
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json)
Hash identifier: 3h2GnSsN/iS7PtT4vrVuhSET46SUm42OgjA4n4BKYUU=
Subject key identifier: 46:13:A8:11:18:BB:C7:00:BB:87:D3:67:83:B1:1B:B5:F7:60:C0:C7
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial: 028C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
Manifest number: 0284
Signing time: Mon 21 Sep 2026 01:55:00 +0000
Manifest this update: Mon 21 Sep 2026 01:55:00 +0000
Manifest next update: Mon 28 Sep 2026 01:55:00 +0000
Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: 0WBHUVSJ6fCFf2dqDcz1T/uYY17fTkRSiY8k0CjfYvc=)
2: B188CE748E7011F08CF3B91AC4F9AE02.roa (hash: JhTmh8+spCzAKkyjoFK2bfRg9TC7jy1oAEEezsAdacA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Validity
Not Before: Sep 21 01:55:00 2026 GMT
Not After : Sep 28 01:55:00 2026 GMT
Subject: CN=6ab08e74-13ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:3c:e5:90:74:52:26:a1:e7:09:ae:c2:d7:
83:2d:df:d1:70:aa:6a:29:dc:c2:1f:9b:d7:d8:f8:
91:30:2e:aa:70:30:db:78:8b:14:ff:3d:50:04:1a:
c5:c1:03:02:e2:41:a9:fc:7c:36:9a:47:53:93:e4:
5b:2c:0f:f0:21:cc:82:ca:fb:2d:e5:5d:ff:be:25:
9e:16:1b:3a:02:b2:dc:66:12:e6:05:cf:6c:db:b9:
fc:aa:91:89:5d:8f:1b:30:cd:20:d1:e1:ed:50:74:
ba:34:ac:fd:44:ce:bf:e5:a4:50:dc:f7:70:54:c4:
60:0a:0a:88:6b:f7:83:58:01:26:17:df:68:88:a4:
ee:d8:3d:2a:ca:58:e3:e5:a7:26:1b:1d:d6:6e:03:
ce:51:9a:ff:2f:d4:77:d9:ef:f1:da:24:48:3f:47:
c7:ae:02:97:22:55:b5:c0:21:b4:16:00:81:18:1c:
62:4b:69:81:6e:1a:7a:24:c5:aa:09:9c:d5:ee:64:
41:84:a0:5e:8b:ad:96:ce:cc:67:73:d5:61:fe:8d:
8b:81:cf:2e:2f:22:11:aa:59:13:2d:1b:22:bf:59:
38:af:cb:25:fe:33:ae:11:e3:a3:7a:9e:03:a5:7d:
25:64:8e:09:5b:62:14:3f:2e:c7:49:b5:c3:15:e5:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:13:A8:11:18:BB:C7:00:BB:87:D3:67:83:B1:1B:B5:F7:60:C0:C7
X509v3 Authority Key Identifier:
keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:15:4e:32:08:ea:50:ff:12:38:bc:5a:7a:45:6a:ec:01:97:
28:52:36:14:4a:c4:40:db:b7:2a:0c:8c:73:44:d3:69:f6:a5:
65:ce:22:d7:fc:d5:99:4c:ac:ec:0f:98:d0:11:30:ab:9b:61:
eb:bc:95:56:9f:79:86:b4:7a:25:1f:4b:28:c8:22:29:b5:f6:
c8:c3:5f:25:4e:75:a4:a7:66:92:f7:d2:cb:48:06:45:ca:5c:
eb:f0:77:91:cb:90:d0:c6:46:7d:76:c3:9b:32:6c:f3:15:3f:
f4:d4:46:cb:ce:40:95:72:89:7c:d5:d6:13:29:97:4f:c5:39:
44:fd:c2:9a:d9:16:8d:8b:34:f6:3b:19:92:57:a7:4c:88:a3:
3e:61:9a:b6:4b:28:4c:7f:1b:79:4b:46:37:12:ae:ad:5f:93:
66:31:1e:61:31:ae:68:2b:09:84:db:0b:62:d9:8e:5b:1c:ab:
cc:58:c4:26:aa:d2:32:7e:83:4e:a1:68:61:78:68:2c:d6:a6:
78:0a:bc:77:d6:c4:69:8f:a7:d2:67:e8:dd:62:c9:c2:24:32:
17:6d:d5:7c:98:75:94:f7:88:85:e4:d6:ff:df:cc:8d:37:2f:
00:28:d7:9d:b3:03:e4:1f:67:21:2c:70:4b:0b:ef:6c:6e:ea:
df:8f:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:10:40 2026 by rpki-client