
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json)
Hash identifier: rRHD2VUjsSPYs0eKS3UBJeAi+6hyaVQcQ12IfvqR8W4=
Subject key identifier: 0F:2F:9D:3B:D5:5B:D9:85:73:45:46:5E:0B:8C:01:B9:EE:68:F0:46
Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Certificate serial: 19C0
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
Manifest number: 4BC0
Signing time: Sun 01 Mar 2026 23:10:19 +0000
Manifest this update: Sun 01 Mar 2026 23:10:18 +0000
Manifest next update: Sun 08 Mar 2026 23:10:18 +0000
Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: t3Tj62gWi8DOUS/aKNFI20wf0oH7BS/By+4J5Z3UCz0=)
2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: 9yNn6fM/mAMTPBWBJguXD7+aFLMZWUxYjmpKTvo8s9U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6592 (0x19c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Validity
Not Before: Mar 1 23:10:18 2026 GMT
Not After : Mar 8 23:10:18 2026 GMT
Subject: CN=69a4c75b-cfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:e7:5d:a3:dc:1b:dd:c0:5c:1b:e0:c8:c3:
66:61:5c:33:10:a0:26:25:f3:3b:94:14:43:51:ae:
c3:09:1d:77:f8:4b:a7:5b:d7:a8:65:7f:fb:7b:a8:
66:f5:88:38:de:fe:5e:4c:b9:31:a0:b8:21:81:c0:
45:9c:f6:46:15:14:1b:1e:a2:0d:ec:82:61:2a:11:
dd:fb:61:1b:ca:5a:8e:96:5e:63:0a:1b:28:40:55:
3a:d8:99:b5:90:e1:66:67:9f:c1:c7:47:e3:d9:37:
0a:3e:ac:af:59:b2:9d:ef:ea:29:68:8e:ab:62:5c:
46:77:ed:e4:ac:83:03:ee:e7:fd:a1:34:6f:6d:4d:
43:ea:7f:ea:50:6b:c9:a6:95:ba:df:10:0e:04:6c:
66:6f:fe:78:a6:de:d0:eb:a6:cc:6b:ad:9e:8d:6f:
b0:1c:ca:7d:cf:fd:20:8f:6b:a6:53:fa:5b:dc:b1:
f9:1e:96:85:de:c3:49:07:eb:12:71:e6:54:6d:e4:
d9:08:41:8c:18:7c:0e:d3:b0:a2:ab:d1:b1:9b:57:
b4:cc:04:84:d2:a6:d2:5c:37:69:fe:a5:f8:7f:e9:
78:08:e1:d8:ae:78:cc:a0:be:ff:cf:09:c0:9b:3b:
d8:48:af:00:bb:36:05:d7:dc:ee:87:2a:df:0e:a3:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2F:9D:3B:D5:5B:D9:85:73:45:46:5E:0B:8C:01:B9:EE:68:F0:46
X509v3 Authority Key Identifier:
keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1b:8b:f3:3f:85:ed:10:71:61:83:30:a0:3e:00:06:02:49:
3e:69:d9:f6:3a:d9:c6:af:cd:87:d2:f1:20:68:81:fb:9c:22:
27:0b:a7:4e:2c:93:49:6c:94:71:eb:a6:ed:02:03:ff:2d:40:
de:8a:66:49:3e:56:5a:2d:73:f7:9d:34:15:7d:64:f1:80:be:
5e:c0:ba:7a:17:5a:48:1b:ed:6a:16:8b:82:35:58:6f:40:9d:
13:4e:f4:40:0c:b4:a0:ab:10:e1:e9:57:0c:15:9d:cd:35:92:
62:97:6c:eb:16:8c:0f:a1:d6:03:08:3e:4b:50:72:55:2a:95:
38:da:ed:c5:45:37:3a:5e:e7:81:ae:7d:2f:fa:e2:33:c7:56:
be:68:2f:a2:6a:2c:17:49:30:91:ca:fb:fe:1a:f7:0d:e9:cc:
42:ff:fa:b5:d0:7f:08:14:81:20:90:bd:99:08:90:c3:d3:b0:
24:f4:8c:f0:d7:76:3a:6d:c2:59:ad:25:5a:75:15:73:75:dc:
60:4a:35:52:d8:46:d9:b4:db:a4:ed:bf:58:5c:b1:61:a6:43:
60:41:a7:6c:81:31:67:c4:59:8f:5e:6f:b1:42:f4:1c:bc:fb:
c8:50:6e:a9:74:c1:04:0d:ca:4b:f2:7d:2f:31:17:52:af:c5:
56:fe:41:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey
NUQ3RTE2RDgwHhcNMjYwMzAxMjMxMDE4WhcNMjYwMzA4MjMxMDE4WjAYMRYwFAYD
VQQDEw02OWE0Yzc1Yi1jZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwm3nXaPcG93AXBvgyMNmYVwzEKAmJfM7lBRDUa7DCR13+EunW9eoZX/7e6hm
9Yg43v5eTLkxoLghgcBFnPZGFRQbHqIN7IJhKhHd+2EbylqOll5jChsoQFU62Jm1
kOFmZ5/Bx0fj2TcKPqyvWbKd7+opaI6rYlxGd+3krIMD7uf9oTRvbU1D6n/qUGvJ
ppW63xAOBGxmb/54pt7Q66bMa62ejW+wHMp9z/0gj2umU/pb3LH5HpaF3sNJB+sS
ceZUbeTZCEGMGHwO07Ciq9Gxm1e0zASE0qbSXDdp/qX4f+l4COHYrnjMoL7/zwnA
mzvYSK8AuzYF19zuhyrfDqOk2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8vnTvV
W9mFc0VGXguMAbnuaPBGMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha
TEIyUXgwcTRMSG9sMS1GdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAChuL8z+F7RBxYYMwoD4ABgJJPmnZ9jrZxq/Nh9LxIGiB+5wiJwunTiyTSWyU
ceum7QID/y1A3opmST5WWi1z9500FX1k8YC+XsC6ehdaSBvtahaLgjVYb0CdE070
QAy0oKsQ4elXDBWdzTWSYpds6xaMD6HWAwg+S1ByVSqVONrtxUU3Ol7nga59L/ri
M8dWvmgvomosF0kwkcr7/hr3DenMQv/6tdB/CBSBIJC9mQiQw9OwJPSM8Nd2Om3C
Wa0lWnUVc3XcYEo1UthG2bTbpO2/WFyxYaZDYEGnbIExZ8RZj15vsUL0HLz7yFBu
qXTBBA3KS/J9LzEXUq/FVv5BXA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:31 2026 by rpki-client