
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json)
Hash identifier: jyJp+UO9NoBJYpRW06fqcc4ddM43ZD6wP88PWhd7b8U=
Subject key identifier: 20:3F:D9:B8:37:95:96:3B:67:C8:24:43:EF:F6:CD:5F:5C:62:DE:CD
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
Manifest number: 0234
Signing time: Sun 19 Apr 2026 02:21:50 +0000
Manifest this update: Sun 19 Apr 2026 02:21:49 +0000
Manifest next update: Sun 26 Apr 2026 02:21:49 +0000
Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: kNZpCtgAJ5aUSf1RPAExZ+bjTL8ZlDBeC9phayP4sc4=)
2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: Oz1YYz2nVnKK3rUGjD/1v81WOTw67n/9ST3sUEa1Jz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Validity
Not Before: Apr 19 02:21:49 2026 GMT
Not After : Apr 26 02:21:49 2026 GMT
Subject: CN=69e43c3e-5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:f6:0a:fd:3a:cb:13:1c:d7:3a:3e:8b:49:
1b:9e:28:8d:38:c3:12:69:2f:b7:ad:c1:93:64:a1:
ff:52:04:26:52:9d:2c:67:c0:35:14:f3:5c:05:dc:
29:e4:71:86:da:7d:7d:58:f0:a2:c9:94:b4:9e:05:
d2:d9:a8:d0:86:6a:5d:e4:9f:fd:77:42:ec:d4:d3:
77:b5:65:8a:a2:c1:e0:8c:3b:74:41:2d:fe:42:b0:
42:aa:ce:b9:55:58:81:70:24:dc:41:5d:88:39:0a:
91:33:4c:61:33:65:7e:e9:9a:06:df:0e:59:af:dd:
c0:8f:cd:7e:5b:a0:22:96:f8:5e:cd:f3:96:e8:fc:
d6:a2:fb:cc:84:6b:00:20:c3:d7:9a:bc:81:d8:aa:
20:5d:1b:15:83:45:60:47:41:9c:94:96:e3:09:be:
07:2a:81:b5:36:94:6a:f6:a6:a7:7a:26:08:e7:51:
49:cf:20:3e:4b:66:ef:c8:6c:b8:34:eb:1b:a8:0b:
12:05:92:be:78:d6:ad:11:cb:cf:fa:c8:d7:68:fc:
fc:69:02:a3:c4:12:b7:14:0c:55:53:fc:8b:92:f0:
40:a0:b2:f8:3f:1d:78:d5:8b:6b:cd:c6:ec:ec:58:
90:4a:db:15:68:5a:a8:9e:0d:61:53:8d:12:0c:7f:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3F:D9:B8:37:95:96:3B:67:C8:24:43:EF:F6:CD:5F:5C:62:DE:CD
X509v3 Authority Key Identifier:
keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d5:41:f3:d4:09:49:0d:d5:2e:3a:1a:13:ed:2b:ce:2e:1d:
9b:0b:4e:c3:9d:e1:3f:6b:48:cd:38:cf:eb:a6:21:53:6e:9f:
fc:df:fd:19:c9:71:4e:a3:5e:11:79:21:20:c9:a3:a2:63:d0:
26:25:a8:79:f7:74:ee:57:cd:2d:f2:49:fa:58:60:be:a8:88:
0f:8b:f6:ee:16:a2:29:45:53:7a:26:b7:be:fd:b5:06:28:ce:
f1:90:f1:25:3c:a7:a4:f6:16:b6:a9:8f:5b:4b:19:ae:67:16:
14:85:6e:28:8b:6c:7c:42:cf:8b:fe:09:2f:fb:4e:6e:c5:f6:
0e:b0:9c:41:a9:45:bc:ea:b6:03:38:82:34:44:a3:10:7c:39:
8f:ee:3f:a9:e1:ac:4e:a1:29:73:24:14:e6:23:1d:87:85:e2:
d9:dd:1c:e4:58:97:e2:ba:68:a4:8d:ec:55:3b:58:79:53:b4:
f0:7d:e4:c0:38:2c:03:1b:06:ab:12:b2:f6:de:f8:10:e2:ba:
39:0c:87:df:a8:d6:1b:f7:09:ac:ff:cf:c1:63:99:a0:3d:88:
a8:15:93:fe:db:dd:69:22:06:0c:08:cb:2c:a0:2f:2f:6f:58:
cb:63:92:c6:39:7f:38:51:ea:c7:6b:f1:6a:cd:2d:fa:30:dc:
0f:6b:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:31:09 2026 by rpki-client