
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json)
Hash identifier: 93oOsLLUIp4rODTG+5+IBrgksmADWDR3gluDW9n5QDA=
Subject key identifier: A2:24:AD:50:D6:15:95:6B:5B:20:8E:84:67:67:AA:C1:05:9E:2A:FA
Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Certificate serial: 03FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
Manifest number: 03F3
Signing time: Sat 13 Jun 2026 00:29:34 +0000
Manifest this update: Sat 13 Jun 2026 00:29:34 +0000
Manifest next update: Sat 20 Jun 2026 00:29:34 +0000
Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: mJADGzN6hWahNnasv1U3kGeP7LkadezDLfw57+eGcn4=)
2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: cWZ5GSiO7fyMHvHfVtg9avvdisY3XQZ/JYleCE5yM3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1018 (0x3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Validity
Not Before: Jun 13 00:29:34 2026 GMT
Not After : Jun 20 00:29:34 2026 GMT
Subject: CN=6a2ca46e-a4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:70:86:54:28:5b:a1:f3:79:bb:3c:97:fc:
3f:fb:bf:af:e9:b7:03:f7:18:74:a4:6b:bb:03:0c:
cb:8e:df:9b:da:c9:3b:e8:79:96:f8:f1:27:0a:6f:
5c:84:fc:8e:0f:83:c1:dc:f4:2b:1f:e8:65:b1:77:
d2:51:83:01:e4:42:e4:bc:d8:90:f4:60:ce:4b:93:
20:b7:40:d6:a9:83:b8:d6:85:db:40:c9:05:40:9c:
63:a2:ed:d1:99:bd:62:16:52:03:0d:d9:9b:43:39:
f3:01:e3:b7:81:94:dc:49:51:ae:cb:ee:2e:4f:d3:
ea:d6:3d:32:7a:d2:97:c4:d8:69:c1:56:5c:ed:c9:
7f:c9:ea:98:43:c2:9e:08:bf:bb:c1:69:d8:46:76:
8d:09:1a:5d:3e:fa:73:4d:72:77:b5:4e:45:5f:1c:
1b:97:8d:c5:58:9d:f7:90:e8:a0:94:00:10:54:1a:
34:6b:d6:39:d6:33:06:5d:1c:f2:8e:6a:87:9e:ea:
fd:f7:de:d9:0e:f5:b7:c8:e7:96:50:6a:e8:8d:a7:
24:96:f9:ac:20:19:1c:7c:fa:02:a0:1a:38:c4:1f:
13:cc:29:ba:2b:77:06:ed:7d:86:2a:fe:ce:7d:0e:
f1:12:5c:06:ad:97:45:5a:c1:9d:a4:9d:70:1d:46:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:24:AD:50:D6:15:95:6B:5B:20:8E:84:67:67:AA:C1:05:9E:2A:FA
X509v3 Authority Key Identifier:
keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:87:10:4c:27:d4:32:33:5b:0f:1b:bf:20:0f:ce:54:ff:07:
86:72:33:52:b9:fb:70:95:8c:06:ed:6d:c0:20:3e:0b:9e:79:
b8:61:9d:74:40:61:51:51:d3:33:80:07:9c:e0:1f:69:1c:3e:
91:0a:96:d2:9d:88:80:21:bf:03:4c:c2:59:90:de:6d:70:2b:
c6:28:25:7c:b6:22:70:f8:38:78:81:21:eb:42:7b:25:cc:c8:
50:55:2c:c2:85:ed:0c:16:88:22:2f:ae:7f:ab:71:c1:91:44:
dd:f4:e4:8c:61:46:6e:ca:62:74:ff:aa:9b:46:6a:de:09:02:
bb:19:6b:e6:b0:36:15:5f:29:ff:fc:10:e8:77:03:fc:f2:bc:
bd:fa:87:a8:85:ee:5c:db:dd:37:37:95:64:71:8a:55:54:07:
39:f7:35:a0:5f:88:98:ab:fe:1b:40:86:c2:ea:ad:06:e3:c1:
74:4a:1a:05:4b:b2:ee:f2:2f:ba:97:85:61:49:b0:0a:6b:2b:
1f:fd:8a:73:d9:f4:28:37:88:3f:fa:76:7f:bb:c6:36:70:4c:
7b:08:20:ac:c2:ec:37:34:d5:c8:0a:80:e3:6d:e4:ea:70:bc:
4c:a9:85:24:3e:aa:08:6c:fc:f2:cd:96:a5:1c:0a:55:d8:ba:
b0:7d:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:57 2026 by rpki-client