
$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File: nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier: MHV1+taaD7EA2go88RFomOaem5j/zl+uOJgtWNkI3MM=
Subject key identifier: E2:1D:30:50:C6:1A:F2:CC:72:74:E2:09:6F:0D:31:4B:EA:16:45:CA
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer: /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial: 0637
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number: 0619
Signing time: Sun 26 Jul 2026 23:41:05 +0000
Manifest this update: Sun 26 Jul 2026 23:41:04 +0000
Manifest next update: Sun 02 Aug 2026 23:41:04 +0000
Files and hashes: 1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: zoyVuwzXRh5nEZxq9oV62Ekt34HO9fqOyYcDMo/oz0g=)
2: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: ynONBbaJLtslH4xEJkYmR31LTCJpIq6Pb2euDc5gbJI=)
3: 77465F12874511EEBEA58225C4F9AE02.roa (hash: EbdZVxWbh3R/FncALnqSzB9R0M4Mq7JJdCNgH/e/Tds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1591 (0x637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Validity
Not Before: Jul 26 23:41:04 2026 GMT
Not After : Aug 2 23:41:04 2026 GMT
Subject: CN=6a669b10-bcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:aa:c8:09:0b:b1:37:18:76:13:44:fd:60:
b9:d4:3d:a9:bc:bb:8e:dd:b1:3c:a8:99:f7:a8:60:
f1:ed:39:3d:2b:16:51:43:0f:85:3c:66:90:10:60:
52:eb:20:49:7f:39:14:6e:1c:0f:e9:6c:02:27:9d:
52:f5:41:9a:fe:3f:e6:81:b2:14:2d:0e:ed:48:18:
ba:b4:30:97:0b:95:21:bc:5c:b5:c0:a4:67:09:7c:
94:25:74:6d:5e:38:87:dd:0e:4b:8f:fa:3a:50:ec:
18:d1:2b:fc:f4:44:16:ee:73:b9:6a:07:f1:bf:83:
c6:ee:82:e1:14:52:2f:1d:57:8a:36:e6:a5:ad:c7:
59:19:18:b8:82:24:45:d2:58:d6:70:cd:80:5d:9f:
3c:d1:d4:4d:ef:7c:04:1f:22:d3:55:2d:50:d8:17:
7a:70:6b:67:c5:57:ac:e5:68:b7:ab:f9:22:45:39:
16:fb:7d:7a:31:ee:4e:5c:0e:1f:31:d5:1d:be:c0:
25:19:e4:ea:42:8f:f3:f4:67:67:44:34:c8:34:36:
e4:39:99:7a:69:67:89:c3:54:b4:c1:5b:bf:98:69:
94:6d:e6:be:44:95:bc:af:24:b4:62:77:2a:bb:e2:
e0:67:fa:06:22:02:e9:31:e5:6b:af:ba:42:8e:6a:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1D:30:50:C6:1A:F2:CC:72:74:E2:09:6F:0D:31:4B:EA:16:45:CA
X509v3 Authority Key Identifier:
keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6a:aa:0a:a6:d7:d5:78:af:89:46:88:63:4e:5c:cd:2f:12:
39:01:30:74:1e:e4:f2:96:d7:fa:57:6c:7c:34:d3:36:b9:c8:
fa:63:c0:b1:bc:37:f9:63:68:ef:52:a4:8d:9c:c0:8a:48:40:
cf:e7:0f:65:fa:23:a8:47:83:e0:80:9d:2c:fd:4d:2e:8a:1b:
3c:b4:fc:c1:79:1b:b5:54:cc:01:42:a7:fc:53:66:fe:62:37:
29:1d:c2:2d:94:18:21:38:95:e4:f1:37:ae:59:f9:27:e1:08:
6a:4c:10:97:72:8f:3a:a9:4a:05:86:d3:81:f7:0f:07:b3:c3:
b5:25:08:1b:f8:18:21:1a:a9:3a:48:b9:21:52:ee:8e:a2:01:
c2:1a:d8:5b:28:93:8b:0b:ea:f7:ad:b8:c1:99:1d:ba:4f:18:
2e:53:ac:5b:a4:6d:be:71:c4:ee:5a:9d:26:7b:16:68:4c:f4:
d8:c3:e2:4c:8d:ff:76:3b:11:67:5a:36:2e:a8:3d:92:3c:cb:
8a:3e:fe:06:58:61:73:70:6b:7c:a7:2f:dc:e8:3d:11:b9:28:
1d:d0:68:63:7f:c3:39:62:61:83:5f:ee:47:54:70:06:cd:39:
d7:58:23:e7:ef:c1:81:df:44:30:61:b4:6c:fc:9c:58:5f:4f:
fe:ef:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:25 2026 by rpki-client