
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier: XFIKNy3UAaiMDzHl8cz9jdaBYJNM+AmUsG+jV+d3/x4=
Subject key identifier: AD:EE:CD:7F:DA:7A:F6:0E:9F:15:96:DC:CA:3C:34:25:4C:F2:F0:ED
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number: AB
Signing time: Sun 01 Mar 2026 08:28:32 +0000
Manifest this update: Sun 01 Mar 2026 08:28:32 +0000
Manifest next update: Sun 08 Mar 2026 08:28:32 +0000
Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: NOTECHEJJjKl3fbTVxZKZ3jx6xHfosk6qz5nu3ablkg=)
2: AF75682A101911F09363D44DC4F9AE02.roa (hash: zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: Mar 1 08:28:32 2026 GMT
Not After : Mar 8 08:28:32 2026 GMT
Subject: CN=69a3f8b0-c535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:66:70:d1:b0:80:95:ea:d2:2a:60:dd:a1:
2d:4e:cd:4b:19:d8:6f:33:6c:4c:f8:5e:51:79:4e:
1c:63:fb:b9:19:48:b0:6b:54:99:be:88:0b:64:b3:
7c:56:3b:b3:23:3e:d2:f0:46:7d:76:dd:1f:08:82:
2c:4b:2c:88:b6:e8:25:8a:1a:43:93:3e:20:39:3a:
20:57:0b:f2:dc:71:6d:4f:52:33:55:6e:02:ec:6e:
69:d6:68:48:78:a8:ba:e3:e9:48:43:01:9b:46:09:
f6:19:ce:96:4f:35:93:b5:bf:a6:25:c9:c1:ec:95:
14:bd:92:ee:69:7e:20:f9:4b:92:dc:34:6e:b5:c0:
d6:f0:35:0b:2c:33:33:be:92:dc:90:6e:63:38:08:
b8:97:cf:4c:4a:c7:d1:a1:d3:8f:95:c7:0b:98:09:
70:78:24:43:cb:2e:e3:80:f2:d8:87:61:75:eb:39:
0d:ad:21:81:c0:d3:05:54:b1:a6:d3:b7:39:8a:ec:
f8:6e:6b:42:ea:a4:e4:29:d0:ec:5d:98:68:33:a4:
00:17:28:49:9a:9b:59:d3:84:4d:e4:37:28:6b:8f:
2b:c0:f7:35:b4:cf:09:cf:b2:4f:47:e5:54:1b:49:
c7:8c:41:64:86:dd:39:2a:d5:e3:d3:23:ac:3b:d6:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EE:CD:7F:DA:7A:F6:0E:9F:15:96:DC:CA:3C:34:25:4C:F2:F0:ED
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:22:8d:be:4f:1e:0d:9f:35:25:3e:0f:97:b4:92:cd:ee:24:
3e:3f:75:5e:7d:3c:c7:1f:17:b1:ee:0f:fc:aa:e6:f5:0b:8b:
b7:24:c9:e1:d4:b5:17:89:c9:78:5d:e8:2d:7e:12:10:ea:b2:
c4:24:94:45:9c:f8:3e:6a:9f:68:22:ba:81:3c:74:1c:44:09:
56:85:86:9e:0b:98:24:bc:bf:8a:8f:94:04:60:1f:cb:78:a8:
29:d0:a1:b4:10:f8:d8:35:8a:94:ce:43:cd:e1:44:34:0f:13:
5b:7f:d7:e4:9b:9e:4f:a6:db:9d:31:2e:c2:da:39:7b:3f:c9:
80:16:30:16:2a:28:b3:68:b0:b0:fb:c3:d2:da:65:24:4a:2c:
c6:ec:63:ac:ce:b3:3e:44:11:e0:2f:18:39:43:da:c1:ec:d9:
86:d5:91:cb:86:40:63:75:a4:8b:41:b8:1f:88:01:d8:31:13:
81:cf:e1:49:32:ac:6c:30:fc:aa:05:37:16:86:31:a6:9d:cc:
58:3f:fa:7c:8a:97:5b:dc:fd:93:5c:e6:27:45:e0:7a:a1:91:
17:14:cc:49:18:61:7f:36:18:d9:63:85:75:1f:ef:db:40:24:
7f:49:74:db:d5:29:f2:d9:c8:3d:96:1e:2c:9f:d2:ef:68:70:
d9:18:0a:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNGQUMxMTAvBgNVBAUTKDlENDU2N0ZCRTI1MkM2NjE2NDJBQTMzRTc4MDQ4QTg3
MTdGQTdDQjMwHhcNMjYwMzAxMDgyODMyWhcNMjYwMzA4MDgyODMyWjAYMRYwFAYD
VQQDEw02OWEzZjhiMC1jNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu1VmcNGwgJXq0ipg3aEtTs1LGdhvM2xM+F5ReU4cY/u5GUiwa1SZvogLZLN8
VjuzIz7S8EZ9dt0fCIIsSyyItuglihpDkz4gOTogVwvy3HFtT1IzVW4C7G5p1mhI
eKi64+lIQwGbRgn2Gc6WTzWTtb+mJcnB7JUUvZLuaX4g+UuS3DRutcDW8DULLDMz
vpLckG5jOAi4l89MSsfRodOPlccLmAlweCRDyy7jgPLYh2F16zkNrSGBwNMFVLGm
07c5iuz4bmtC6qTkKdDsXZhoM6QAFyhJmptZ04RN5Dcoa48rwPc1tM8Jz7JPR+VU
G0nHjEFkht05KtXj0yOsO9Y83QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3uzX/a
evYOnxWW3Mo8NCVM8vDtMB8GA1UdIwQYMBaAFJ1FZ/viUsZhZCqjPngEiocX+nyz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0ZBQy9BRkY1NjNFNjEw
MTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9uVVZuLS1KU3htRmtLcU0tZUFTS2h4ZjZm
TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25VVm4tLUpTeG1Ga0txTS1lQVNLaHhmNmZMTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0ZBQy9BRkY1NjNFNjEwMTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9uVVZuLS1KU3ht
RmtLcU0tZUFTS2h4ZjZmTE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVCKNvk8eDZ81JT4Pl7SSze4kPj91Xn08xx8Xse4P/Krm9QuLtyTJ4dS1F4nJ
eF3oLX4SEOqyxCSURZz4PmqfaCK6gTx0HEQJVoWGnguYJLy/io+UBGAfy3ioKdCh
tBD42DWKlM5DzeFENA8TW3/X5JueT6bbnTEuwto5ez/JgBYwFioos2iwsPvD0tpl
JEosxuxjrM6zPkQR4C8YOUPawezZhtWRy4ZAY3Wki0G4H4gB2DETgc/hSTKsbDD8
qgU3FoYxpp3MWD/6fIqXW9z9k1zmJ0XgeqGRFxTMSRhhfzYY2WOFdR/v20Akf0l0
29Up8tnIPZYeLJ/S72hw2RgKWA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:52:57 2026 by rpki-client