
$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File: nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier: 1mmw4RTMFzU36EUafukThRUy9K5YzIwMBe+QpEMfqR0=
Subject key identifier: 29:57:96:A8:EC:54:65:41:95:90:2C:9C:44:C9:AA:2B:30:F1:FF:62
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer: /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial: 05D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number: 05CB
Signing time: Sat 28 Feb 2026 23:36:42 +0000
Manifest this update: Sat 28 Feb 2026 23:36:41 +0000
Manifest next update: Sat 07 Mar 2026 23:36:41 +0000
Files and hashes: 1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: P2UTduC3RfUc7AOpxRU4hlircneBWBv62SvzxuVNqKU=)
2: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: q68S8qeaTqWEZ5l+4qz/s/O62R3KsNh3wb76imnXzwI=)
3: 77465F12874511EEBEA58225C4F9AE02.roa (hash: xh9UKJYFp+YhsYj95yxNw0UlkYprDVOg6UWQXH5rOS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1495 (0x5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Validity
Not Before: Feb 28 23:36:41 2026 GMT
Not After : Mar 7 23:36:41 2026 GMT
Subject: CN=69a37c09-75d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:d6:e7:cd:06:95:aa:b1:dc:3a:78:38:66:
c6:9d:f6:91:8a:80:a0:c8:32:c0:d4:41:f7:84:bd:
01:05:6e:0d:4d:02:5a:98:d5:2c:db:44:6c:32:33:
dc:d4:f6:11:4f:a2:4d:ed:54:52:53:5a:c5:07:df:
c5:25:a6:c1:4a:5c:7a:1e:39:8a:ed:e4:65:32:cd:
97:6e:ac:7a:8a:f1:b9:4a:d3:24:ae:df:31:d0:d5:
ab:3d:25:df:49:0e:10:b2:a0:dc:a9:87:39:9e:cb:
c2:0f:e3:a4:49:93:11:50:4e:cf:a4:f3:49:49:3f:
70:04:9b:f9:e7:b3:4d:ed:4e:7e:bc:25:c2:4b:cd:
a4:6c:ce:d3:01:f5:84:5a:7e:18:70:d3:0d:cd:58:
07:4e:99:87:ea:57:e2:a8:88:e3:0d:f6:00:4a:c1:
5f:ce:eb:bc:db:99:f2:e5:65:77:ae:f5:94:39:63:
bc:66:a7:01:c4:ec:2b:79:e3:39:0d:a8:53:2d:cd:
84:69:a5:c1:72:7d:2a:52:96:91:86:5c:ea:d1:75:
f9:cf:da:58:ad:53:af:f4:aa:1b:ea:a5:1c:20:e0:
b3:a4:91:ca:37:b7:a1:09:4e:0b:ae:67:a8:4b:30:
a6:36:cb:d4:7f:6d:1d:85:5c:11:11:4c:c7:e5:ea:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:57:96:A8:EC:54:65:41:95:90:2C:9C:44:C9:AA:2B:30:F1:FF:62
X509v3 Authority Key Identifier:
keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:99:2c:ef:45:94:99:6c:8f:bf:1d:f2:09:14:2c:13:d4:8c:
86:38:08:9a:7a:85:26:a6:50:18:8a:50:da:26:7c:6e:19:bd:
4d:24:22:44:b2:f7:cc:a1:0e:46:ee:ac:41:76:23:d5:99:99:
3b:76:52:ab:37:1a:fb:11:19:03:e7:8b:e0:02:e0:6f:74:7a:
1e:c4:f8:35:f1:71:a7:e6:49:1a:61:3f:fe:8f:e3:ae:06:b1:
4a:7a:90:f9:c7:4b:84:19:13:d6:ef:cd:0e:2e:32:d0:60:1d:
63:e2:a5:1e:df:4e:35:e1:e7:99:3c:c9:5c:8c:7e:51:17:dd:
40:56:30:0a:f2:25:d6:31:02:f6:80:71:1f:ee:e2:40:09:64:
0a:0b:9e:fa:ee:9d:23:0a:b9:5f:23:fc:e4:0e:91:23:c3:65:
72:16:4e:34:14:bd:e4:ae:2d:eb:68:41:b7:a6:cf:81:8c:d4:
d4:de:cf:1d:e0:d9:80:21:df:7e:de:41:97:b4:1a:66:bc:d4:
e5:b6:0e:76:90:00:95:71:94:43:e8:84:ab:e5:4d:0b:d6:54:
2d:32:45:1d:23:97:07:6e:d6:f2:80:ab:2b:32:38:68:50:82:
f1:7b:59:c1:fe:b9:6b:f0:2b:24:0f:4e:bb:14:48:86:03:1f:
30:07:20:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:21 2026 by rpki-client