
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json)
Hash identifier: 9sfB/+rYuBznjmi1ohFJb7ZuX4/w6A2ZKDCsr33g4zw=
Subject key identifier: 9B:97:FB:F4:1E:7B:43:AC:6C:0D:0C:89:36:2C:DA:C4:07:30:BD:68
Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Certificate serial: 0676
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
Manifest number: 0665
Signing time: Sun 26 Jul 2026 23:26:25 +0000
Manifest this update: Sun 26 Jul 2026 23:26:24 +0000
Manifest next update: Sun 02 Aug 2026 23:26:24 +0000
Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: q6e+607irpZFv48IXIB3xB2o95KTEE2XrRBdMUD9XOI=)
2: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: eMjJNI89VuvQe2VIixwHrvRIUHpYBAcPbg9uXI8SsCc=)
3: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: IBTVSNTlY0HL9PfzWjSjfhlMPscSCqtnXeT7BZJCHtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Validity
Not Before: Jul 26 23:26:24 2026 GMT
Not After : Aug 2 23:26:24 2026 GMT
Subject: CN=6a6697a1-9f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:80:9f:9f:d4:b8:30:db:43:b9:33:cb:32:
b0:73:08:63:ca:4c:90:d6:d7:d2:c9:ab:b4:97:02:
15:df:bc:88:bb:38:e7:95:ad:de:7c:3a:ea:70:e8:
4b:d2:4e:16:ff:5d:f5:a4:fb:1e:49:d7:7b:fe:4b:
d7:b0:6c:d0:52:d0:dc:bd:fa:cd:5b:19:d2:2b:6c:
b0:0c:11:43:8c:cd:86:63:30:1b:f3:50:9e:c2:72:
6c:eb:90:39:bf:82:62:61:47:3a:de:03:b6:9f:09:
7f:d8:6b:84:69:f5:1e:86:d4:d3:43:66:f6:46:c0:
69:6c:04:6e:b0:83:c2:35:cd:21:ce:fa:e1:47:27:
a1:93:f2:6c:39:64:61:95:52:0f:19:bf:00:69:e4:
74:9b:2d:4a:59:17:a4:27:e5:f0:92:1d:c8:1d:8f:
c3:23:4d:83:24:0b:bf:10:a8:67:88:1b:d8:49:df:
c1:74:96:b6:cf:96:ab:55:5c:35:3e:52:bc:63:73:
86:f6:00:db:1d:a9:d5:79:4f:88:46:57:eb:1b:5d:
87:d5:a2:e0:35:2f:1a:de:2f:5f:7f:ac:5b:d0:d7:
9a:88:2d:74:53:02:58:bc:3d:fc:7a:f2:90:86:39:
17:42:92:ea:e7:3a:75:56:c6:a4:aa:96:94:0f:62:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:97:FB:F4:1E:7B:43:AC:6C:0D:0C:89:36:2C:DA:C4:07:30:BD:68
X509v3 Authority Key Identifier:
keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ba:21:00:33:c7:83:ce:5d:49:d5:dd:71:66:e9:e5:50:fc:
98:a9:82:b9:d7:98:50:5a:c5:f8:b6:de:40:5d:01:49:b1:97:
ef:fe:2f:80:59:df:66:c8:4d:a1:c4:fd:cb:df:d9:85:63:4e:
89:cd:92:5d:6c:34:8d:a8:b4:da:83:be:93:b3:e0:fb:55:c3:
43:f5:21:12:57:97:33:c8:b8:36:17:e0:7f:18:00:5c:21:cd:
37:c2:b3:ca:36:c1:c8:82:68:39:13:65:52:46:16:76:37:9e:
2b:6b:01:01:8c:65:3f:ae:d8:79:85:c2:f3:d9:5c:92:38:a0:
c7:5b:02:bd:53:25:e5:3d:07:63:51:30:ee:a5:b5:83:53:b1:
66:ee:05:18:b7:13:41:e9:63:01:67:ab:b4:d0:3e:10:bf:a7:
4f:a5:2c:8a:d2:a2:af:71:99:73:67:ec:28:31:75:0a:c9:1e:
da:f1:75:af:91:95:cf:15:84:85:77:fc:43:3e:8e:7f:81:14:
b6:b2:8a:91:ef:37:1a:a7:91:c9:f7:69:6d:6f:f7:32:6c:c9:
ae:2f:ea:ce:d0:fd:a6:c6:8c:b2:96:30:9c:19:c8:de:4d:77:
f1:92:3e:d7:33:88:bf:b9:d0:4a:7f:c3:46:c7:b3:31:56:2a:
cd:4b:4e:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE
RjZBODUyMDYwHhcNMjYwNzI2MjMyNjI0WhcNMjYwODAyMjMyNjI0WjAYMRYwFAYD
VQQDEw02YTY2OTdhMS05ZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsR6An5/UuDDbQ7kzyzKwcwhjykyQ1tfSyau0lwIV37yIuzjnla3efDrqcOhL
0k4W/131pPseSdd7/kvXsGzQUtDcvfrNWxnSK2ywDBFDjM2GYzAb81CewnJs65A5
v4JiYUc63gO2nwl/2GuEafUehtTTQ2b2RsBpbARusIPCNc0hzvrhRyehk/JsOWRh
lVIPGb8AaeR0my1KWRekJ+Xwkh3IHY/DI02DJAu/EKhniBvYSd/BdJa2z5arVVw1
PlK8Y3OG9gDbHanVeU+IRlfrG12H1aLgNS8a3i9ff6xb0NeaiC10UwJYvD38evKQ
hjkXQpLq5zp1VsakqpaUD2IeXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJuX+/Qe
e0OsbA0MiTYs2sQHML1oMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4
OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw
NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwLohADPHg85dSdXdcWbp5VD8mKmCudeYUFrF+LbeQF0BSbGX7/4vgFnfZshN
ocT9y9/ZhWNOic2SXWw0jai02oO+k7Pg+1XDQ/UhEleXM8i4NhfgfxgAXCHNN8Kz
yjbByIJoORNlUkYWdjeeK2sBAYxlP67YeYXC89lckjigx1sCvVMl5T0HY1Ew7qW1
g1OxZu4FGLcTQeljAWertNA+EL+nT6UsitKir3GZc2fsKDF1Cske2vF1r5GVzxWE
hXf8Qz6Of4EUtrKKke83GqeRyfdpbW/3MmzJri/qztD9psaMspYwnBnI3k138ZI+
1zOIv7nQSn/DRsezMVYqzUtOTw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:41 2026 by rpki-client