
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
File: NAlJ7LhXg2NX8QJTxpQnIggZex0.mft (raw, json)
Hash identifier: sgXnLzAmLRYAufheNmQigu8SiU6yxVsLhTpcrksbDWI=
Subject key identifier: 34:52:BC:9A:7F:3D:68:0F:4F:18:72:03:48:C8:DD:A3:48:1F:7C:38
Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D
Certificate issuer: /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D
Certificate serial: 062D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
Manifest number: 0626
Signing time: Thu 24 Sep 2026 22:39:58 +0000
Manifest this update: Thu 24 Sep 2026 22:39:58 +0000
Manifest next update: Thu 01 Oct 2026 22:39:58 +0000
Files and hashes: 1: NAlJ7LhXg2NX8QJTxpQnIggZex0.crl (hash: +gqatmv5oJMp6ywHlMYHQr2Dzt6yrMATUhT7xxkFPgo=)
2: F44B1F40FC1711EBA835010DC4F9AE02.roa (hash: fOkqVihCu1L5Ia3iPQWWnGFlmmkL41U8TtXyOcg3l2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl
rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1581 (0x62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BC76, serialNumber=340949ECB857836357F10253C694272208197B1D
Validity
Not Before: Sep 24 22:39:58 2026 GMT
Not After : Oct 1 22:39:58 2026 GMT
Subject: CN=6ab5a6be-7de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:39:d7:20:ce:31:43:65:f4:91:0b:4e:23:
05:5a:c7:93:7e:a9:e7:36:22:23:ed:a0:1d:95:bc:
13:24:87:3a:c3:d9:15:14:2c:b9:23:a4:01:e1:d6:
59:1c:0c:db:c3:33:b3:e5:11:d1:00:75:b4:d7:db:
bc:2a:ed:89:a0:f2:13:15:56:cd:a9:f0:25:2c:d1:
f7:9c:e6:5b:c7:3a:70:3c:3e:62:35:d6:5a:60:b4:
98:f0:85:59:de:b3:99:c9:c0:dc:b3:e1:7e:df:bb:
32:40:15:b4:44:95:a9:ee:0e:f8:d2:68:a5:51:a5:
8f:9b:e1:85:cb:07:04:d0:74:42:52:c6:f1:0d:a7:
cf:bc:0e:ae:a3:77:20:1e:e6:7b:b2:e2:04:07:45:
9a:54:85:43:77:7a:36:d5:f0:ff:a4:8f:e2:bb:b6:
42:67:e0:87:d9:83:58:45:93:0d:73:65:c2:7b:da:
b4:e8:f5:fb:f6:5d:2e:c7:fa:26:86:4a:3f:c2:87:
bf:3c:a2:4f:be:f5:37:2b:84:c4:d1:8c:00:11:59:
24:3e:e2:7b:86:6c:58:83:3e:a8:58:eb:33:4a:e9:
7e:0a:cc:37:61:4a:06:dd:28:d4:80:55:3d:85:5e:
6c:56:4e:bd:3b:24:84:ba:da:6d:0b:a6:62:b4:0b:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:52:BC:9A:7F:3D:68:0F:4F:18:72:03:48:C8:DD:A3:48:1F:7C:38
X509v3 Authority Key Identifier:
keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:77:db:0c:93:4d:0c:1a:6b:5b:a2:99:f6:33:55:92:be:14:
b7:08:59:34:a5:e4:40:ec:20:0a:bf:24:60:e5:30:89:39:4b:
7e:11:49:5b:25:79:bf:f2:57:dc:ff:ce:6b:6a:2e:32:c8:f6:
39:2d:fe:92:72:d6:03:ff:e7:b6:47:4c:ae:e5:64:df:9d:14:
5f:08:99:47:e1:8b:b0:34:f3:8c:45:4f:a2:bf:77:b6:b1:aa:
97:17:dc:12:4f:d1:f4:4f:7e:60:a6:e4:1c:6b:48:0c:f2:9b:
bf:4c:00:04:1f:4c:83:75:29:2a:16:27:f1:ad:6d:a9:c1:68:
43:36:3a:25:87:65:12:83:21:6c:42:79:7c:86:28:f7:05:1e:
17:3e:23:99:89:1f:aa:6a:8c:fd:a3:81:69:15:52:68:41:99:
74:ac:73:0d:b3:40:d0:87:be:4a:ae:0c:c1:4a:56:ce:4f:aa:
8d:c0:b6:9b:6d:48:4b:ca:85:42:fe:05:a8:19:ad:1e:5b:61:
31:c7:bc:9e:96:b9:19:cc:ad:14:7c:ae:e3:e1:d0:27:45:b9:
8d:b0:8f:ef:96:c1:c6:45:22:cb:0a:66:0f:42:2e:2c:10:20:
b1:ac:02:ee:f8:24:d4:0c:18:1b:24:f1:43:c9:ff:c4:66:94:
e1:fd:5a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:33:30 2026 by rpki-client