
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json)
Hash identifier: C5QRtxPwF8/GOXGO4KIs0IvMAEYtxPfnlpntMAY0mpo=
Subject key identifier: E9:22:FD:6A:E5:C5:59:E0:6B:7D:AA:6E:CE:54:3E:22:90:09:1A:3A
Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Certificate serial: 0593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
Manifest number: 0589
Signing time: Tue 22 Sep 2026 22:56:39 +0000
Manifest this update: Tue 22 Sep 2026 22:56:38 +0000
Manifest next update: Tue 29 Sep 2026 22:56:38 +0000
Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: sGNDomHFaAxKt4XhCgcWCyMfsWJMgehtWvWPeiHYKxg=)
2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: /jQYkc5f5l8Pbu5OorjTzCnm6qjRNO98wm8eYK6GV7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1427 (0x593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Validity
Not Before: Sep 22 22:56:38 2026 GMT
Not After : Sep 29 22:56:38 2026 GMT
Subject: CN=6ab307a7-9a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:be:11:c7:91:8a:c3:8a:20:3e:c1:6f:01:
04:75:05:30:81:48:bc:f8:ae:15:e7:33:99:ec:19:
ee:91:d1:85:0b:83:c1:bb:ab:be:42:e1:fe:e6:0a:
cc:bd:ca:07:e1:82:ea:70:26:b0:20:c0:6b:26:3c:
52:c4:8f:44:8d:c2:6e:17:bb:43:e4:ac:00:75:33:
ba:60:50:d0:20:6e:68:c9:82:ec:2a:1c:f5:47:54:
3e:41:4d:a8:89:98:ef:11:95:dc:6b:70:25:b5:4e:
6b:d6:2a:84:a0:f9:19:2a:56:cb:34:cb:fb:8a:b0:
f9:57:d6:b5:92:ac:65:d4:a6:1a:f4:38:97:b6:94:
9d:11:48:38:12:30:32:a2:25:b0:75:af:17:29:63:
29:84:c1:39:56:d6:d9:18:5a:84:e1:4c:a0:a1:36:
17:85:2c:b5:44:de:2d:9a:d1:ed:a8:73:af:1e:55:
8d:b6:43:2a:9a:d9:af:06:3b:a2:ed:4a:83:e5:8a:
1d:36:b3:05:23:15:59:1b:c8:b0:ea:9f:b5:f6:69:
83:7b:23:12:35:9f:be:2f:31:52:68:5f:d2:49:fa:
80:10:c4:9e:c3:50:1b:36:f1:41:e9:80:cf:28:c8:
13:a5:c1:dc:30:a7:a3:fe:6e:1f:67:b5:ca:c2:c4:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:FD:6A:E5:C5:59:E0:6B:7D:AA:6E:CE:54:3E:22:90:09:1A:3A
X509v3 Authority Key Identifier:
keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:47:d3:47:f6:68:4e:d8:dd:2c:21:6c:e8:47:b9:fa:11:9d:
12:3a:b2:30:0d:5e:f9:35:b7:c2:c0:39:9d:0d:d0:84:28:34:
20:d2:fc:6c:76:87:50:e1:7a:e0:d4:09:4b:58:d4:cc:42:dd:
64:86:50:e2:7c:6f:6b:a8:b1:e1:4a:9b:c8:d1:dd:7a:46:7a:
da:04:50:d4:6c:e8:43:91:c5:9b:05:79:27:be:06:d3:d7:fd:
4d:f1:06:62:6d:15:f3:d3:12:5e:c8:ec:5f:12:92:c9:51:3a:
9d:91:ba:60:47:6e:fa:f8:89:93:16:24:f8:27:6a:c5:67:58:
ad:96:fb:10:21:28:98:dd:5b:f3:5f:5c:e0:a7:9d:9c:15:d0:
42:d4:2d:cc:fc:fc:8e:79:0b:9b:8a:2b:e6:61:c4:d2:05:e9:
89:5f:d3:4b:f7:ad:53:65:fa:03:84:51:87:4d:f4:82:3d:ee:
62:49:9b:3e:41:0f:e1:82:71:b5:af:11:8c:0e:7c:0a:c6:bc:
1e:b0:66:8c:71:d9:2e:ca:ab:c4:05:f2:e7:b9:f9:63:e9:b0:
ae:89:0a:fc:e5:c9:13:2f:ea:5a:91:e7:68:e0:c7:c2:42:45:
95:7b:df:c2:b1:d2:37:e4:f3:53:24:50:4c:80:62:9b:a0:76:
d3:59:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:07:05 2026 by rpki-client