
$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json)
Hash identifier: e2Uhd0qS4Q4ZT1bmqF0VpeJANcqWs4I61QRxSMW+REo=
Subject key identifier: 8B:AD:6B:F2:3E:55:47:CE:17:4A:C0:E9:E8:0E:2F:75:83:54:20:4F
Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Certificate serial: 084C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
Manifest number: 0824
Signing time: Mon 02 Mar 2026 00:13:38 +0000
Manifest this update: Mon 02 Mar 2026 00:13:37 +0000
Manifest next update: Mon 09 Mar 2026 00:13:37 +0000
Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: 9h+R806rhe3bPdu2LDjqgeQ84B6DoQvnBaCDXvt+Bu8=)
2: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: /CMhnqrhdVYNSUaizVq/uPj8VXgZqAfmKsDyp7bdTWE=)
3: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: c6LJhskoptnL62vsB9jLZiT/hEUllVG1aUqGIGkiID8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Validity
Not Before: Mar 2 00:13:37 2026 GMT
Not After : Mar 9 00:13:37 2026 GMT
Subject: CN=69a4d632-a743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:81:46:e7:cb:a2:bc:6e:42:44:4d:7b:c1:
67:c3:2a:8c:9c:4b:c3:d9:76:f2:ac:56:89:47:7d:
c6:73:1b:9f:91:e3:37:b7:49:fe:00:fb:6f:78:6c:
9a:ad:7c:ee:31:b9:4b:9a:2d:9a:88:d3:bb:ef:75:
d0:be:c8:9f:f4:c3:15:cb:73:86:33:4d:b5:a4:97:
80:4a:93:e1:b3:0a:e5:fc:cb:7b:5c:67:ae:8d:1d:
2a:1a:d3:1b:f3:fa:2b:68:68:5d:1d:b7:dd:bd:88:
4c:47:1c:81:ee:55:84:33:53:2e:47:4a:5b:6d:cb:
7d:f7:8f:2b:de:7c:72:f2:7a:84:a6:34:5c:dd:41:
be:30:f3:8c:00:6d:45:8c:d5:4f:22:31:22:d1:ca:
26:dc:11:5b:81:09:a4:42:8e:6f:63:f1:4b:6b:9d:
29:18:4e:2e:5b:11:4c:7a:1b:e7:47:cb:97:b9:87:
e2:83:54:b0:8e:fa:e1:00:97:17:e9:a1:b3:a3:2b:
88:32:55:a8:c2:56:90:b9:1d:ca:81:c5:76:00:66:
8a:62:2a:5a:cf:7d:43:bb:ab:e1:2e:86:2d:67:d0:
92:4d:ee:66:98:c5:3a:e8:57:2f:bf:31:b0:56:6b:
54:36:df:8b:09:bb:36:9e:5b:e4:0b:c5:d5:4e:9a:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AD:6B:F2:3E:55:47:CE:17:4A:C0:E9:E8:0E:2F:75:83:54:20:4F
X509v3 Authority Key Identifier:
keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:8e:f5:ca:59:39:ba:6a:f4:e3:40:8d:bb:27:88:88:76:8d:
17:be:a9:af:ea:6c:c5:38:d6:5d:db:cf:3d:37:62:29:74:c9:
17:73:1e:06:b6:54:79:be:69:21:57:20:4a:c1:ad:9e:b9:55:
ef:77:f5:8c:c6:41:59:ca:6a:2b:5f:4d:d8:7e:20:58:39:04:
9e:0a:bf:44:54:04:35:23:3c:f0:78:4b:b3:82:f5:06:f0:67:
e5:61:30:92:3b:c7:81:8d:96:e6:50:18:1e:04:02:99:e8:29:
d0:1c:44:07:52:31:55:1f:82:01:37:fe:0a:99:aa:d0:b0:07:
93:94:84:b0:9e:8d:3d:a2:8b:12:ec:c6:2d:c3:b5:ad:78:e0:
7e:93:8a:13:ff:61:6b:16:31:cc:9e:9c:0c:af:67:3b:6a:23:
84:8f:95:ae:44:9e:1c:d0:3e:51:3a:49:10:fa:f9:8d:b5:07:
30:f7:a6:de:a1:e1:07:8a:bf:08:96:34:25:20:85:28:c2:00:
2c:51:21:91:fb:92:33:e7:52:59:a2:1b:20:15:84:fd:9d:db:
e2:d8:a7:6f:6b:37:da:26:eb:e4:34:c6:ef:65:b4:dd:f2:0e:
2d:15:3c:b1:2b:63:74:7a:e1:47:cb:67:ae:d3:0d:44:98:fd:
ca:22:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:50 2026 by rpki-client