
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json)
Hash identifier: 2YvOiBieIdPFxQeGvMtjGlr/PGQSVipc9n7vUYv/skk=
Subject key identifier: 61:72:63:7E:F7:C6:74:23:DA:74:5A:EA:66:69:7B:0B:B9:A7:1E:75
Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD
Certificate serial: 08D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
Manifest number: 08C7
Signing time: Fri 12 Jun 2026 20:30:49 +0000
Manifest this update: Fri 12 Jun 2026 20:30:48 +0000
Manifest next update: Fri 19 Jun 2026 20:30:48 +0000
Files and hashes: 1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: pjVsZWWRmMjK6f7kOUBysr3lXRhHeOKNCtCrLyEHTMo=)
2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: yy56Dhxj1ovpz3FD+DcyQb1Zocg7YLvQqlFzvMeS8+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl
rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D34, serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD
Validity
Not Before: Jun 12 20:30:48 2026 GMT
Not After : Jun 19 20:30:48 2026 GMT
Subject: CN=6a2c6c79-8d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:56:d7:79:89:07:28:32:f8:e9:07:06:1f:
f0:cd:fd:ed:01:0f:1d:99:33:14:48:a4:fc:e1:20:
94:27:e1:ab:04:74:70:c7:d7:5e:bb:f6:40:d1:71:
39:34:06:e6:c7:ca:41:6c:ea:b6:30:0b:b7:c6:76:
b9:b6:d3:8f:f5:08:37:09:f4:0c:52:3c:e4:74:f8:
9e:0e:06:c2:24:47:c9:97:b6:30:0f:10:25:cf:cc:
5b:fb:c1:30:b1:67:be:d4:b7:b8:d7:08:35:69:51:
30:30:27:e1:39:18:de:20:01:f2:af:28:ef:57:66:
ea:e6:09:6e:59:2e:e6:82:8a:6a:25:37:83:c2:a9:
01:97:5b:e8:e9:c0:0f:69:c7:b2:55:66:48:d7:e1:
13:cc:12:7f:44:53:e2:a0:3e:04:23:49:78:c3:2a:
fa:54:c6:bc:67:c7:d8:28:4e:dd:fc:f4:ee:85:0e:
be:6e:fd:10:6c:b3:8e:3a:41:99:9c:c1:b7:50:f9:
a2:1a:7d:1a:f0:ad:01:35:14:35:c0:a7:b5:7e:d8:
46:10:59:e0:f1:89:d8:4a:7f:71:d1:d5:62:24:e9:
8a:da:86:7a:77:80:e2:4a:03:91:a8:bf:0e:cd:5c:
a5:cc:e0:ae:d3:67:7f:cc:21:f7:46:01:b9:f1:c3:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:72:63:7E:F7:C6:74:23:DA:74:5A:EA:66:69:7B:0B:B9:A7:1E:75
X509v3 Authority Key Identifier:
keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:90:d0:61:16:75:9e:42:d9:b8:2f:0d:54:b5:f2:10:7e:e0:
76:7a:db:8f:7f:50:a7:c0:f9:b1:ca:30:f4:f5:fa:04:48:a5:
40:06:01:28:92:95:eb:31:9e:4d:f0:3d:cf:d0:ed:61:7c:48:
84:dc:82:2e:9b:fd:bf:81:25:f3:9a:b9:70:4d:ff:f7:69:69:
ed:57:a9:f0:3e:a8:84:ea:49:23:7f:f0:54:23:20:e3:6e:0a:
d1:01:22:9c:60:57:01:40:03:d4:d2:d5:f3:08:48:db:fc:c2:
b7:1e:ed:ee:22:c4:9d:5e:8d:7a:27:d0:eb:4f:44:2d:a7:03:
8b:4b:e3:a8:e7:6d:fc:39:46:62:2e:af:97:c1:9f:83:1a:d8:
ef:7e:f3:f1:41:d3:1c:f8:93:93:60:e8:37:a2:20:e9:e3:96:
13:55:a0:a0:0b:13:d7:34:d3:29:2e:89:a1:87:33:ac:32:4f:
f0:e8:9f:37:ea:7a:8c:1e:eb:68:9e:52:df:5b:a0:12:23:2c:
f8:3f:ae:b2:a3:c8:6e:11:59:1b:b5:98:a5:17:0b:c5:b4:8b:
c4:7c:c4:86:3e:85:fa:c3:6e:e2:60:dc:e7:bb:28:ba:44:e7:
ad:7b:29:f2:5f:ff:46:c3:ae:ef:66:5e:15:e5:ee:d9:4f:59:
1e:01:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:15:27 2026 by rpki-client