
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
File: nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json)
Hash identifier: fUT5V1WG5s1cr8X09mdLDifEeyVExmrTi5uxC5RYRhQ=
Subject key identifier: 78:1F:B3:41:ED:46:74:69:7A:C7:B9:7D:92:10:22:23:93:39:52:1A
Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
Certificate issuer: /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Certificate serial: 0576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
Manifest number: 056C
Signing time: Wed 29 Jul 2026 00:00:55 +0000
Manifest this update: Wed 29 Jul 2026 00:00:55 +0000
Manifest next update: Wed 05 Aug 2026 00:00:55 +0000
Files and hashes: 1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: Q/YfqMyYQqdDxiqRXKonHYu48+12QpNeOgkD8GgsW48=)
2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: /jQYkc5f5l8Pbu5OorjTzCnm6qjRNO98wm8eYK6GV7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1398 (0x576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Validity
Not Before: Jul 29 00:00:55 2026 GMT
Not After : Aug 5 00:00:55 2026 GMT
Subject: CN=6a6942b7-53d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:d7:5b:05:72:14:1c:96:b2:82:88:8b:00:
66:df:2a:ec:0b:2f:a5:30:38:04:ff:ba:1d:04:41:
95:9f:3b:4f:cb:6f:bd:b2:f1:e9:00:86:63:aa:25:
b1:02:7f:1e:09:d2:74:8b:14:1e:a9:1b:a0:db:fc:
14:dd:8f:f5:af:1d:01:cc:b8:be:08:50:3f:75:37:
78:d6:54:07:b0:2b:8a:07:19:cb:24:48:8c:c8:dd:
19:cc:f9:41:f4:cd:5d:4c:7c:3a:44:b0:10:9e:c2:
9b:73:69:ad:37:6d:b8:68:9e:bc:55:bc:e2:7a:22:
7d:6d:65:2c:34:09:50:00:63:98:b4:fe:ef:8e:63:
a9:6d:ec:fe:0f:a0:f5:40:09:cd:ee:5b:85:bd:20:
f8:5b:ee:5a:f3:96:95:8e:ac:50:36:58:1e:ae:d0:
f4:50:a1:0f:c0:53:77:c4:6d:51:6f:33:11:84:41:
14:7e:f7:df:5d:dd:f7:fb:92:7d:52:4d:36:9f:ee:
48:dc:66:5c:90:4f:7b:48:c4:57:ee:4b:9c:11:7d:
16:e4:de:dc:34:f9:c5:52:0b:8e:70:0c:96:2c:a6:
3e:2d:94:56:6d:85:1d:79:d4:a4:1f:f3:5d:85:e3:
99:66:d2:dd:04:de:0b:ed:a9:d7:5e:18:09:dd:84:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1F:B3:41:ED:46:74:69:7A:C7:B9:7D:92:10:22:23:93:39:52:1A
X509v3 Authority Key Identifier:
keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:9b:20:8b:7f:d5:dc:fb:58:06:cd:95:f9:58:77:06:79:45:
33:44:74:42:23:79:13:2e:c7:5b:84:d4:40:a7:bf:8b:7a:bd:
79:30:43:39:3b:8c:9b:9e:b3:1d:26:dc:3d:e9:22:d9:5f:6c:
3b:b6:cb:db:5d:fb:64:d4:d1:33:77:36:f2:38:38:cd:1c:be:
38:3b:bd:ea:37:54:4a:12:b8:2f:ea:39:cc:7b:8e:0f:fa:ea:
a1:26:38:b3:4f:5a:3f:1b:7c:3e:cb:5c:e2:64:fd:bb:4b:b9:
00:62:0f:3d:d4:17:90:37:f0:c4:19:5a:4e:f0:7b:57:00:bc:
87:c0:de:98:24:d5:0e:ed:56:86:05:45:d4:1f:a0:c5:b0:92:
38:3e:f5:b5:35:af:a9:d3:9d:98:07:e6:8b:41:c8:2d:52:bd:
4c:1a:61:1e:4a:e6:7c:83:f4:2a:77:4a:0e:5f:1e:49:d5:e8:
23:a8:c3:75:a7:f5:1d:39:c9:27:8f:10:f6:db:1d:4d:11:d1:
8a:83:35:ce:c7:8d:2c:58:a2:7c:79:3b:56:d4:a5:b5:53:3d:
79:d6:1b:3b:2a:49:29:82:a2:20:96:a9:91:82:e1:72:c5:0e:
7d:ce:78:d2:d2:ae:d1:70:69:29:7f:e2:cf:62:90:8a:c0:e7:
23:b7:a9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:36 2026 by rpki-client