
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
File: -NaTomlkzTxaGZ0sJu0iZHog534.mft (raw, json)
Hash identifier: vmiSFysWoQMHECFobn1yyIYqlY1W9myI/tOfN4Z3pEc=
Subject key identifier: 90:C3:1F:EE:22:A7:B4:41:4F:26:1E:0F:77:5F:66:A6:97:8A:4C:00
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial: 02F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
Manifest number: 02E0
Signing time: Wed 29 Jul 2026 02:11:48 +0000
Manifest this update: Wed 29 Jul 2026 02:11:47 +0000
Manifest next update: Wed 05 Aug 2026 02:11:47 +0000
Files and hashes: 1: -NaTomlkzTxaGZ0sJu0iZHog534.crl (hash: TGT/ybJACc9B2h6zVlCAEcR+R+FQKDPifGbC/35v+As=)
2: 256273EE355011EEBCB7D945C4F9AE02.roa (hash: d181Z1DYLcItp5l9IsZ1mcEBRFCLJxml8DnOv1hi/n0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF67, serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Validity
Not Before: Jul 29 02:11:47 2026 GMT
Not After : Aug 5 02:11:47 2026 GMT
Subject: CN=6a696163-1fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:c3:e0:8a:cc:be:7c:37:3e:03:79:9e:d5:
05:db:8e:f3:4c:d8:dd:1d:ad:fa:8d:59:c3:62:63:
33:6b:9f:7f:b4:27:dc:42:93:54:95:ad:d9:6f:3e:
8d:c4:a0:8f:e4:03:0a:5f:21:f8:3c:47:45:96:ff:
69:a2:ba:d8:d0:e9:5a:12:d2:f9:68:c4:1d:93:58:
20:e3:d6:b2:ba:84:22:41:87:2c:cb:45:d0:f4:4d:
0e:25:4b:df:ce:e2:3f:7c:ae:a2:e6:3c:08:97:e3:
7f:d6:9c:58:bb:66:9d:17:6f:f5:a2:da:83:0c:10:
c8:fe:3e:d1:ec:3e:45:78:18:df:de:83:bc:41:ae:
4b:e9:e6:2f:45:69:47:74:14:5b:6c:ef:26:a3:c7:
32:15:54:b6:82:b7:cc:9e:26:89:88:83:73:85:ca:
47:56:aa:c0:aa:4b:59:9d:e3:08:1b:d6:a5:a0:9c:
c1:43:1e:82:c2:3b:df:84:00:f6:47:66:a2:39:47:
e1:fc:d2:c4:c7:0e:b4:09:f0:96:bb:87:7c:6c:78:
5e:7c:0e:8f:e5:7c:ed:a1:27:b4:10:fa:13:4e:f9:
fb:af:63:6d:65:17:0b:1d:f7:be:6d:25:ce:2d:68:
39:de:0d:f3:bf:fe:b8:33:a9:c5:12:f2:35:b1:05:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:1F:EE:22:A7:B4:41:4F:26:1E:0F:77:5F:66:A6:97:8A:4C:00
X509v3 Authority Key Identifier:
keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:ff:f3:e1:d4:29:10:81:6e:54:be:01:2e:db:dd:92:19:90:
03:77:40:ae:d2:8e:85:5b:d8:e4:9e:23:f0:5e:f1:22:32:98:
e9:dd:6e:7d:c7:11:42:3c:96:d7:88:76:06:02:6d:7d:10:32:
ca:ca:f4:25:5e:9e:e2:54:49:2a:e8:b5:cf:31:6d:a4:a8:2e:
2a:3a:85:5b:d3:81:f0:6a:a1:61:87:2a:9a:97:9f:c2:d2:1f:
78:02:42:3c:08:79:b9:f3:d1:f3:f3:f5:a7:13:2b:6d:50:25:
0e:65:6f:05:8e:d2:6c:f8:7d:eb:53:a5:04:21:cf:d2:fe:e3:
86:2a:37:ff:40:5a:94:e8:8c:ef:7a:91:b1:c9:c3:48:d0:ca:
b1:57:f7:e3:bf:9e:91:b0:2a:1e:21:1c:0c:ed:85:9b:be:76:
5a:8d:10:23:9f:bf:52:3a:a4:56:c0:cd:39:de:fc:81:22:47:
90:8b:b1:67:a8:ff:0f:9e:30:46:b5:79:3c:c3:c0:33:3c:53:
fa:a2:02:3b:dc:d5:ee:d6:1c:3e:5d:89:e6:3d:89:aa:46:19:
d6:18:4c:ea:8a:4d:85:a8:b8:4d:50:04:84:4c:1f:31:f7:27:
c8:ae:2b:9e:16:e5:18:ef:07:b3:1d:3a:6f:e0:5f:42:27:38:
bb:89:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:57:32 2026 by rpki-client