
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier: oKLbEmUchG60OUJmcbZGi7Xv2LLjsZcx3VWwvElvt/Q=
Subject key identifier: D4:8D:FC:26:96:C2:C8:3F:73:E2:7C:D4:11:AC:D5:25:70:8A:7B:62
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number: E1
Signing time: Wed 17 Jun 2026 06:42:39 +0000
Manifest this update: Wed 17 Jun 2026 06:42:38 +0000
Manifest next update: Wed 24 Jun 2026 06:42:38 +0000
Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: aW0E9kMFei4WcXqgohq+IcjBBq1MTgob2sJHmvJfb48=)
2: AF75682A101911F09363D44DC4F9AE02.roa (hash: zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: Jun 17 06:42:38 2026 GMT
Not After : Jun 24 06:42:38 2026 GMT
Subject: CN=6a3241df-e803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:5d:a3:e3:23:fc:11:c2:57:3f:87:0a:ec:
09:c7:1f:a2:7e:0d:0a:0d:70:5c:0a:84:d1:18:d7:
e3:9f:ef:46:43:3f:35:1c:74:5b:c9:60:2f:1a:63:
71:7f:c6:c6:20:9b:21:9b:c6:5b:69:a1:ee:f7:bb:
d7:e8:ea:f6:15:c0:4c:86:4f:5a:64:aa:bd:7e:53:
56:58:ea:0a:a3:f4:d3:a0:15:d3:bd:cf:16:12:b0:
12:c2:58:44:e2:68:17:63:15:6a:0a:97:a5:d6:7a:
bf:27:7e:e6:97:3a:50:d7:2c:e8:7e:86:2b:66:f9:
90:aa:a1:6a:06:02:ae:d9:b6:82:2a:f3:7a:25:00:
45:0e:e0:de:29:81:64:7f:96:49:fd:dd:a0:35:4c:
61:ad:03:d9:08:94:b0:cd:a8:22:9c:73:4d:ff:f8:
71:dd:e0:d9:45:cb:69:ed:7e:7d:82:b9:d3:a3:43:
d8:a9:41:54:01:c4:48:17:39:02:9f:08:66:40:01:
55:9c:b7:cb:6b:24:7a:68:f4:d9:ed:8d:13:91:46:
95:59:1a:99:e1:e4:01:be:e9:39:bf:fb:b5:ef:1c:
5d:4e:1d:f5:38:a0:6c:30:76:06:00:b2:10:ad:44:
8e:1d:1f:74:ef:62:9d:10:43:6f:9f:60:b9:81:65:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:FC:26:96:C2:C8:3F:73:E2:7C:D4:11:AC:D5:25:70:8A:7B:62
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:89:82:9c:ad:f9:04:21:d7:83:e0:83:c5:d1:ec:78:c4:b8:
5f:3c:2d:6b:0f:7f:ae:f6:cc:99:52:db:9b:95:9d:32:81:4e:
e3:56:d1:5d:e6:d9:14:24:8c:96:a8:2a:b8:44:b0:59:05:33:
8b:1d:0e:e7:cd:2a:75:67:10:a8:ad:4b:9a:88:4c:34:9a:06:
d4:2a:cb:e8:1b:fa:9b:37:3e:5d:15:f2:d0:0c:a1:54:7d:a7:
42:1c:06:4a:d3:b0:89:15:fb:a3:40:c1:51:e6:bb:9f:31:f2:
a2:39:1a:cc:bb:10:45:5c:a0:52:75:39:c7:51:5e:af:61:d4:
cc:f3:ac:7f:ab:34:6f:16:90:bd:ca:f2:81:60:c2:24:9c:c4:
9c:91:17:6b:2f:41:18:15:54:ef:d5:e5:ae:57:1b:61:48:15:
df:9e:0f:99:64:58:14:1e:f0:3d:5a:bf:5a:1d:04:fc:a8:25:
40:39:2c:67:42:2d:05:02:5b:43:6b:37:c3:93:43:d9:0c:ef:
68:21:39:ba:b1:c7:83:a7:cb:ba:5c:1d:40:75:8f:f4:6d:2e:
1d:67:ff:81:76:65:34:5f:0a:c2:21:ad:ec:41:b3:14:4f:02:
04:b7:5e:1e:46:af:5e:a5:9c:92:ff:97:d3:84:1a:05:2f:8e:
e1:c8:56:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:23:28 2026 by rpki-client