
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json)
Hash identifier: 1k51hiIISrxq6N9aP2+6ir/5jfSC+GiK9FVnIEtYyuw=
Subject key identifier: F8:40:39:43:B8:95:EA:C4:9D:C0:B7:07:BB:B3:BB:27:07:DC:2D:C4
Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
Manifest number: C2
Signing time: Wed 15 Apr 2026 06:30:04 +0000
Manifest this update: Wed 15 Apr 2026 06:30:03 +0000
Manifest next update: Wed 22 Apr 2026 06:30:03 +0000
Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: UYEfQzLum9KuUQwDDLkRC7mhHs9rlRcu0kAL2B7ChM4=)
2: AF75682A101911F09363D44DC4F9AE02.roa (hash: zinCGW8B10ELBoVTK9ivj+xoznmYoRevOOweMKPNJts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
Validity
Not Before: Apr 15 06:30:03 2026 GMT
Not After : Apr 22 06:30:03 2026 GMT
Subject: CN=69df306c-1780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:51:82:fb:2c:c5:2f:48:17:aa:53:d1:71:
0a:dd:dc:c7:12:a1:c9:b4:12:26:1d:16:fe:95:24:
27:8c:47:7a:f2:ea:51:d4:b3:7e:f5:2f:4f:e4:25:
48:e3:b3:5d:c9:b1:e4:40:1e:7c:1c:7b:94:7d:a2:
74:42:c6:8d:f7:a0:23:b6:78:30:3c:bb:0e:ae:e6:
49:42:ee:59:27:ac:61:d4:6e:85:95:5e:f4:22:99:
1d:27:e8:d0:5e:ff:ed:03:dc:8d:1e:a7:ba:ab:66:
aa:5a:f2:ff:cf:cb:8f:a6:19:8e:db:db:79:b3:3f:
13:91:a5:b4:18:20:32:89:79:bf:3d:4c:d6:d2:d0:
d9:a1:8a:cd:ad:b2:fe:d7:fc:c6:e5:cd:3e:0e:68:
ac:8f:30:8a:fe:a8:8f:3a:fb:e5:75:8e:62:b7:21:
d9:c6:b3:aa:d0:76:a4:11:7d:66:ae:3f:d8:eb:a5:
32:19:84:2f:8e:8b:47:50:e2:c8:79:51:57:98:25:
38:b2:49:e5:3b:66:46:3f:cf:df:42:45:b6:de:2d:
84:95:77:10:58:bc:4b:18:d0:54:1e:9a:ee:5b:23:
32:15:fd:a4:ca:d2:a5:af:46:1a:1d:c8:1d:8e:ca:
1f:12:5a:80:72:f7:8f:85:25:8e:6d:98:d0:52:dc:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:40:39:43:B8:95:EA:C4:9D:C0:B7:07:BB:B3:BB:27:07:DC:2D:C4
X509v3 Authority Key Identifier:
keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a7:50:d5:f9:0b:b8:41:a9:25:6d:21:62:98:5b:cd:2c:ee:
b9:d3:b8:d2:a1:d5:6f:03:47:69:f3:4b:80:ac:9f:09:f9:a8:
de:07:d5:71:ef:0a:b1:37:61:ca:c2:ca:ea:0d:eb:f0:c1:34:
9c:4c:c3:0a:ee:a1:92:e1:b6:99:f9:d7:58:e0:93:0a:16:d2:
b5:eb:54:4d:d0:c2:89:46:7c:a2:b8:cc:bf:dc:af:9d:2f:a9:
73:23:e8:85:31:c9:41:07:1a:53:1d:91:be:29:bb:2a:71:0a:
5e:24:95:76:96:79:5f:c9:35:5f:67:f2:89:96:6a:bd:cd:3b:
44:ae:00:fb:d8:e0:1b:19:a9:9c:de:b1:f5:46:d5:50:41:7d:
64:a6:b0:03:37:21:ad:ea:6d:13:66:13:f9:b8:62:d7:5f:99:
e5:60:b1:2d:90:b7:c0:a8:24:64:c9:df:ee:a6:05:2c:55:7d:
99:63:f4:a8:46:4a:e3:8f:33:b3:9b:81:ce:e3:fc:1c:76:bb:
b4:9d:21:25:52:0f:8c:db:e9:ad:8a:73:67:75:d8:44:70:e4:
9d:43:e8:3c:7f:43:cf:f2:d7:f7:ee:cb:91:df:bb:87:15:0b:
91:e3:a2:7b:93:cc:1d:9f:15:3f:a3:8e:39:ad:52:38:d1:20:
22:da:29:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:16:39 2026 by rpki-client