
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
File: nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json)
Hash identifier: PJSi07jEI9az2OA+isDztLY0rQ3JUIL0JR2N2WmYUeU=
Subject key identifier: 32:69:CD:F2:E8:6F:5F:4C:D5:7C:3F:2C:22:49:55:0C:05:19:53:82
Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
Certificate issuer: /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Certificate serial: 0AB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
Manifest number: 0AA8
Signing time: Sun 26 Jul 2026 19:58:00 +0000
Manifest this update: Sun 26 Jul 2026 19:57:59 +0000
Manifest next update: Sun 02 Aug 2026 19:57:59 +0000
Files and hashes: 1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: HYeJu6LCxA3fL/pPWV0LFgXlFW179rT9boNxcuyVc/I=)
2: C6D1EECC81BE11F1A685B7C064A30FBC.roa (hash: 1Jflhq0/YWfer3B+b90vVvTGQUbz1ktB3eeCu83aIbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2741 (0xab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Validity
Not Before: Jul 26 19:57:59 2026 GMT
Not After : Aug 2 19:57:59 2026 GMT
Subject: CN=6a6666c8-40b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:0c:30:5c:e1:56:28:8a:5d:0f:8d:58:fb:
c8:88:a3:28:b4:48:08:60:1c:6d:70:25:9c:9e:3b:
01:76:d4:41:f0:1d:47:75:3b:a2:3c:e8:33:cf:b5:
b1:c0:47:1c:94:23:dd:63:72:41:da:ba:e4:b0:25:
8e:37:36:99:83:05:28:38:dd:39:16:48:d6:e6:c8:
d2:3f:b4:09:1b:ba:63:5a:2f:3d:d7:bb:90:9d:d2:
2e:ed:cf:4a:64:f8:d7:fe:f5:cd:95:d8:c3:e4:57:
ed:22:5f:12:1c:1d:25:78:ac:81:c7:40:fd:55:d8:
9a:e5:c5:3d:94:28:38:9f:0b:d4:53:aa:fc:ad:31:
bd:ae:c7:7e:97:7e:6a:db:0c:51:6a:3c:24:0d:ad:
24:e0:89:66:aa:21:ad:a5:35:60:09:6d:4c:01:5e:
b8:4b:66:17:33:76:78:b5:94:ad:e7:31:09:9e:23:
d8:74:f8:4c:91:bd:f4:a3:65:a0:1c:e4:ed:64:8f:
9d:57:3c:01:0b:b4:2c:2d:81:e8:8a:b7:47:87:77:
c0:26:79:8a:c1:5b:b9:ed:94:b0:a6:b3:8c:d5:a9:
cb:10:3f:09:52:e6:75:d2:68:e6:ac:5b:cb:96:b9:
b5:3b:5b:5c:4b:7e:83:6b:81:f1:e9:33:e8:3c:c4:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:CD:F2:E8:6F:5F:4C:D5:7C:3F:2C:22:49:55:0C:05:19:53:82
X509v3 Authority Key Identifier:
keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:c4:12:5d:ab:f9:67:f7:06:0d:06:40:fa:54:65:f0:19:2e:
63:47:7a:92:bf:03:22:47:d2:de:7e:d0:21:79:5c:d0:42:43:
91:95:ba:ca:2e:94:b5:5d:67:76:1d:08:6d:14:36:6f:09:e6:
a4:26:54:6c:91:8d:fe:17:6f:10:50:b3:89:5f:b9:5a:b3:91:
09:61:78:e3:b7:c7:31:47:b3:6a:f4:c3:d5:41:34:b2:5f:9e:
fc:92:77:03:93:ee:69:5d:72:8d:68:50:c3:77:9f:d7:ab:38:
3e:54:f3:22:04:fe:3e:93:77:1f:4b:9f:e4:4c:f8:4c:db:b4:
1a:58:0c:31:e2:7f:13:52:ab:c7:a7:fd:bd:73:8c:7c:f6:a5:
01:ac:21:4c:01:c3:70:e3:4b:ce:b1:4f:c4:be:78:ac:f3:07:
71:fb:c8:72:25:a5:f0:ac:31:3d:63:0d:5f:37:53:c1:8b:bd:
bb:4a:3f:3c:f1:c7:a4:fa:da:1e:d6:63:40:07:27:f6:e3:c8:
40:d5:a9:35:6b:d9:33:70:67:86:11:a6:cc:f7:62:16:c8:9c:
47:96:cc:23:60:d1:a9:9e:f8:47:af:b8:55:04:c5:53:fb:cc:
dd:6e:ad:c5:53:2f:7e:fa:e5:c2:b9:f1:14:03:a6:f3:e3:d7:
b9:74:d7:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzIxNTQxMTAvBgNVBAUTKDlFOTk0RUY3NUUxMTMzRTYwRjAxQjlBNDhBMDkyNjE5
NTJGQjFCODEwHhcNMjYwNzI2MTk1NzU5WhcNMjYwODAyMTk1NzU5WjAYMRYwFAYD
VQQDEw02YTY2NjZjOC00MGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmWcMMFzhViiKXQ+NWPvIiKMotEgIYBxtcCWcnjsBdtRB8B1HdTuiPOgzz7Wx
wEcclCPdY3JB2rrksCWONzaZgwUoON05FkjW5sjSP7QJG7pjWi8917uQndIu7c9K
ZPjX/vXNldjD5FftIl8SHB0leKyBx0D9Vdia5cU9lCg4nwvUU6r8rTG9rsd+l35q
2wxRajwkDa0k4IlmqiGtpTVgCW1MAV64S2YXM3Z4tZSt5zEJniPYdPhMkb30o2Wg
HOTtZI+dVzwBC7QsLYHoirdHh3fAJnmKwVu57ZSwprOM1anLED8JUuZ10mjmrFvL
lrm1O1tcS36Da4Hx6TPoPMTXtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJpzfLo
b19M1Xw/LCJJVQwFGVOCMB8GA1UdIwQYMBaAFJ6ZTvdeETPmDwG5pIoJJhlS+xuB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjE1NC8zOUE2Q0YyQTgw
OTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0tWVBBYm1raWdrbUdWTDdH
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25wbE85MTRSTS1ZUEFibWtpZ2ttR1ZMN0c0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjE1NC8zOUE2Q0YyQTgwOTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0t
WVBBYm1raWdrbUdWTDdHNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIMQSXav5Z/cGDQZA+lRl8BkuY0d6kr8DIkfS3n7QIXlc0EJDkZW6yi6UtV1n
dh0IbRQ2bwnmpCZUbJGN/hdvEFCziV+5WrORCWF447fHMUezavTD1UE0sl+e/JJ3
A5PuaV1yjWhQw3ef16s4PlTzIgT+PpN3H0uf5Ez4TNu0GlgMMeJ/E1Krx6f9vXOM
fPalAawhTAHDcONLzrFPxL54rPMHcfvIciWl8KwxPWMNXzdTwYu9u0o/PPHHpPra
HtZjQAcn9uPIQNWpNWvZM3BnhhGmzPdiFsicR5bMI2DRqZ74R6+4VQTFU/vM3W6t
xVMvfvrlwrnxFAOm8+PXuXTXjg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:08 2026 by rpki-client