
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
File: NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft (raw, json)
Hash identifier: stom2kkLBH9KP8Kr48FoKbRqxS9GFA450e/39Cz0Aus=
Subject key identifier: EE:BE:B8:7E:DF:12:5B:AD:32:94:A8:FD:59:90:99:AC:95:43:52:B9
Authority key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
Certificate issuer: /CN=A915BC71/serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
Manifest number: 1B
Signing time: Sat 13 Jun 2026 09:00:13 +0000
Manifest this update: Sat 13 Jun 2026 09:00:13 +0000
Manifest next update: Sat 20 Jun 2026 09:00:13 +0000
Files and hashes: 1: NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl (hash: QjjEJpVnLOUWc6+sel3FU70+iKXIq/OS+xir3BpFoT0=)
2: 045117A63F0611F1B36B08F4C9833773.roa (hash: yc41YsNACmYj/Sr/DAPgp/0vliNwQTb4cuVsDR9CDfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl
rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
Validity
Not Before: Jun 13 09:00:13 2026 GMT
Not After : Jun 20 09:00:13 2026 GMT
Subject: CN=6a2d1c1d-b609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:62:9f:48:1c:85:17:8b:b8:0b:4c:29:3b:
94:fa:e6:c3:03:f4:1c:a9:06:73:28:90:31:dc:cd:
c1:af:fa:6c:72:cf:2f:5e:d6:d9:15:b0:41:8b:8c:
fa:90:5b:94:6a:a4:4f:34:db:5e:39:b9:a5:ce:49:
20:cd:3e:23:e6:d4:b2:fe:40:b0:64:1a:1a:e4:14:
6f:77:fa:17:06:51:7b:1f:93:bf:82:a0:db:3c:28:
0d:fd:69:fd:71:7d:0c:bd:19:8f:32:0f:04:e6:f4:
43:8e:a8:2a:f7:24:13:ac:1e:0d:46:47:34:6d:6c:
4e:0a:60:b1:d5:4e:c3:7a:c4:9b:7d:f9:14:99:3b:
8b:75:7d:fe:e6:24:7a:6b:20:df:34:36:1f:b6:1b:
e7:f6:e8:09:28:83:ed:ab:6e:1d:e0:f2:37:fd:9b:
40:23:33:94:04:61:6a:44:52:f2:54:18:27:3d:8a:
66:c2:88:f3:bd:a7:a6:1d:77:e3:28:93:c6:3b:8f:
92:9e:c9:b7:b4:4d:51:0a:cf:19:a8:b9:70:5d:c6:
8d:c7:86:a5:4e:6c:5c:5a:3b:09:72:9b:34:ee:70:
13:db:66:ca:df:d9:b4:90:a2:e7:b5:e8:c1:66:f2:
84:70:a7:b8:95:72:20:0b:44:1e:73:71:56:90:bb:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BE:B8:7E:DF:12:5B:AD:32:94:A8:FD:59:90:99:AC:95:43:52:B9
X509v3 Authority Key Identifier:
keyid:35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5b:95:1e:3a:b1:0d:b0:6a:58:0a:0d:8c:bc:fc:71:16:07:
6d:ae:fe:f5:fd:b3:0a:e1:f6:ca:e3:6a:bd:5e:d4:de:a6:ad:
7f:e2:8a:29:19:3f:bf:37:93:d9:fa:cc:fb:b7:5b:f2:33:5a:
00:cb:de:a8:8f:23:2f:49:97:f8:f0:31:79:77:98:d3:46:6c:
fb:5f:c9:22:94:27:7b:44:87:2a:9c:2b:d1:90:df:12:72:b5:
67:5c:a4:9f:b6:7e:82:11:35:41:2b:2c:52:c6:90:fc:6a:79:
3e:8d:59:a0:d9:2b:35:d4:9f:3c:10:8c:89:11:f0:e8:fc:17:
a6:d3:a2:5d:99:02:9c:10:e1:5b:0b:b3:a4:ae:28:55:2c:aa:
38:51:f4:f8:0b:5f:f4:74:4a:b5:10:48:bf:66:79:5f:09:86:
cb:dc:b8:a4:70:f9:45:b1:41:d5:22:2f:bb:0f:31:9e:84:2c:
11:d7:de:01:87:84:34:72:c2:c9:ea:b0:ad:fb:9d:da:75:af:
7b:fb:18:9a:3d:b9:ea:23:bd:b6:af:0e:f5:26:8f:a8:ea:1b:
83:2b:bc:25:3d:ff:ff:71:bc:08:01:69:7e:fb:36:40:fa:69:
88:8a:bc:23:7c:6c:f9:bd:e2:c2:d8:c9:c0:0d:d7:a6:c3:cd:
72:3d:5d:33
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QkM3MTExMC8GA1UEBRMoMzU3NjREOTQyMDdENDREODlBNzA1NTdDNjZEMkEyRUYz
RDFDNTQ4MDAeFw0yNjA2MTMwOTAwMTNaFw0yNjA2MjAwOTAwMTNaMBgxFjAUBgNV
BAMTDTZhMmQxYzFkLWI2MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC97GKfSByFF4u4C0wpO5T65sMD9BypBnMokDHczcGv+mxyzy9e1tkVsEGLjPqQ
W5RqpE802145uaXOSSDNPiPm1LL+QLBkGhrkFG93+hcGUXsfk7+CoNs8KA39af1x
fQy9GY8yDwTm9EOOqCr3JBOsHg1GRzRtbE4KYLHVTsN6xJt9+RSZO4t1ff7mJHpr
IN80Nh+2G+f26Akog+2rbh3g8jf9m0AjM5QEYWpEUvJUGCc9imbCiPO9p6Ydd+Mo
k8Y7j5Keybe0TVEKzxmouXBdxo3HhqVObFxaOwlymzTucBPbZsrf2bSQoue16MFm
8oRwp7iVciALRB5zcVaQu/6DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7r64ft8S
W60ylKj9WZCZrJVDUrkwHwYDVR0jBBgwFoAUNXZNlCB9RNiacFV8ZtKi7z0cVIAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzcxLzg4QTNCNEJBM0Yw
NTExRjFCRTNGQzBDMkM5ODMzNzczL05YWk5sQ0I5Uk5pYWNGVjhadEtpN3owY1ZJ
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTlhaTmxDQjlSTmlhY0ZWOFp0S2k3ejBjVklBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC
QzcxLzg4QTNCNEJBM0YwNTExRjFCRTNGQzBDMkM5ODMzNzczL05YWk5sQ0I5Uk5p
YWNGVjhadEtpN3owY1ZJQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCaW5UeOrENsGpYCg2MvPxxFgdtrv71/bMK4fbK42q9XtTepq1/4oopGT+/N5PZ
+sz7t1vyM1oAy96ojyMvSZf48DF5d5jTRmz7X8kilCd7RIcqnCvRkN8ScrVnXKSf
tn6CETVBKyxSxpD8ank+jVmg2Ss11J88EIyJEfDo/Bem06JdmQKcEOFbC7OkrihV
LKo4UfT4C1/0dEq1EEi/ZnlfCYbL3LikcPlFsUHVIi+7DzGehCwR194Bh4Q0csLJ
6rCt+53ada97+xiaPbnqI722rw71Jo+o6huDK7wlPf//cbwIAWl++zZA+mmIirwj
fGz5veLC2MnADdemw81yPV0z
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:52:13 2026 by rpki-client