
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json)
Hash identifier: a/iP0wf+P66BG5dtFToEKXk/OqHJzfC9oiMfXvs8ock=
Subject key identifier: FF:FB:BD:D1:85:7A:3E:F9:84:E8:57:4E:E9:BB:86:7D:9A:4B:4D:6F
Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
Manifest number: E1
Signing time: Fri 25 Sep 2026 06:38:50 +0000
Manifest this update: Fri 25 Sep 2026 06:38:50 +0000
Manifest next update: Fri 02 Oct 2026 06:38:50 +0000
Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: PL548467GmKs8+F5SeIIK6sFZ+BiJMx2icHJuTpHEs4=)
2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: kENDVh6RH1qeZlCkf0uhEn8QDOreUtcC3M+ErBdzcRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176
Validity
Not Before: Sep 25 06:38:50 2026 GMT
Not After : Oct 2 06:38:50 2026 GMT
Subject: CN=6ab616fa-b741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:2e:56:d7:15:4b:df:6e:7a:e9:73:b0:46:
af:4d:c9:1e:b1:2b:45:01:91:c8:59:f4:7b:61:e9:
df:d3:f6:6b:11:51:82:49:cc:93:57:2d:59:d9:a8:
aa:71:59:ee:f5:13:aa:c2:11:37:a1:61:3b:53:aa:
c1:df:a2:dd:0d:a2:06:4e:de:a8:52:8e:02:c1:d0:
f7:84:c9:86:7f:a0:de:83:a4:c9:5a:4e:bd:89:26:
d3:60:21:e5:41:d4:c4:68:bd:74:de:cd:4f:1b:00:
3d:8a:ed:cb:2f:a3:4a:df:c7:f6:fd:33:8e:7d:24:
18:49:26:97:c0:ba:31:29:c6:a7:b9:86:36:f9:92:
42:95:47:36:f1:36:ab:3b:94:93:a2:90:85:16:66:
30:48:bc:4c:d8:cb:8b:56:2e:db:bc:58:94:f5:55:
c1:90:09:b7:e4:a9:9e:ba:e6:aa:46:c8:82:34:6e:
b5:db:a1:15:00:05:29:79:ee:00:05:d6:f5:37:f7:
46:c4:4f:4f:86:e6:42:22:da:4d:35:8b:44:0f:ba:
eb:81:5e:ea:ad:f8:71:0c:88:f7:58:2a:2a:3e:c4:
7f:ee:e1:ba:68:ea:1c:98:60:e2:8a:ec:52:24:aa:
fb:5a:e9:d5:5c:26:f1:44:31:a0:77:ad:7c:45:a2:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FB:BD:D1:85:7A:3E:F9:84:E8:57:4E:E9:BB:86:7D:9A:4B:4D:6F
X509v3 Authority Key Identifier:
keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5c:a7:f2:7b:50:4e:f6:a1:13:9f:21:39:74:db:d7:92:31:
6f:40:33:ea:15:36:e8:e6:60:0f:b1:ba:e4:f1:c5:c6:cb:cb:
e0:49:e0:2d:55:cd:08:94:df:24:07:ac:ab:8d:ea:85:2e:9b:
11:bd:cf:75:45:05:38:9b:b8:3c:8d:1d:d0:f9:5f:41:cc:c3:
ae:5d:a4:78:af:1d:90:b2:c4:de:40:e6:2e:09:1b:29:00:94:
50:fd:0a:97:ab:6f:0e:89:48:36:8c:72:2c:ad:3c:6e:13:4a:
65:13:16:03:be:18:2b:e3:0b:4d:5b:dd:1b:bd:2b:82:3f:f9:
73:f9:01:11:0a:de:bb:2b:3d:24:7c:58:4b:e3:e2:f8:19:0b:
1e:73:47:04:a9:81:f2:0e:99:ea:6a:94:b1:07:6a:3b:9a:0a:
ce:62:88:23:79:60:bf:0c:ae:29:9f:7d:a3:f3:dc:31:8c:a7:
88:6e:36:84:41:5f:c1:75:0d:c1:bd:09:d2:cd:e2:6a:0c:0a:
5c:70:53:d7:c4:74:4e:6b:ad:9c:16:e3:06:97:29:a6:75:9f:
45:c2:88:65:c3:3e:0e:00:06:6a:94:07:04:77:5d:f9:14:40:
d5:8b:7b:89:60:4f:32:43:27:e4:ea:cb:7f:31:a1:47:6b:c2:
da:b4:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:59:03 2026 by rpki-client