
$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
File: nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json)
Hash identifier: CG1r35P2Mx1JuLIVKkaf49HuXkL4dQSTTOJSO7FKgfo=
Subject key identifier: 29:62:51:23:57:F2:E3:29:B7:C4:8F:D9:F0:99:AF:94:BA:EC:6C:85
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Certificate issuer: /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial: 0621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
Manifest number: 0603
Signing time: Fri 12 Jun 2026 22:55:54 +0000
Manifest this update: Fri 12 Jun 2026 22:55:53 +0000
Manifest next update: Fri 19 Jun 2026 22:55:53 +0000
Files and hashes: 1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: zkS3CdRUh7p9xilPjMygnRJz7THPfv6XLp7ZUq1lWO4=)
2: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: ynONBbaJLtslH4xEJkYmR31LTCJpIq6Pb2euDc5gbJI=)
3: 77465F12874511EEBEA58225C4F9AE02.roa (hash: EbdZVxWbh3R/FncALnqSzB9R0M4Mq7JJdCNgH/e/Tds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Validity
Not Before: Jun 12 22:55:53 2026 GMT
Not After : Jun 19 22:55:53 2026 GMT
Subject: CN=6a2c8e79-f9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:8f:9c:5c:78:a7:1e:4f:24:7b:0d:9b:2e:
63:82:1a:62:19:b4:97:90:3b:06:87:12:59:5c:0f:
12:56:03:f8:88:72:3b:85:e7:73:eb:f9:16:df:b4:
62:ea:12:59:bd:1f:4f:38:c1:9b:9c:ad:83:f0:19:
f6:79:ef:d5:1c:36:9b:88:87:33:2e:12:87:8f:d2:
27:d5:08:f7:28:d7:6a:6a:8a:f0:54:20:04:27:00:
81:52:d5:9e:ff:ee:ef:13:cd:5d:12:13:b8:b7:43:
1a:9a:a5:bf:8b:a2:4d:15:67:4d:24:44:5e:8d:3a:
5e:b3:68:23:7e:f3:39:03:9e:db:ec:58:e0:d9:a0:
c1:f6:31:2f:31:61:4a:48:1c:1d:54:01:05:e3:e6:
2f:e9:9e:26:7d:92:95:11:e0:f5:ec:04:0b:04:a4:
1c:d6:4e:fc:cd:08:9f:6f:64:5c:5c:db:70:af:ea:
1f:a5:88:93:f8:82:0e:36:ac:99:10:f8:9d:9b:3f:
31:52:7c:eb:1e:70:65:8e:b2:fe:98:29:64:e5:18:
db:78:23:ed:fe:7e:03:a2:81:0c:ac:e8:ff:4b:b7:
71:04:38:65:74:97:d9:77:28:2a:9e:38:a8:fe:05:
89:0b:d0:f9:7a:03:2e:c3:f3:d2:3f:0d:4b:04:de:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:62:51:23:57:F2:E3:29:B7:C4:8F:D9:F0:99:AF:94:BA:EC:6C:85
X509v3 Authority Key Identifier:
keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:52:3e:b5:d2:31:f0:40:3b:bc:13:cf:c1:61:c1:a9:c5:1e:
9f:91:36:e1:d9:c3:35:53:18:a5:f7:4f:25:ea:99:83:1e:e0:
18:20:3a:5d:73:6c:50:f8:3a:52:5c:52:d6:82:d2:9c:b3:68:
28:fc:b3:18:24:65:c4:e3:ab:a5:4b:e2:98:b7:26:ab:64:cc:
e5:0c:33:f7:19:6d:80:7d:41:a5:d1:ac:c1:f3:d1:7e:60:23:
58:8e:76:96:e6:83:bf:6e:d4:bb:ea:51:0e:4c:69:70:10:7c:
b8:38:52:b0:e0:64:a1:9e:fa:6f:93:27:5d:ac:07:7d:dd:d4:
ea:41:0b:19:fe:0e:e2:61:cb:3e:d4:56:02:96:79:3a:91:bd:
9e:6c:6d:98:36:d9:21:fa:1b:77:38:0a:17:c5:b1:e1:54:ab:
c9:19:7f:45:eb:8a:dc:c8:36:a8:21:9d:92:d9:e6:9c:18:58:
5a:a9:52:08:c1:da:47:80:00:af:fc:50:5b:cc:87:2d:88:c3:
31:19:93:57:13:f0:2c:9f:df:ee:c1:29:a5:0f:be:9d:7a:ab:
bc:e8:d7:c5:c9:86:6e:6e:aa:19:40:a5:83:b4:62:7c:f6:70:
e0:f5:13:88:19:27:1a:9a:c7:bf:72:09:98:61:ac:77:fb:ce:
64:3e:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:35 2026 by rpki-client