
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json)
Hash identifier: JHaxvxeKCRkoxG6nDUpUd3+Ep/ZVcFV9UcvMG8He0OI=
Subject key identifier: 4C:9A:5F:EA:E9:19:A8:A5:7B:CC:B6:D9:E3:19:95:6A:8F:94:2A:64
Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Certificate serial: 0D5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
Manifest number: 0D42
Signing time: Fri 12 Jun 2026 18:02:01 +0000
Manifest this update: Fri 12 Jun 2026 18:02:00 +0000
Manifest next update: Fri 19 Jun 2026 18:02:00 +0000
Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: KxdZ9d4IzlWn2YiVsGG7QGhFTJProwl77wPscR4ZBaU=)
2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: Ra9KeGGoq4qKoY1lvMm4sJXsGfKv+RNnldeY/mU1RTs=)
3: B647F704090C11EFB666C967C4F9AE02.roa (hash: nMJlJs5RVl9hK1ao5B9tFWVbxrXwgcmPLTkIzplwg3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Validity
Not Before: Jun 12 18:02:00 2026 GMT
Not After : Jun 19 18:02:00 2026 GMT
Subject: CN=6a2c4999-5242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:d7:e0:60:e0:5f:41:21:cb:9f:19:28:1e:
58:ee:8e:e2:ed:ab:ef:48:05:4f:44:7b:1a:bc:81:
1f:e0:4e:2a:50:98:a4:51:9b:62:69:1a:89:dd:0e:
9f:ac:e7:ea:ed:28:26:fc:31:46:e2:06:d6:7f:d9:
02:2e:db:f3:68:17:c3:50:51:d4:9e:c6:50:5c:f8:
b8:4a:a4:aa:e5:eb:51:75:e5:a7:b1:84:dc:d2:05:
9d:01:ca:f4:75:a4:34:15:ab:78:a2:24:53:3c:d1:
6c:4c:bb:79:25:e2:2c:33:f9:12:1b:d1:ef:81:24:
58:cc:ad:2b:93:a2:7a:1d:96:50:3b:34:ba:2d:10:
ad:e7:95:37:cb:81:fb:c7:1d:1d:37:27:ec:08:4f:
53:84:f2:4a:76:85:1c:f9:44:15:1a:91:09:7d:2e:
87:48:65:aa:af:43:c9:85:30:79:d6:ad:18:59:64:
87:59:fd:de:af:23:94:f1:fd:b6:aa:85:80:1e:bb:
5d:9c:53:27:76:03:8c:09:48:ce:41:da:78:70:e6:
81:3d:c0:e5:aa:e3:7e:15:17:e4:53:95:0f:0e:75:
2a:a9:d6:fd:d7:0f:15:b3:a3:5f:e7:bd:70:25:ec:
43:7c:c6:93:6e:47:75:18:a7:7f:9f:4f:a4:25:2f:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:5F:EA:E9:19:A8:A5:7B:CC:B6:D9:E3:19:95:6A:8F:94:2A:64
X509v3 Authority Key Identifier:
keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:17:64:a1:30:32:3c:e8:1c:6d:50:25:20:66:dd:fb:29:9e:
47:07:fb:01:93:27:b9:bf:5e:b3:36:57:b6:2c:47:fc:9a:4f:
55:cb:23:57:9a:7a:1e:75:6d:82:fe:6b:33:19:5f:b1:ae:45:
76:d9:49:f8:83:89:6f:93:04:fe:17:bd:50:76:ad:c9:ab:9d:
55:99:92:89:77:b0:bf:69:c6:1c:14:b0:52:72:9f:d6:62:78:
b8:f4:27:d5:91:90:01:e2:01:cb:d6:33:a6:1f:55:0e:45:1f:
17:d8:ad:2a:74:67:18:f6:a6:a5:57:2a:ca:22:9e:f0:c2:17:
af:5d:8e:29:5d:a5:bd:7f:88:5f:1d:00:06:0c:65:f2:f7:3f:
48:e1:78:45:cc:af:d9:f1:1a:42:a8:ad:bc:38:a3:bf:34:13:
d6:1a:08:64:2a:d3:c4:bd:85:b3:43:58:1a:bc:7f:12:aa:92:
59:db:42:64:52:1c:33:d0:ac:89:f0:39:bd:8d:85:69:91:e1:
8e:22:18:7d:2e:da:8f:46:bf:81:61:a0:1c:7f:7a:05:30:8f:
cc:9c:2a:2e:82:5e:c9:9d:08:1d:84:74:51:8d:33:2a:27:aa:
07:62:1e:6c:85:e9:69:27:75:46:20:57:0b:c8:4b:f8:6e:d0:
29:47:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:28:31 2026 by rpki-client