
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json)
Hash identifier: GbdU46I+8sbr55F6uxYCB+WHUq3Ua20quSf/OvGnj5M=
Subject key identifier: E7:6C:BE:85:4E:9B:10:B1:A4:B9:82:7E:0D:80:18:55:38:4C:1B:AE
Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Certificate serial: 03DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
Manifest number: 03D6
Signing time: Fri 17 Apr 2026 00:27:43 +0000
Manifest this update: Fri 17 Apr 2026 00:27:43 +0000
Manifest next update: Fri 24 Apr 2026 00:27:43 +0000
Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: Q7CUzJjlVwajNELwbSW86LAOd4YEx8gOqWg1DgltIYw=)
2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: cWZ5GSiO7fyMHvHfVtg9avvdisY3XQZ/JYleCE5yM3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989 (0x3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Validity
Not Before: Apr 17 00:27:43 2026 GMT
Not After : Apr 24 00:27:43 2026 GMT
Subject: CN=69e17e7f-6944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:e9:2c:8d:21:17:9c:c4:1b:1d:b0:84:e9:
a9:03:fa:ec:2d:e5:4b:52:c8:f6:8b:12:f1:de:fa:
29:49:42:18:3a:11:b2:21:94:0b:a6:27:56:50:42:
e2:b0:a8:21:7d:ee:27:f2:bf:25:19:49:4d:25:a1:
8e:8b:02:0f:27:95:98:e8:e6:f0:41:18:bc:a3:89:
8f:45:a3:79:8a:c1:f1:45:d1:6b:34:48:32:f2:0c:
2e:0d:ee:80:3c:25:78:3e:07:7d:e7:d3:dd:df:49:
b3:a8:83:af:25:5c:ad:18:52:b0:b3:83:82:0c:b3:
c0:ae:04:f8:65:e7:cc:bc:59:6c:4d:f7:b7:c0:09:
3c:19:b1:f8:61:aa:5b:7a:37:f2:d9:ce:55:0e:e7:
77:7f:71:7c:f8:f5:bc:af:8f:8f:47:cc:50:ab:cf:
bb:1b:65:41:42:8f:c6:dc:9a:d1:bf:3a:df:bb:16:
3c:72:49:a4:55:a3:67:37:56:d9:a4:fa:4c:f2:82:
2e:9d:c5:96:70:7a:73:8a:78:9e:ae:74:c4:3e:ac:
66:93:e0:91:9c:5a:e2:e7:9a:76:25:10:30:f9:01:
2c:4c:19:ba:36:a2:25:09:cd:cd:7c:55:a4:40:b4:
cb:42:d1:13:2a:07:a9:f3:c0:46:16:6c:e6:39:fa:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6C:BE:85:4E:9B:10:B1:A4:B9:82:7E:0D:80:18:55:38:4C:1B:AE
X509v3 Authority Key Identifier:
keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:60:df:45:ca:a1:1e:e3:91:aa:41:12:dc:60:6e:9b:01:a7:
61:15:13:e5:c7:e2:ec:d1:fe:f1:44:3f:93:25:be:db:0c:a9:
8e:d4:d8:16:f9:04:35:3d:7e:39:4c:9f:0b:5d:b6:aa:1d:66:
b6:1a:65:56:84:d4:43:43:f5:0d:51:6a:10:67:1d:e5:ec:17:
6c:4b:7e:d9:28:92:d6:e2:d4:d1:31:51:39:d3:7c:c8:42:5c:
cd:61:bc:b2:7b:eb:07:cc:be:ba:75:0f:c2:16:f3:4a:be:7e:
8b:d3:f0:5c:9e:f2:00:a4:53:89:4e:83:bf:89:13:c1:65:21:
40:6c:43:d9:df:6e:eb:6e:6a:0f:d7:a8:e9:a7:02:d9:96:af:
f2:32:ce:f9:83:2c:70:99:f0:1c:4d:01:6a:1c:da:7f:6a:1f:
52:84:65:be:9d:1b:59:47:8e:c5:61:d7:31:bd:b9:07:17:73:
3f:f5:93:29:2a:6a:c7:0e:ed:81:01:2e:7e:23:dd:b4:91:ce:
a9:50:22:22:3f:21:09:87:e6:ca:4c:0b:d3:89:64:4f:04:ef:
1d:aa:54:28:54:0f:b9:ee:08:6d:54:21:70:12:a1:ce:ac:3d:
60:4b:44:7b:a2:77:90:83:7a:87:f7:bb:19:a8:a5:55:1b:e0:
96:69:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:57:12 2026 by rpki-client