
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json)
Hash identifier: +wlN1QyYsE3wxXGeMb9pWt9wApxyS6pXjNvZyEGn2Zc=
Subject key identifier: 72:36:52:D4:8B:F5:E0:33:47:D8:C2:76:03:2D:33:B4:6C:F6:86:8C
Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Certificate serial: 09E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
Manifest number: 09DB
Signing time: Tue 28 Jul 2026 20:11:22 +0000
Manifest this update: Tue 28 Jul 2026 20:11:21 +0000
Manifest next update: Tue 04 Aug 2026 20:11:21 +0000
Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: 894WjuQMBd1Xvl46dyr8Br/dmVMQimUU75Z0bZtkjWI=)
2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: Ym9v48/N9FgIEUzCm6Ez2GZBz/gUxKfUxMymr1ze1Bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl
rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Validity
Not Before: Jul 28 20:11:21 2026 GMT
Not After : Aug 4 20:11:21 2026 GMT
Subject: CN=6a690cea-314d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:1c:e7:61:ed:b6:6e:90:53:69:eb:6f:fa:
9e:b9:e4:6f:87:e7:bd:9e:02:40:a1:2b:fd:fb:9d:
db:56:97:f1:46:33:90:08:b9:9a:a6:95:09:33:db:
80:f3:78:61:25:db:ae:b7:75:9e:99:e7:b3:f0:df:
56:e1:ba:ef:09:d5:b6:4a:4a:c6:7c:ab:75:16:53:
bd:c7:ab:c2:c2:f4:33:90:0c:c8:08:cc:92:89:00:
16:23:3f:22:78:3e:75:70:03:11:4b:58:95:aa:1a:
4f:21:7d:ff:84:00:43:57:de:e0:c3:27:cc:07:d8:
2d:11:7c:91:f8:c3:13:38:cc:88:b3:13:b0:25:88:
36:bd:2c:57:a1:f9:16:41:a9:65:15:73:33:f4:8d:
03:f9:f2:39:79:15:6e:29:ab:1a:4e:01:15:78:51:
e8:e8:7c:24:82:b0:ea:2f:95:57:6a:79:b4:ee:c7:
5e:1c:d2:19:43:5d:15:a6:7a:cc:91:99:aa:f9:11:
9b:70:90:21:1e:72:63:31:fc:9f:d9:fa:e8:0c:8e:
8c:c5:b6:73:b2:1d:70:80:ea:26:50:e8:b5:79:c8:
e2:d8:21:9c:fe:e7:cd:94:6b:e8:54:80:29:59:d6:
24:b5:bb:4f:0c:71:e6:a2:bb:17:25:0c:79:25:ae:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:36:52:D4:8B:F5:E0:33:47:D8:C2:76:03:2D:33:B4:6C:F6:86:8C
X509v3 Authority Key Identifier:
keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:09:a6:ad:31:93:25:2d:12:30:0b:a1:24:97:ca:7b:cc:b9:
37:ff:49:f1:e0:7d:f0:c8:ce:8e:c6:14:a2:dc:32:d6:f9:3c:
e6:b1:ed:c8:ab:d6:ce:87:e5:b8:d8:aa:c4:c3:f1:61:96:1e:
72:03:a8:19:52:d1:9a:da:c0:ab:8f:cc:e2:93:15:91:f9:a9:
0e:6d:be:83:a0:e4:24:f7:c0:73:e7:17:87:a3:97:b9:c2:93:
1e:4f:ff:2b:50:79:91:a9:3c:b5:ac:e8:5b:9a:18:0d:1c:f0:
fb:54:20:97:18:d2:e2:30:7c:e9:f1:66:a1:b4:18:cb:ab:5c:
97:a6:1c:33:ee:39:9d:64:b7:6e:fe:90:ac:f7:e9:83:0c:6b:
71:db:4e:fb:7f:e9:e2:a8:fe:f2:e9:d2:2a:39:e7:13:07:4b:
7e:e9:ae:0b:0f:40:aa:a1:8d:c3:53:d4:bb:7a:f4:3f:3d:65:
e3:d0:79:26:ce:20:63:3b:f2:ff:cd:d6:84:b6:70:dc:5a:2e:
5d:c4:a0:24:51:03:b3:e8:ef:58:c7:0a:4d:6c:bc:9c:0a:2e:
b5:f2:b4:8a:a1:75:07:d9:b6:32:fb:02:21:20:b3:45:65:9e:
e2:3e:96:b5:c8:dc:ad:81:b6:cb:76:ef:f6:7a:62:c8:fc:58:
ec:bd:a0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:57 2026 by rpki-client