
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
File: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json)
Hash identifier: y5bhDIE9S4+bVKk84zyLTxxwMJbQkKxckQPJPXQFn8Y=
Subject key identifier: 30:25:97:00:A1:35:75:5E:D2:D7:C0:02:69:AD:79:57:EB:8F:32:AB
Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27
Certificate issuer: /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
Certificate serial: 036D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
Manifest number: 0355
Signing time: Mon 27 Jul 2026 02:09:53 +0000
Manifest this update: Mon 27 Jul 2026 02:09:53 +0000
Manifest next update: Mon 03 Aug 2026 02:09:53 +0000
Files and hashes: 1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: Ln391QEcT2RO/0C29Pkj1e6ssNq9HKle4VCzhQ/wwJs=)
2: 4742083A534E11F08B7C2047C4F9AE02.roa (hash: xthRLc90/XgHlCkTtB+0e16k0vdMx1eiJQ9NbjS1xYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl
rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127
Validity
Not Before: Jul 27 02:09:53 2026 GMT
Not After : Aug 3 02:09:53 2026 GMT
Subject: CN=6a66bdf1-c61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:49:ff:ef:cf:67:15:a4:73:8d:6d:8e:b5:
59:7e:88:91:36:86:76:d8:68:c6:d1:50:74:b8:38:
cd:87:8a:8e:02:3f:0e:8e:af:ac:08:9b:2e:04:5f:
a7:13:d2:1b:95:29:45:d5:61:f9:ef:f1:7d:80:ba:
73:31:3d:f3:bd:92:4f:10:6e:b6:3f:89:8e:b3:11:
8a:cc:4c:30:09:31:d1:ab:c7:68:cd:0b:3c:ea:00:
6d:35:59:df:ed:a5:34:69:7a:5a:59:f7:15:32:e8:
ac:7e:7f:e1:fd:29:77:43:33:f9:74:4e:33:2c:a2:
47:60:b1:bb:8b:2c:17:43:1d:46:04:63:4f:5d:a6:
e0:5a:ac:cf:46:81:5d:d3:ff:a2:65:45:e3:52:4e:
21:0b:d7:3e:3b:e9:c9:4b:23:62:88:7a:b8:34:28:
70:11:5e:2f:31:9a:27:34:93:87:f3:fc:13:34:e9:
4f:82:2c:81:dc:3e:b7:27:cf:98:22:8a:78:cd:94:
3a:43:f8:f0:b3:20:b6:36:0c:66:56:9c:33:40:e6:
3a:bc:4e:83:50:7c:03:7a:6a:a2:97:12:18:64:4b:
18:94:3e:47:38:bd:bf:bb:5e:0c:55:d5:85:d8:9f:
1d:26:f8:ef:95:41:6e:61:6f:58:b5:41:07:18:67:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:25:97:00:A1:35:75:5E:D2:D7:C0:02:69:AD:79:57:EB:8F:32:AB
X509v3 Authority Key Identifier:
keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c6:44:84:5d:6d:65:0d:5a:fd:4a:38:0a:29:22:79:c2:33:
93:1d:37:07:f6:c4:c1:53:d3:60:22:d0:35:33:c3:d0:ee:87:
4b:6c:1e:c5:e8:25:74:ea:c1:50:3d:f2:22:ed:68:e8:c7:a4:
bf:2e:50:f9:d1:03:64:63:67:51:9f:c6:79:37:55:1e:b1:14:
06:40:2e:f9:da:b0:a0:ef:8f:79:34:97:fd:2b:6e:89:fc:88:
35:9b:54:53:e4:a3:f8:9d:58:e8:d8:bd:b0:20:f0:5c:5a:dd:
46:90:0c:04:3a:af:d4:d0:0c:99:b6:16:a7:c4:24:65:f2:8b:
91:35:67:31:28:63:23:34:53:d3:f3:19:21:40:07:d8:ac:82:
84:d8:41:4f:2b:bb:4f:42:e1:98:26:e7:28:89:e6:5a:cc:88:
54:ca:c4:23:68:68:7d:ca:d6:12:69:ab:25:19:c9:e7:40:6f:
c5:51:99:40:50:6f:06:5a:19:a7:40:13:de:23:ee:3c:4e:5d:
db:01:94:43:47:04:48:a1:f8:23:96:32:48:1b:9c:b2:f2:7a:
51:1a:ae:9c:20:69:7d:d3:a2:67:e3:48:99:f6:94:88:7d:16:
d6:48:2e:96:1e:d8:42:ef:57:38:02:62:d4:f0:96:7a:a7:e9:
94:14:98:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc1MDExMTAvBgNVBAUTKDlGMEFBRjJFMEFGQTNFNkY4REFFNUE0NkE3RTU4Q0NG
RkEzNEMxMjcwHhcNMjYwNzI3MDIwOTUzWhcNMjYwODAzMDIwOTUzWjAYMRYwFAYD
VQQDEw02YTY2YmRmMS1jNjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoK5J/+/PZxWkc41tjrVZfoiRNoZ22GjG0VB0uDjNh4qOAj8Ojq+sCJsuBF+n
E9IblSlF1WH57/F9gLpzMT3zvZJPEG62P4mOsxGKzEwwCTHRq8dozQs86gBtNVnf
7aU0aXpaWfcVMuisfn/h/Sl3QzP5dE4zLKJHYLG7iywXQx1GBGNPXabgWqzPRoFd
0/+iZUXjUk4hC9c+O+nJSyNiiHq4NChwEV4vMZonNJOH8/wTNOlPgiyB3D63J8+Y
Iop4zZQ6Q/jwsyC2NgxmVpwzQOY6vE6DUHwDemqilxIYZEsYlD5HOL2/u14MVdWF
2J8dJvjvlUFuYW9YtUEHGGcY+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDAllwCh
NXVe0tfAAmmteVfrjzKrMB8GA1UdIwQYMBaAFJ8Kry4K+j5vja5aRqfljM/6NMEn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzUwMS85OUI1OEJCMDEz
REIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBtLU5ybHBHcC1XTXpfbzB3
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL253cXZMZ3I2UG0tTnJscEdwLVdNel9vMHdTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzUwMS85OUI1OEJCMDEzREIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBt
LU5ybHBHcC1XTXpfbzB3U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACsZEhF1tZQ1a/Uo4CikiecIzkx03B/bEwVPTYCLQNTPD0O6HS2wexegldOrB
UD3yIu1o6Mekvy5Q+dEDZGNnUZ/GeTdVHrEUBkAu+dqwoO+PeTSX/StuifyINZtU
U+Sj+J1Y6Ni9sCDwXFrdRpAMBDqv1NAMmbYWp8QkZfKLkTVnMShjIzRT0/MZIUAH
2KyChNhBTyu7T0LhmCbnKInmWsyIVMrEI2hofcrWEmmrJRnJ50BvxVGZQFBvBloZ
p0AT3iPuPE5d2wGUQ0cESKH4I5YySBucsvJ6URqunCBpfdOiZ+NImfaUiH0W1kgu
lh7YQu9XOAJi1PCWeqfplBSYiw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:47:49 2026 by rpki-client