
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
File: nb0ycj1x0bhWzIRJBDf78NpVJWo.mft (raw, json)
Hash identifier: Xc95WPVhCl4wqNEFhsP6ZgnPBLg1zx1ZIcDBJSNEUxI=
Subject key identifier: 9E:39:B3:2F:D1:BD:FC:4D:4F:EB:35:8C:6E:94:C0:B3:67:B4:77:46
Authority key identifier: 9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A
Certificate issuer: /CN=A9165B41/serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A
Certificate serial: 1006
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
Manifest number: 0FFD
Signing time: Fri 12 Jun 2026 17:25:42 +0000
Manifest this update: Fri 12 Jun 2026 17:25:42 +0000
Manifest next update: Fri 19 Jun 2026 17:25:42 +0000
Files and hashes: 1: nb0ycj1x0bhWzIRJBDf78NpVJWo.crl (hash: LvBIJfSYISRhhA8SO7abhgPR0x7Fnqaa62wJmDXXOIg=)
2: B0DA9FC46FDD11E9BC194664C4F9AE02.roa (hash: DqcO1uKyGorzFQae1aCUq8/bsyuYfHY7JCuuxkGqdBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl
rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4102 (0x1006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165B41, serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A
Validity
Not Before: Jun 12 17:25:42 2026 GMT
Not After : Jun 19 17:25:42 2026 GMT
Subject: CN=6a2c4116-ec71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:bd:32:3d:09:27:12:8e:0c:9a:8f:92:9b:
48:28:66:ee:48:71:d8:d4:e6:92:91:5a:3e:42:f4:
5f:d9:85:2d:36:14:96:56:ab:88:52:6a:b1:22:2d:
ae:b3:a1:18:12:96:46:ea:5a:87:eb:0a:bc:78:95:
50:9b:1e:ae:bd:fa:a2:69:d8:ca:6b:0b:8c:b7:cd:
cf:dc:da:62:f2:e6:6b:36:42:51:60:68:34:64:38:
42:e5:39:c6:9e:ed:6d:58:0d:99:e8:88:76:18:27:
83:3a:d2:be:47:89:10:81:d8:d3:c4:1a:32:e5:5b:
97:f9:05:cc:ed:8c:73:7b:3d:ae:83:ac:62:3e:59:
c8:82:45:1b:bd:f0:d0:2e:8b:8f:84:18:4f:48:c6:
b7:68:dd:a3:a3:79:88:9d:7e:5e:7a:aa:8f:43:df:
4f:97:3e:19:d9:d4:06:19:38:e0:93:84:cc:4c:df:
90:dd:c5:25:2f:50:44:c7:04:c0:d6:6f:35:dc:b0:
7d:32:74:d4:aa:cf:2d:e1:df:2e:a7:e7:17:6c:16:
d2:0b:86:2a:7f:4d:37:10:5c:ec:16:f6:11:50:46:
dc:5c:70:a4:6f:bd:48:23:85:5a:e7:bd:9e:96:ca:
55:df:7b:52:53:df:5c:2c:cb:d6:c7:ec:d8:f3:4d:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:39:B3:2F:D1:BD:FC:4D:4F:EB:35:8C:6E:94:C0:B3:67:B4:77:46
X509v3 Authority Key Identifier:
keyid:9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:20:71:be:e1:ef:6b:02:f3:23:a4:90:8a:f2:b6:18:f2:50:
94:ba:3f:ae:02:57:aa:37:4d:e7:81:12:24:8a:d2:0b:02:76:
af:6f:c2:74:a1:e4:b3:fd:5d:5a:87:9a:ba:a8:84:6b:5b:0c:
5f:63:d4:5d:b3:1a:11:f6:72:c7:0a:e2:ab:30:fd:02:8b:79:
f7:82:94:02:46:da:5b:e8:15:a9:0e:27:d8:a4:9c:ea:a1:b5:
ab:f0:d9:09:73:0a:44:f5:86:b4:55:1b:d0:c0:bd:e6:f6:a4:
7c:b0:2a:ce:64:9d:5b:8f:74:94:c3:f6:b6:4f:3f:d9:fb:18:
3b:41:4b:41:31:7a:f4:51:ff:72:43:68:61:f5:82:31:23:9c:
1e:93:a6:e9:38:99:af:d5:95:7e:09:31:09:04:31:c4:c1:a4:
5c:de:ea:0e:32:99:0a:e6:f3:81:26:6e:78:b5:77:35:ea:c1:
35:99:90:c1:28:1d:82:8b:67:3f:85:67:b8:88:c6:3c:ab:d8:
85:6b:44:20:bb:3d:6b:6c:8c:ca:7e:e7:89:2e:9f:14:ec:84:
9c:8c:2b:a2:28:5a:17:9e:12:72:fd:de:2f:33:31:b9:0e:f2:
c3:ea:57:0a:21:2c:86:a9:8a:bc:f4:3a:9e:e0:f8:0e:7a:b6:
f4:b9:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:11 2026 by rpki-client