
$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json)
Hash identifier: /of/up21CSka0a7PK7J/vPy5APz6MWVmyNPEJba2Uk0=
Subject key identifier: 7F:9E:C4:B5:C3:24:A0:5A:F6:AB:C3:31:DD:FE:5B:C4:3A:87:07:7A
Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08
Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
Certificate serial: 353F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
Manifest number: 352B
Signing time: Mon 02 Mar 2026 02:32:13 +0000
Manifest this update: Mon 02 Mar 2026 02:32:11 +0000
Manifest next update: Mon 09 Mar 2026 02:32:11 +0000
Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: +ZvVY9Rr2FAuRfPbxwSvOhU9wafZiMtqpageLTiem1s=)
2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: dP7HegAV/LhvECEqPV+CQ2+cXKrDHT/4AjooyHNCYaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl
rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13631 (0x353f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
Validity
Not Before: Mar 2 02:32:11 2026 GMT
Not After : Mar 9 02:32:11 2026 GMT
Subject: CN=69a4f6ad-a31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:37:53:1a:5a:70:cd:84:d1:b4:74:c8:77:
94:b8:4c:f6:cb:fd:f4:ee:ca:37:54:6e:65:98:ec:
51:a2:54:70:d9:5e:c9:dd:cd:9c:85:0e:0b:3b:e8:
ed:75:83:b5:b9:5f:1e:67:63:95:67:23:97:59:e9:
d5:48:0c:b8:12:d2:e2:75:2c:c8:01:e6:9d:5f:af:
c1:64:59:e2:06:28:58:96:3c:70:f9:cc:6d:c0:a4:
58:f4:12:6b:58:65:79:f6:a2:bd:c1:a3:71:c4:32:
00:f7:d9:50:8c:01:92:81:b6:ff:bd:d0:f7:7f:b4:
ed:c8:86:10:91:5c:b1:28:98:ff:25:16:84:7c:20:
d7:25:36:7b:64:2d:30:c3:c7:8d:84:09:34:c8:9a:
d4:1a:03:e9:fc:fa:25:6d:4e:61:64:cc:db:8d:17:
d2:28:c8:6b:0d:e6:eb:df:60:94:e5:f5:d1:c1:ce:
bb:e3:25:5b:c3:97:6c:94:c8:26:47:80:ab:f4:c7:
ce:2d:cb:25:f5:07:71:f6:6e:b3:df:3f:db:87:c1:
51:63:2b:7a:f1:f4:57:88:a3:8f:c4:0b:d2:ac:35:
82:fe:18:e0:e2:57:a2:a0:fd:6b:13:b8:93:9e:37:
9f:e4:08:c9:03:4d:23:2e:08:1c:fc:a5:6a:0a:fb:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9E:C4:B5:C3:24:A0:5A:F6:AB:C3:31:DD:FE:5B:C4:3A:87:07:7A
X509v3 Authority Key Identifier:
keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:65:49:fe:f8:49:41:47:68:de:6b:4a:12:48:4f:97:22:d9:
69:10:c7:e6:87:a1:a4:fc:cd:45:c7:ba:dd:a3:13:44:1b:71:
66:7a:fa:6e:be:df:b1:3b:48:50:4a:93:7a:1b:89:fa:5a:21:
f2:45:7b:01:52:f0:97:62:ca:22:23:10:88:eb:c6:71:d1:e5:
a5:07:36:43:7a:84:39:58:f7:b0:cc:1b:8f:68:32:e0:5d:54:
fb:21:8e:f9:03:6d:1c:1d:60:35:ae:eb:f9:e9:8a:94:56:00:
88:23:aa:aa:59:20:c8:af:63:4f:4c:4b:4a:93:0a:03:cf:d4:
90:7e:08:ea:f7:54:6a:0f:bc:b2:d3:d7:01:fb:eb:a5:34:c5:
6c:7a:76:64:d7:44:ea:a0:a9:2a:8c:dc:4f:e2:92:8e:48:cf:
7b:a0:bb:59:01:20:22:14:e3:60:05:95:5a:e2:8d:f2:f7:2c:
06:bd:04:c4:58:8d:3c:90:ae:96:3c:f1:6f:b5:74:71:d1:4a:
73:45:73:96:51:33:d2:d5:79:56:a2:59:61:6a:3c:1d:5c:ce:
8a:39:73:d5:e5:df:34:df:93:0e:53:b2:9f:00:a4:f6:b8:b2:
08:bb:e3:91:0f:bd:54:60:e7:e4:f4:f0:a5:ef:1c:55:89:ed:
03:5c:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:35 2026 by rpki-client