
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
File: -NaTomlkzTxaGZ0sJu0iZHog534.mft (raw, json)
Hash identifier: RONIA8GlBJ5pgtp5snmIm1FvGv+wESHVj3nGY1/Zasw=
Subject key identifier: F6:EE:C0:34:87:01:09:3F:CD:97:3E:98:BF:C2:44:8F:C7:31:5C:2D
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial: 031B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
Manifest number: 0306
Signing time: Fri 09 Oct 2026 01:22:37 +0000
Manifest this update: Fri 09 Oct 2026 01:22:36 +0000
Manifest next update: Fri 16 Oct 2026 01:22:36 +0000
Files and hashes: 1: -NaTomlkzTxaGZ0sJu0iZHog534.crl (hash: 0NkDgxS5cWWLTcTpXwscBd+e6G7xyHhVAvvRFVko/k8=)
2: ZS-ppPjt8opYJHcdG7fYKHkDkZo.asa (hash: MLD41Ka89WGkgVftoVmQ8WO7uVk8k1eWEGfBvHuaahM=)
3: 256273EE355011EEBCB7D945C4F9AE02.roa (hash: d181Z1DYLcItp5l9IsZ1mcEBRFCLJxml8DnOv1hi/n0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 795 (0x31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF67, serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Validity
Not Before: Oct 9 01:22:36 2026 GMT
Not After : Oct 16 01:22:36 2026 GMT
Subject: CN=6ac841dc-2ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bf:0f:1b:40:43:d9:a3:7e:ad:ef:1c:4b:fa:
fe:c0:5f:11:45:f1:e3:c8:71:99:d3:8b:89:89:d6:
e8:eb:02:6e:3d:eb:bb:27:4b:f1:c3:94:57:53:2d:
8b:bb:1d:cd:70:e1:37:af:bb:a3:4e:8e:73:c4:69:
e6:c1:b9:81:d5:e5:8a:4e:45:80:79:89:58:76:87:
03:d5:a8:b0:09:19:40:4d:cc:a8:75:41:df:34:ef:
41:71:c2:f8:34:07:ef:06:1f:76:66:3e:2a:2e:2a:
88:8d:05:bc:d6:9d:21:bb:96:29:78:d8:17:fd:4a:
57:fb:a7:e6:d1:02:e5:63:b0:71:c8:bd:86:d3:86:
67:d2:91:6d:ba:15:e9:0f:54:d2:6f:7b:8e:08:a7:
a6:c1:70:f4:7a:cc:3d:ab:31:19:ce:8f:cb:b1:98:
6e:06:ac:41:eb:4b:81:d8:dd:d3:37:de:fb:fa:1a:
b6:02:bf:af:e1:eb:56:6a:28:9c:9e:81:6e:5f:5f:
61:45:a5:f0:cf:c5:30:f4:57:90:4b:fe:70:36:95:
f2:77:0e:56:01:9d:59:b9:83:81:2a:3e:6b:ee:24:
5d:4d:55:10:1e:68:bd:93:15:ff:8e:e6:c8:ea:95:
b7:59:15:59:dd:44:48:19:c1:39:e6:a0:23:8f:a0:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:C0:34:87:01:09:3F:CD:97:3E:98:BF:C2:44:8F:C7:31:5C:2D
X509v3 Authority Key Identifier:
keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bb:fb:89:95:34:01:05:53:7a:9c:f6:07:9d:8a:09:53:47:
ef:05:ab:70:03:3e:48:c5:e3:96:ff:a0:05:53:0e:13:ba:2c:
29:b6:03:fd:fa:fc:51:45:17:3a:7c:86:24:64:0b:53:0a:19:
8b:e4:6e:0a:ca:81:fa:8c:c4:a5:99:d4:8a:22:27:61:25:a4:
4e:b2:51:4e:35:96:d9:9b:b6:c2:e6:c1:a9:b2:34:d5:ef:29:
3a:a7:6f:fa:19:da:ea:0a:20:4f:cc:3f:0d:cd:6e:c0:6b:ac:
9a:5d:78:99:3d:37:e1:da:e9:5b:04:84:1e:e9:88:da:4e:d0:
20:63:b8:53:66:ac:20:8d:24:b3:6e:61:9b:ed:90:74:eb:51:
63:a5:38:a5:36:40:b5:47:d1:31:66:55:a6:4d:d6:2e:1a:21:
9a:2d:2a:e6:2b:f1:23:12:84:0a:f3:b2:6e:48:75:20:ea:ae:
ed:ca:b1:ce:20:9c:20:ab:38:6e:91:02:69:f7:36:ed:5f:60:
c3:b3:fd:5a:59:7d:ec:9b:10:44:00:66:f1:f9:d5:19:5d:75:
4e:11:fd:bf:da:8a:ca:47:cb:21:fc:9c:ea:2e:eb:4d:aa:7a:
67:1e:1e:00:a8:39:80:31:53:13:8d:ec:07:8a:7a:34:2a:53:
dc:29:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:47:50 2026 by rpki-client