
$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json)
Hash identifier: G3zfaBkgNSI35zOCf3ZCJDIhueNYJk65h0IDFMcCwJw=
Subject key identifier: 8F:F0:F4:AF:A6:63:1F:53:0C:B1:63:EE:5D:5C:79:8E:F2:83:ED:F7
Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Certificate serial: 0864
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
Manifest number: 083C
Signing time: Thu 16 Apr 2026 20:54:50 +0000
Manifest this update: Thu 16 Apr 2026 20:54:50 +0000
Manifest next update: Thu 23 Apr 2026 20:54:50 +0000
Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: yGPJr2KPIuSNSyGDiDu/1LylQ0cIEACGM33rCcE4yOM=)
2: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: c6LJhskoptnL62vsB9jLZiT/hEUllVG1aUqGIGkiID8=)
3: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: /CMhnqrhdVYNSUaizVq/uPj8VXgZqAfmKsDyp7bdTWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Validity
Not Before: Apr 16 20:54:50 2026 GMT
Not After : Apr 23 20:54:50 2026 GMT
Subject: CN=69e14c9a-24f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f7:9b:f5:f9:70:63:25:95:29:95:d1:fe:34:
23:f2:1c:1f:29:8e:05:ec:9c:74:1a:20:16:03:9b:
3c:31:b5:39:1f:49:43:89:27:d1:32:40:fd:a8:43:
48:8b:e1:f6:de:b1:d0:fa:20:44:50:c4:5d:3d:c4:
45:b4:41:2f:4f:d8:fb:48:6b:18:a6:33:55:e2:b6:
c8:61:4b:10:6e:3d:6c:f7:e9:be:57:9a:23:aa:8b:
3e:86:65:bf:41:8b:70:8e:70:7d:c2:43:2f:11:e3:
6b:12:a2:e8:86:4a:82:89:1d:86:cd:3b:44:d1:4e:
d8:24:26:7e:a3:cc:7a:c0:13:7e:f7:ca:00:84:4f:
72:40:92:a1:eb:f7:e3:cd:38:c8:8a:b9:31:08:1e:
87:87:a3:38:c0:91:85:43:74:6e:90:7f:ca:12:ad:
b2:05:ed:46:63:c6:63:7c:69:64:57:c0:09:ad:3b:
58:b8:3c:6d:d5:cf:06:d8:ec:86:6c:85:06:e8:50:
b6:96:7e:7c:b1:0b:6c:b0:b0:45:0c:8c:d7:20:ed:
1b:58:d4:b4:10:a7:be:0c:f4:8a:07:30:df:c1:4a:
c0:92:57:19:7f:6c:84:e8:98:0b:4c:67:a4:6f:05:
7f:9e:9a:3d:1f:14:97:e8:b3:65:ea:cf:73:c1:5f:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F0:F4:AF:A6:63:1F:53:0C:B1:63:EE:5D:5C:79:8E:F2:83:ED:F7
X509v3 Authority Key Identifier:
keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:7c:fb:8a:21:19:8e:0e:86:e9:07:73:b6:48:c8:9c:2c:94:
30:fb:e6:a7:7e:8f:ca:0e:0e:29:5b:fa:75:51:4c:f8:1a:0b:
ab:b1:3c:fa:6d:f4:1f:eb:e2:c4:67:41:3d:bd:f0:bc:c2:05:
da:a3:b0:20:6f:e2:56:0a:a3:60:5f:cf:98:5d:2c:99:e9:3e:
a5:c3:4d:5b:07:f8:74:1e:a4:cb:38:6f:41:45:7c:d3:8b:9f:
2c:80:bd:2f:f6:4c:72:8c:f1:09:8c:6a:b9:82:ba:ea:72:27:
14:e0:eb:16:7b:e0:0d:0c:52:b3:89:52:70:b2:46:f2:fe:15:
ad:03:e9:d3:6e:ff:a8:be:fd:9c:05:f2:cb:a1:f8:29:60:cd:
7c:19:a8:5c:fb:81:cd:1a:27:3b:dd:31:a3:1b:87:4b:3e:ee:
f4:2f:3d:10:03:26:a4:b8:1a:c1:45:4d:bf:56:c0:25:83:2d:
7f:71:2c:4f:7a:11:e7:94:85:77:48:7c:64:6a:6a:39:2b:93:
ff:94:a0:ad:10:24:9b:85:81:9a:a7:70:ae:b5:79:07:79:9e:
f3:11:9e:ca:e8:d2:db:3c:37:f4:50:0a:42:06:13:23:3a:c2:
45:91:13:6b:19:bc:e5:35:a8:e3:43:4e:30:de:e4:58:f2:02:
4c:7d:5f:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC
OUJCQzFFNUIwHhcNMjYwNDE2MjA1NDUwWhcNMjYwNDIzMjA1NDUwWjAYMRYwFAYD
VQQDEw02OWUxNGM5YS0yNGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6veb9flwYyWVKZXR/jQj8hwfKY4F7Jx0GiAWA5s8MbU5H0lDiSfRMkD9qENI
i+H23rHQ+iBEUMRdPcRFtEEvT9j7SGsYpjNV4rbIYUsQbj1s9+m+V5ojqos+hmW/
QYtwjnB9wkMvEeNrEqLohkqCiR2GzTtE0U7YJCZ+o8x6wBN+98oAhE9yQJKh6/fj
zTjIirkxCB6Hh6M4wJGFQ3RukH/KEq2yBe1GY8ZjfGlkV8AJrTtYuDxt1c8G2OyG
bIUG6FC2ln58sQtssLBFDIzXIO0bWNS0EKe+DPSKBzDfwUrAklcZf2yE6JgLTGek
bwV/npo9HxSX6LNl6s9zwV8SHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/w9K+m
Yx9TDLFj7l1ceY7yg+33MB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy
NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i
QTBnUjBYa25tX1c1dThIbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASHz7iiEZjg6G6QdztkjInCyUMPvmp36Pyg4OKVv6dVFM+BoLq7E8+m30H+vi
xGdBPb3wvMIF2qOwIG/iVgqjYF/PmF0smek+pcNNWwf4dB6kyzhvQUV804ufLIC9
L/ZMcozxCYxquYK66nInFODrFnvgDQxSs4lScLJG8v4VrQPp027/qL79nAXyy6H4
KWDNfBmoXPuBzRonO90xoxuHSz7u9C89EAMmpLgawUVNv1bAJYMtf3EsT3oR55SF
d0h8ZGpqOSuT/5SgrRAkm4WBmqdwrrV5B3me8xGeyujS2zw39FAKQgYTIzrCRZET
axm85TWo40NOMN7kWPICTH1flA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:16:03 2026 by rpki-client