
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json)
Hash identifier: FGSTbrwfwM+A3JXD3tdeXUOg6nkoOHM4L9n+YTj8Hio=
Subject key identifier: 79:52:B3:77:C2:98:CC:E5:46:3B:A6:61:19:15:97:59:4E:8B:6E:10
Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD
Certificate serial: 08ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
Manifest number: 08DE
Signing time: Tue 28 Jul 2026 20:48:46 +0000
Manifest this update: Tue 28 Jul 2026 20:48:45 +0000
Manifest next update: Tue 04 Aug 2026 20:48:45 +0000
Files and hashes: 1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: vTipaYD4yIfF/SXTGiA/aDBTMq+e02eZJXVfGH0LJ7Q=)
2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: yy56Dhxj1ovpz3FD+DcyQb1Zocg7YLvQqlFzvMeS8+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl
rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285 (0x8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D34, serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD
Validity
Not Before: Jul 28 20:48:45 2026 GMT
Not After : Aug 4 20:48:45 2026 GMT
Subject: CN=6a6915ae-b3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:ce:28:a1:db:57:c7:f7:6d:fc:f5:c6:fa:
b5:f8:3e:7a:64:93:e5:2d:54:a0:4a:52:74:a7:4e:
21:f0:31:37:e7:d9:08:c2:8c:67:0d:b7:a8:21:39:
7e:46:08:ba:9f:e7:66:59:77:aa:45:e8:9b:0d:af:
a3:24:22:de:e2:7e:21:5f:f9:b0:31:bb:a2:67:ae:
85:c6:d9:ca:f6:2d:80:e6:68:14:a2:bd:ec:23:ae:
3c:92:32:54:97:e5:ec:06:c8:8b:85:c8:3e:7e:a8:
e8:9a:63:52:1d:95:a2:52:62:7e:87:6c:8b:07:53:
26:64:ea:48:99:9d:be:8b:9f:ea:cb:7b:1d:0b:34:
72:79:ec:da:00:9b:68:d3:90:6f:09:12:de:85:a4:
f4:64:28:74:8a:f5:fc:65:d2:06:89:99:e0:9f:cb:
a1:8d:24:f8:f1:2d:9f:d2:8d:f9:22:b1:b4:7d:ad:
73:ed:88:74:bb:a1:60:b2:61:79:2f:cc:e6:88:3b:
f7:66:c5:45:d2:7c:2e:b4:4a:cf:ba:dc:5a:52:fc:
a2:59:4b:e5:e1:16:df:54:ce:91:60:f1:32:b1:53:
14:5e:37:be:2a:17:b0:81:2d:f8:4c:fb:bf:6a:3b:
86:9f:b8:37:37:05:40:d8:64:cf:c1:45:76:4a:0d:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:52:B3:77:C2:98:CC:E5:46:3B:A6:61:19:15:97:59:4E:8B:6E:10
X509v3 Authority Key Identifier:
keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:86:10:d7:69:70:63:1a:da:25:10:d2:24:bc:57:67:bc:ea:
94:b5:bf:65:ca:99:cb:8f:81:5f:dd:e5:2b:ee:19:ac:65:82:
0d:c8:cc:e1:dd:3f:e4:9f:d5:ca:e2:e9:df:a7:47:4e:22:0b:
62:9b:3b:9b:cf:a7:67:1c:cd:a6:9e:81:85:fa:f8:bf:0e:a7:
ce:82:7b:5d:bd:01:43:00:52:ca:6f:b0:c5:c4:17:f4:ff:f8:
ee:6c:4f:61:d3:41:9d:75:c6:31:e2:13:a4:3e:d3:0a:64:5a:
06:61:40:aa:12:58:44:50:75:46:be:15:2f:b9:3d:a1:f2:39:
56:82:1f:3f:ea:8c:2b:e8:ae:73:4c:59:38:a5:1a:c4:9b:54:
5c:bd:f2:66:1c:7b:2f:31:b0:33:7b:b0:bc:3a:8d:1a:7d:a7:
08:8e:d5:21:c0:5b:59:12:44:82:78:3d:14:41:0d:8e:db:b8:
60:5b:0d:fd:81:34:06:3d:1b:2e:e5:69:e1:34:bd:56:0f:43:
a8:95:11:ff:62:0f:c1:f8:ff:bb:fa:81:8b:cd:48:8f:6c:2e:
bc:f6:a5:fc:05:b8:e5:50:a8:24:cb:2e:8f:f8:a1:78:4f:6a:
54:09:27:b2:f9:11:f2:08:b4:71:52:43:06:0a:e0:ed:3f:b8:
5a:c3:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:18:04 2026 by rpki-client