
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json)
Hash identifier: ivxZKiw6nh9F3lYvHnTLRYqKq22bAhAZOB54xEIEoy8=
Subject key identifier: AB:A6:E1:F1:1C:A4:0D:ED:14:E5:E1:53:02:DA:04:AF:71:AE:EB:0A
Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
Manifest number: 0107
Signing time: Fri 17 Apr 2026 05:51:51 +0000
Manifest this update: Fri 17 Apr 2026 05:51:50 +0000
Manifest next update: Fri 24 Apr 2026 05:51:50 +0000
Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: npknSZstyFkzZubc7429dlXLgLSTpZums+kq6ym6S/U=)
2: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: rgdWivD/zFCykGa3ALQEG38H7edm211EbAOpvttCktk=)
3: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: cNiuneTPpAk/1Up/27Y7yEVc2t/NxzEM4qlSWeyAw6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB
Validity
Not Before: Apr 17 05:51:50 2026 GMT
Not After : Apr 24 05:51:50 2026 GMT
Subject: CN=69e1ca76-e27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:a1:1e:61:26:ec:5d:4d:ac:3a:e6:aa:10:
48:d8:73:c0:f4:81:a5:cb:7e:75:dc:d6:a5:0b:71:
8f:2c:ea:e2:b5:d8:d7:fa:cb:d1:9c:1d:8d:1b:2a:
1f:ba:61:03:18:d1:2a:78:fe:90:b2:7f:be:73:ed:
b5:b0:eb:b8:6b:49:7c:dd:e9:2c:43:44:2d:18:dc:
c2:99:51:15:7d:9f:2c:75:83:0f:6e:73:42:38:7f:
5d:e7:6b:b5:37:ec:6b:0c:1c:38:8b:f3:32:ec:0b:
a0:50:c4:cc:38:03:e5:66:86:45:94:72:e6:3f:42:
fb:c4:cb:de:f3:55:39:37:a0:e8:a4:65:ff:74:24:
8f:3c:32:f5:c7:6a:dc:f1:36:26:58:ae:c8:d3:d9:
08:e1:93:84:7f:d0:08:b3:78:33:93:47:5e:24:4e:
74:13:67:b9:1e:86:e3:0e:59:89:57:eb:de:e9:6f:
be:a4:db:fe:11:ca:c6:41:8f:97:a0:25:29:bf:ad:
8c:cb:a1:93:e2:4f:b8:b3:da:a3:d2:d5:bf:08:33:
23:3f:64:f4:46:f7:a7:43:c7:13:33:d5:0d:65:c5:
2c:90:60:70:5c:d7:76:83:0e:9a:83:9a:43:aa:74:
b8:29:65:e6:0e:96:db:a8:33:81:ee:04:26:9d:e1:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:E1:F1:1C:A4:0D:ED:14:E5:E1:53:02:DA:04:AF:71:AE:EB:0A
X509v3 Authority Key Identifier:
keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:ba:c1:9c:b0:a1:05:15:29:75:bc:2a:9e:55:77:63:8b:
e9:1e:21:75:e9:91:8e:31:f7:c7:da:06:6e:ef:d8:75:dd:ca:
75:55:53:56:ce:f1:64:98:f8:f8:cc:af:84:52:60:41:ee:bd:
a9:d7:d6:32:7d:65:85:24:60:69:65:21:73:a0:cd:61:5f:23:
ef:10:b1:04:45:17:d4:2f:86:3d:bd:fb:2d:ba:32:77:3c:49:
3c:98:8c:cc:f7:96:b4:46:77:38:ac:d3:a0:84:6b:1c:3e:e5:
95:be:8f:af:67:81:98:86:92:1e:9b:65:2c:8a:b5:10:99:37:
05:d7:13:df:53:94:8f:3e:18:2d:f5:83:dd:94:ac:a3:4f:f4:
e0:28:07:b5:e8:cc:d0:00:13:8a:29:a1:0f:bb:59:eb:9d:77:
6a:cc:7e:71:01:23:a5:99:8b:56:01:0d:17:fb:fd:db:5e:12:
a3:10:90:5b:06:9b:f6:80:6a:ad:4a:9a:6e:1d:c8:70:57:da:
34:ac:91:bd:7c:f1:54:c1:9c:6d:1b:b6:c3:2b:34:b0:e6:df:
78:6c:37:82:d0:e6:9f:f7:51:a9:1a:35:05:2d:15:e1:a3:07:
80:4e:cc:61:b1:74:52:38:8d:ca:b5:d0:19:25:7e:56:b7:1c:
b3:42:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:08 2026 by rpki-client