
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json)
Hash identifier: SgF4pIiUZaTIcQxafVdcThPlyaqR+U8fcH1exxKKAKY=
Subject key identifier: 8D:02:4C:F4:AB:BF:22:30:FC:7A:03:D9:6C:03:53:41:95:CB:90:AA
Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
Manifest number: C0
Signing time: Mon 27 Jul 2026 09:05:18 +0000
Manifest this update: Mon 27 Jul 2026 09:05:18 +0000
Manifest next update: Mon 03 Aug 2026 09:05:18 +0000
Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: IcxNccHZjyJGwM9owqJOCMEpzkRiPQdfP5gdG5y9AtQ=)
2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: rrBoaZeZAYohnofQuu333DPGl97BqUXv9lxtd9Vptcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Validity
Not Before: Jul 27 09:05:18 2026 GMT
Not After : Aug 3 09:05:18 2026 GMT
Subject: CN=6a671f4e-498e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:1e:84:8a:5a:d4:72:34:18:2a:84:c3:28:
b3:54:79:da:64:e4:99:66:d4:8a:a3:17:ba:f0:3d:
1b:79:50:9f:8a:e2:11:c8:ef:8f:d7:7c:2d:04:32:
44:1c:26:75:7c:c1:2d:e2:9e:5f:de:fc:f3:11:6b:
a3:f5:1c:96:9a:ba:3a:7b:26:23:0f:54:b1:25:c8:
1d:21:01:15:25:5b:2b:60:61:6c:ec:bc:40:8b:8d:
50:e0:94:23:82:e5:a1:5b:de:0b:ce:cb:49:7e:3b:
29:64:a4:55:8b:f1:86:6a:e1:e6:38:cc:af:fe:71:
de:ac:68:78:86:af:54:ca:2f:c8:c9:a9:b2:d4:20:
89:5d:7c:66:3d:d2:05:b1:c6:15:e2:9d:9d:04:e8:
28:fe:ba:b1:ed:48:9b:4d:77:16:2d:97:56:3d:a5:
7a:00:83:03:36:e3:83:fb:29:cc:67:69:9f:f9:71:
5c:22:84:6e:6f:db:95:0b:6a:8e:c5:c1:e2:09:0d:
f5:97:54:7a:cc:9a:1a:39:44:01:97:30:4a:bb:5d:
3a:fe:be:7f:c6:c1:dd:d4:76:16:e6:a2:c9:84:df:
82:fd:5b:84:a8:49:d9:0e:0a:b2:ba:c9:df:c8:7f:
f7:af:da:c0:ff:a5:97:2f:f1:8e:dc:81:a8:b4:dd:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:4C:F4:AB:BF:22:30:FC:7A:03:D9:6C:03:53:41:95:CB:90:AA
X509v3 Authority Key Identifier:
keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:57:be:12:96:2d:a9:3e:3c:bd:db:1c:93:69:ec:c5:1a:04:
93:18:85:92:33:e2:d0:08:9e:79:8d:87:af:4f:74:56:15:53:
40:8a:8c:f0:e6:6a:c6:e7:87:5e:ac:42:a0:a1:cd:76:89:ad:
67:fd:98:da:9e:15:13:12:7b:46:ad:17:cb:6e:31:0d:50:3e:
c7:b7:41:52:98:6d:85:80:6a:e3:ef:5b:bb:ee:17:2d:6b:02:
6e:6d:fc:92:c6:77:ee:78:28:ff:eb:f8:17:b1:6d:5d:83:e6:
69:cd:e4:1c:7a:ad:55:e4:f6:cf:f5:44:58:cd:c0:5d:1e:c6:
7f:fc:93:22:bf:49:53:18:f2:32:86:71:13:1b:05:da:03:da:
14:ff:1a:78:6c:e1:42:3e:ed:8f:2b:4f:61:83:62:49:38:8e:
04:25:cb:8b:7f:12:c3:6d:7a:d9:1e:47:47:7a:c5:bd:25:e2:
1c:9b:02:a5:92:91:da:32:f2:93:8e:60:48:d7:71:9d:d6:c4:
7a:7e:cd:3c:95:cf:90:af:bb:02:a1:0f:83:9b:fa:ce:8a:e5:
25:01:14:de:fb:e5:64:07:26:b3:2a:6f:33:dc:7b:7a:a8:ac:
04:20:a2:fc:d6:7c:e6:84:d8:12:45:db:74:78:19:57:1e:b6:
1d:06:17:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:34:42 2026 by rpki-client