
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
File: nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json)
Hash identifier: tDSlCeotaAnaMxuLeaYaTRv4QECmxC+ak85+lhapruY=
Subject key identifier: A9:D1:B7:69:C6:FF:E3:71:D8:51:B1:D9:46:A5:BB:AE:79:DB:44:74
Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Certificate issuer: /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
Manifest number: D5
Signing time: Sun 01 Mar 2026 07:53:06 +0000
Manifest this update: Sun 01 Mar 2026 07:53:06 +0000
Manifest next update: Sun 08 Mar 2026 07:53:06 +0000
Files and hashes: 1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: TBeek7RG/4XiCH19AM1DePaa0O8IHOeti28tblmpbok=)
2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: 759eVfeplnxkWNaLr3cFwL2y/eV2CJBpdnC5ec+BIG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Validity
Not Before: Mar 1 07:53:06 2026 GMT
Not After : Mar 8 07:53:06 2026 GMT
Subject: CN=69a3f062-c563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:36:69:33:86:ab:a8:75:c6:ad:df:15:ce:
d9:7a:30:13:43:b2:25:8e:35:01:94:ee:e6:3e:83:
90:31:54:0d:03:d3:56:1f:40:1c:bd:b6:85:03:31:
48:fb:32:a8:bc:44:f0:f7:d2:57:d3:ce:28:4b:46:
bb:90:50:3e:39:44:20:fd:c1:a4:97:70:07:9c:54:
cb:27:3b:22:cf:20:74:52:c6:85:d1:4a:ba:a3:a3:
f0:a0:b1:9a:05:76:f7:a8:db:ec:88:cf:15:b2:3b:
72:4e:f5:a7:79:a3:42:91:b0:29:4b:8d:bd:27:e9:
62:da:af:0c:e4:d5:cb:c9:ac:87:80:b0:f0:d4:cf:
44:d2:f9:a9:ff:fb:55:30:cf:29:01:10:3a:ea:a1:
3a:95:0b:26:60:0b:5c:70:9c:a6:f0:6c:d8:a1:7e:
16:10:cf:37:4f:12:53:ef:b6:e6:ba:cd:f2:41:9a:
cb:ad:7c:9a:88:88:03:3c:df:81:9f:d0:ae:3c:ff:
cd:ba:07:87:c9:7c:b7:dd:15:41:d9:73:cd:df:bb:
91:3a:ac:65:11:ce:b9:cf:d5:e0:69:80:9f:91:16:
a0:43:30:ef:43:ca:38:31:8a:1d:99:7e:5c:51:8c:
0b:7e:20:3b:ed:6e:51:78:f9:cf:34:5e:62:37:20:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D1:B7:69:C6:FF:E3:71:D8:51:B1:D9:46:A5:BB:AE:79:DB:44:74
X509v3 Authority Key Identifier:
keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:41:6d:f0:de:8c:da:ad:04:42:1b:55:34:8a:35:c3:67:49:
a2:41:8c:f4:d8:86:de:05:2a:fb:fc:95:55:bd:00:13:6d:9a:
23:00:a5:75:5d:5a:a0:cd:d1:f3:68:1a:15:99:16:14:42:4f:
34:e6:2a:72:38:be:ed:05:33:00:53:2b:2b:d7:4f:90:db:b8:
5e:91:35:9c:23:e8:c1:37:1e:bf:6a:4f:55:d0:3c:32:78:5b:
1b:53:50:6b:b7:68:f4:5f:3c:13:0b:cf:fa:cb:27:02:81:c7:
72:42:b2:cc:01:a8:dd:cf:91:dd:b9:0f:c1:6f:72:9e:43:a1:
07:bd:02:11:4a:91:b9:f0:d4:46:55:26:34:6d:04:3a:52:22:
a8:6b:05:0c:df:20:71:83:a3:2f:de:a8:20:cb:cf:81:2c:81:
86:87:f2:5e:a1:4e:e9:e6:23:4e:70:23:15:ef:b8:2d:32:12:
bd:b2:94:1f:a9:c8:61:ae:df:68:f2:67:52:21:58:51:98:6e:
15:60:ed:32:57:35:d3:dd:13:52:ce:d8:52:37:5c:bc:70:ba:
78:09:cd:36:25:c2:10:06:46:d4:10:41:52:96:76:0f:b9:89:
76:34:e9:ce:3b:89:5c:81:03:8f:f9:1b:b4:c6:05:d8:92:5c:
d0:bb:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:18 2026 by rpki-client