
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
File: npKCbPR9rsiFyZgQKH24bmlXaOo.mft (raw, json)
Hash identifier: NqNcgDeidb6/644NYJfRmBlnZqq7P42bSxjLFd5QtA8=
Subject key identifier: 47:59:08:88:77:E4:61:4D:CA:CD:67:88:D9:CA:23:01:22:49:A8:ED
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Certificate issuer: /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial: 1630
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
Manifest number: 1605
Signing time: Fri 12 Jun 2026 16:41:11 +0000
Manifest this update: Fri 12 Jun 2026 16:41:10 +0000
Manifest next update: Fri 19 Jun 2026 16:41:10 +0000
Files and hashes: 1: npKCbPR9rsiFyZgQKH24bmlXaOo.crl (hash: ftc1TkwWVgsj/ipDE796wNUbTqgMY4Cznbdfg1JBkpg=)
2: 75417ABE781411F0BDF7A723C4F9AE02.roa (hash: CCfmB5nos7EF41BAAoxKCuLPSODNK5W/+bRi8fs1z+4=)
3: 08C486D0E47311EBB62C361EC4F9AE02.roa (hash: f9TUDRfFjJQtgC8eJzlJhB1hYGwIccQ4M22mpUldh4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5680 (0x1630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187000, serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Validity
Not Before: Jun 12 16:41:10 2026 GMT
Not After : Jun 19 16:41:10 2026 GMT
Subject: CN=6a2c36a7-67ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:a9:a9:73:d3:e0:06:74:9a:b6:42:f2:41:
89:aa:5a:d4:0c:58:ce:ce:35:3f:03:06:e6:f4:5c:
22:27:13:96:2a:94:29:7b:7f:24:c5:e6:4d:9c:42:
7f:8f:6f:d0:ae:44:c7:58:1a:c5:67:65:be:e7:13:
82:f0:82:85:31:05:db:61:25:e0:07:07:30:1c:1e:
29:64:24:26:c4:59:8b:5c:c9:20:30:de:3a:38:bc:
e8:44:36:f1:17:b1:3d:e9:bb:54:ba:be:e3:96:e2:
7a:40:46:3b:d9:6b:17:ff:8e:9c:92:ef:44:10:16:
c6:5f:70:c5:29:b7:c1:2a:8a:0a:cc:53:19:6e:f9:
c2:26:a3:79:f0:d5:76:0d:62:55:36:2a:b2:26:c5:
e9:30:d0:ad:1e:00:79:29:8d:57:1e:74:60:ce:a0:
1b:f5:57:ac:69:dc:bc:f2:f0:11:10:7d:15:1e:18:
48:fb:a4:fd:37:d1:a8:2b:e5:1c:9f:1c:34:31:d3:
a5:08:f3:73:49:f2:0e:90:17:9e:e1:be:ce:9a:a4:
41:86:a4:b3:39:6d:98:5c:64:0a:44:39:33:31:26:
0d:d1:51:c9:85:67:1f:d4:59:29:0a:c9:78:6b:02:
1d:8b:a4:a6:85:0b:12:4b:51:12:58:b0:91:9d:3c:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:59:08:88:77:E4:61:4D:CA:CD:67:88:D9:CA:23:01:22:49:A8:ED
X509v3 Authority Key Identifier:
keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:83:0f:bd:ca:3c:d9:54:58:5b:99:19:0e:75:1b:80:50:a9:
bc:ff:62:1a:61:d2:a1:8a:59:73:80:10:99:f8:ae:63:96:28:
a1:ee:01:dd:28:a1:c0:56:c2:d6:e5:c9:aa:cb:73:27:1c:5e:
6c:79:7b:17:02:61:9c:17:32:ef:b8:93:7f:38:f7:88:de:00:
3f:53:14:d7:65:d2:fc:e8:3a:f5:f4:1f:59:45:82:ab:2a:62:
ec:90:c5:d1:9d:06:70:16:fc:8d:08:45:fd:ba:95:47:49:11:
56:dc:75:58:72:be:fa:2b:a5:41:2b:29:00:96:65:40:f0:15:
86:f4:38:a2:f1:a4:bc:6e:b2:28:9d:4b:53:0e:39:b2:18:c0:
a1:1a:a4:c3:e5:f9:bf:44:02:5d:9f:44:53:ae:7f:48:24:54:
4b:ab:57:1b:45:bc:ff:27:ee:60:1f:9a:bc:d7:43:58:01:3d:
9a:28:70:9e:eb:b5:6e:c4:88:86:fe:23:98:26:e8:37:9d:6c:
f4:fc:6e:f9:24:ee:2d:4b:01:ca:02:9e:1b:49:c2:3d:91:b5:
85:bb:67:aa:3a:09:1f:5e:7e:b6:88:e4:f4:21:db:80:91:47:
a3:29:20:df:88:10:7a:8c:01:8c:95:25:ac:49:00:55:a2:68:
f4:d3:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:51 2026 by rpki-client