:80:31:78:15:4f:05:82:ce:6c:
be:d8:ac:bf:af:d2:d2:d2:f9:3e:36:79:2e:f3:f9:
86:60:71:07:96:3d:3a:95:83:1b:92:dc:09:af:74:
ad:a4:e7:38:69:c8:63:4a:d7:5a:ac:14:74:6b:13:
98:97:a8:fc:71:aa:46:01:0a:43:4e:c6:80:8a:5d:
8f:4e:f3:46:4c:97:bc:5d:4b:5b:7e:15:af:92:58:
75:2d:b8:21:20:94:3b:57:eb:fe:1f:fb:df:f9:eb:
89:2b:88:be:0d:bf:0a:c7:d6:f8:22:5f:63:ad:73:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:B2:2E:2C:A9:3B:59:F8:E6:44:0D:DC:23:38:B7:72:BA:BD:6D
X509v3 Authority Key Identifier:
keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:63:d2:12:6d:bd:c5:5d:27:ee:9a:24:49:7e:2e:38:5b:94:
5d:9a:29:ad:a4:aa:cb:94:e6:14:ff:c4:62:e7:be:e8:0f:84:
a0:fc:00:b7:20:9b:69:a0:32:00:d1:21:a9:92:53:32:6a:b9:
c6:c0:a6:11:cb:e8:69:0d:ae:b7:5c:94:98:59:97:8a:c4:a8:
a5:a7:16:aa:d1:47:07:69:db:96:f9:25:a8:e2:ac:45:5f:83:
aa:a8:49:5f:5c:08:19:7d:8b:bd:a6:a9:14:1f:5a:f3:ff:53:
f3:28:f4:5e:a4:fb:13:58:c0:1c:43:be:d8:49:10:0d:10:c0:
3d:60:7c:d9:92:0b:68:82:5f:25:8a:7f:f0:57:9d:45:92:d3:
cf:74:e6:dd:ad:ba:e8:49:c2:42:25:14:06:11:04:02:6c:5f:
6d:4b:e3:50:4f:27:15:30:66:f2:ca:df:f2:96:ae:0e:a4:1e:
12:12:f8:9e:bc:4b:71:97:4f:23:04:2d:7f:83:8c:0f:88:bb:
17:75:25:f4:02:b0:48:71:f2:e1:09:ca:35:04:e9:3f:99:44:
a1:5f:03:c8:c4:3e:a9:97:ab:29:33:81:7b:7f:64:74:38:8e:
e3:f6:0c:3f:4c:08:a6:21:9e:c7:45:e7:5c:16:ba:b5:3c:f8:
04:82:2d:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz
REQ2MDczMEIwHhcNMjYwNzI3MDMzNDU5WhcNMjYwODAzMDMzNDU5WjAYMRYwFAYD
VQQDEw02YTY2ZDFlMy1hYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtB0J7Gxn2faA1AwaIwNNdRb22xdoBNKQsLMv5FlUyo4j68lC1QKDjNnUCP5Q
nM3WJ3L2kqHX6FZPKszGGZff+QyYYK1/9njhwZIAfcnkehCrU9wmqu/flcLCyG1K
DEHETht+5/vZ5WTOLwutrJX0Iu90LI4v04F/pkL3P/j8T6YFSRunK7IE0ou2u5WA
MXgVTwWCzmy+2Ky/r9LS0vk+Nnku8/mGYHEHlj06lYMbktwJr3StpOc4achjStda
rBR0axOYl6j8capGAQpDTsaAil2PTvNGTJe8XUtbfhWvklh1LbghIJQ7V+v+H/vf
+euJK4i+Db8Kx9b4Il9jrXO+mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFi6si4s
qTtZ+OZEDdwjOLdyur1tMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF
MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts
TTF6SlFNeUlLTFk5MWdjd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn2PSEm29xV0n7pokSX4uOFuUXZopraSqy5TmFP/EYue+6A+EoPwAtyCbaaAy
ANEhqZJTMmq5xsCmEcvoaQ2ut1yUmFmXisSopacWqtFHB2nblvklqOKsRV+DqqhJ
X1wIGX2LvaapFB9a8/9T8yj0XqT7E1jAHEO+2EkQDRDAPWB82ZILaIJfJYp/8Fed
RZLTz3Tm3a266EnCQiUUBhEEAmxfbUvjUE8nFTBm8srf8pauDqQeEhL4nrxLcZdP
IwQtf4OMD4i7F3Ul9AKwSHHy4QnKNQTpP5lEoV8DyMQ+qZerKTOBe39kdDiO4/YM
P0wIpiGex0XnXBa6tTz4BIIt7g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:12:14 2026 by rpki-client