
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
File: nsFL4ukyPgKo_DpiFJocquNnLbM.mft (raw, json)
Hash identifier: 2i008Bl+Xwr0/aYyRTj6GFw4Y3rKwb5v8wVrngWVuik=
Subject key identifier: 1A:FB:57:BE:02:04:B4:DE:4F:60:92:C5:42:4C:E4:ED:55:8C:79:A6
Authority key identifier: 9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3
Certificate issuer: /CN=A9175AEA/serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
Manifest number: 0F
Signing time: Wed 15 Apr 2026 08:41:33 +0000
Manifest this update: Wed 15 Apr 2026 08:41:33 +0000
Manifest next update: Wed 22 Apr 2026 08:41:33 +0000
Files and hashes: 1: nsFL4ukyPgKo_DpiFJocquNnLbM.crl (hash: FlQ9WzpqoFZbCEx0K2GFobkBIxdRYtC9SrWKXe07i/g=)
2: 439B1DD4265C11F1BAFB3333A5833773.roa (hash: yu5d60NAc4cXPUzUBIczj0n+5EToYt0HRr1PhV7q4lQ=)
3: B62F5378265811F1B0D864DEA4833773.roa (hash: d4qXqs0vf21uAmTHlb0izdYCuuZAXvGPzrYKUZpwbxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl
rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175AEA, serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3
Validity
Not Before: Apr 15 08:41:33 2026 GMT
Not After : Apr 22 08:41:33 2026 GMT
Subject: CN=69df4f3d-63df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:20:6e:2f:08:4f:4e:5d:58:0a:38:f1:ef:
98:80:4b:35:be:fc:6d:82:8b:cf:9e:11:99:07:8d:
59:00:41:5f:4b:3f:62:86:62:c1:42:f8:ec:d8:a2:
8e:01:5d:96:d2:19:19:87:71:ef:16:f8:7c:c0:6a:
11:06:5c:7f:8d:0a:30:64:3c:65:2b:29:a0:8a:b6:
c5:bb:0f:7b:fc:c9:d9:07:27:20:61:2c:c8:50:e3:
57:d9:7f:35:cd:9a:18:c4:20:d1:f1:ff:a6:28:f0:
9e:12:b8:5f:a1:39:83:a7:b9:ac:67:b2:ca:58:99:
85:25:4b:5d:f1:fe:ef:70:d7:41:b2:18:49:b6:5e:
39:2f:b1:8f:10:44:f9:c1:97:63:77:2e:ab:b7:af:
ff:5e:85:88:69:3f:e5:db:55:34:ab:a3:bd:b6:a8:
00:66:1c:7d:5b:3d:a6:95:92:bd:af:61:5f:a1:2f:
56:18:30:6a:22:5f:ee:6e:7f:0e:98:8a:f9:7f:6b:
7e:ae:62:0e:f4:dd:75:2d:df:40:0c:72:fb:d8:36:
fc:56:b7:94:96:35:b1:ab:95:d9:75:b2:eb:87:17:
66:8f:f0:13:e2:60:d8:66:4c:03:39:fd:f9:dd:cc:
b4:7d:75:51:bf:dd:b4:60:9a:ff:3a:ed:06:62:4b:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FB:57:BE:02:04:B4:DE:4F:60:92:C5:42:4C:E4:ED:55:8C:79:A6
X509v3 Authority Key Identifier:
keyid:9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b7:d2:cd:69:8a:44:ec:ad:ef:8d:17:ea:18:2d:1d:93:e8:
e1:bf:2f:11:8d:14:f3:64:40:9f:f3:6e:0f:b9:cd:e3:94:d6:
36:ea:74:99:a4:09:3e:8f:60:ea:00:ae:ae:14:2d:e5:c4:59:
88:15:2d:d6:1f:1c:b8:2c:74:d7:7e:15:1d:a5:ac:ae:37:de:
53:1d:d2:91:c5:b5:04:d5:a5:4a:3c:56:33:ea:63:41:42:e0:
75:5e:eb:e0:13:47:59:d6:9e:d9:c7:fe:34:76:d3:c6:f9:06:
c1:32:64:88:04:24:c6:db:5b:7d:60:ca:55:7a:c5:98:90:0d:
78:ff:64:82:d6:9e:a5:24:18:1d:8d:f0:31:4d:f8:4f:35:6b:
31:06:58:b9:e6:78:bd:ad:d7:47:3f:99:e5:b2:5e:1d:e5:8e:
01:81:e1:16:d3:00:ef:c7:fd:b5:63:00:ad:17:2d:c5:9b:57:
65:37:7c:c5:e0:ca:78:b1:29:c7:eb:72:5e:34:fd:90:34:36:
77:33:30:5d:2a:4d:d6:20:0f:06:94:65:e4:7d:62:f3:5e:d9:
ac:99:eb:80:a4:50:1c:f8:ee:d7:1d:21:d4:ad:36:90:b6:ab:
06:a8:b0:c1:46:0a:87:59:c9:02:91:d2:dd:5a:bb:d2:6b:20:
36:68:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:13 2026 by rpki-client