
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json)
Hash identifier: QHjDIvkGma0kFRJ3bhUmy078phAcXwRKtttAHPRBTac=
Subject key identifier: 71:C7:7A:97:8E:54:30:C6:A7:26:B9:13:6B:A8:53:03:93:95:69:B2
Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Certificate serial: 0643
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
Manifest number: 0632
Signing time: Thu 16 Apr 2026 22:40:07 +0000
Manifest this update: Thu 16 Apr 2026 22:40:07 +0000
Manifest next update: Thu 23 Apr 2026 22:40:07 +0000
Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: o6VEaCbZ5WKequetwjch1vzvRUoBV8DwkA74Ut1YdZo=)
2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: IBTVSNTlY0HL9PfzWjSjfhlMPscSCqtnXeT7BZJCHtY=)
3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: eMjJNI89VuvQe2VIixwHrvRIUHpYBAcPbg9uXI8SsCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1603 (0x643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Validity
Not Before: Apr 16 22:40:07 2026 GMT
Not After : Apr 23 22:40:07 2026 GMT
Subject: CN=69e16547-53bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:d0:9c:87:5d:2f:9c:98:42:09:e3:da:56:
77:cd:0d:2f:a7:8d:71:ce:9a:15:29:5d:1d:1c:15:
e9:e4:93:db:9e:ae:d4:9c:aa:1a:4f:da:8f:3b:2e:
11:a5:4b:1f:ae:df:18:84:c7:0c:db:4c:bf:ff:cf:
09:11:47:84:c8:5d:95:3f:a6:cc:ab:3a:df:36:fc:
32:4d:d3:8e:c7:ca:93:c8:27:ee:ba:50:ff:9a:d1:
cd:cd:92:35:54:e9:f4:9c:d1:e6:a9:1e:fb:09:4a:
14:6a:1e:25:ad:1c:68:06:c0:77:17:1a:13:89:b6:
b3:05:ed:2f:96:72:3c:f8:7b:5b:dd:1a:3c:b9:ab:
bf:38:98:68:86:dc:8b:ce:bb:3f:1e:cd:14:a5:ba:
67:d5:65:1e:9f:86:bc:29:9c:37:ad:c7:01:ac:7a:
e5:50:d7:b3:bf:8f:e6:92:b0:97:ae:6b:40:d0:7e:
e9:a2:57:92:73:21:33:75:97:6e:13:d3:4b:6f:58:
a6:34:32:e5:17:37:b5:0c:fa:30:53:30:a1:cd:9b:
7a:a0:e0:0a:d3:6c:22:be:60:3e:66:62:3f:93:4d:
93:93:39:60:82:cd:8d:49:50:2b:ce:72:40:5c:d0:
0f:52:d3:83:1d:fd:c8:1e:82:d6:05:ed:c1:98:79:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:7A:97:8E:54:30:C6:A7:26:B9:13:6B:A8:53:03:93:95:69:B2
X509v3 Authority Key Identifier:
keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ac:d2:9b:11:74:9e:bc:12:8c:16:e4:a4:52:cc:6d:9d:e5:
04:07:d2:12:32:bd:63:96:ef:e7:f9:10:b9:8c:d1:ad:37:f1:
c0:2a:25:ee:5e:fd:3f:f7:60:04:44:90:80:e2:1b:b8:50:b5:
e3:12:3d:b1:57:c7:37:6e:e5:43:ae:19:c7:49:b9:47:d7:ad:
15:a4:19:f7:70:b6:b2:78:55:f4:d6:9a:bb:d0:1e:c4:c5:69:
cc:27:40:e6:96:91:16:e5:99:0c:b9:3d:18:89:1b:68:31:34:
20:35:69:53:7c:17:77:c8:2d:7f:71:38:6b:20:7a:1c:5e:40:
4c:b4:aa:78:b5:4c:d6:11:4c:27:d5:4d:8f:4d:42:86:e1:8c:
b1:b3:96:8c:53:1f:95:66:d9:a7:91:16:a2:fb:64:9c:72:33:
b4:6d:2d:b3:69:7d:34:5e:bf:ff:13:46:47:f6:2c:8f:91:d3:
54:c8:93:60:e9:21:c4:da:5d:c3:22:fe:f9:bd:af:7a:cf:97:
b4:fe:6b:e0:a4:4a:c7:c3:58:14:b5:90:ca:17:a4:44:7d:3a:
f5:94:4f:b2:7c:a8:9b:06:f8:b6:5e:7c:5a:9e:e8:b4:a2:80:
df:d0:56:cc:b6:1e:92:61:c5:c9:cd:8e:f2:7b:87:eb:d5:e9:
c7:c5:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:19 2026 by rpki-client