
$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier: byrXosHBKOP9UwAfRoFZV1FFEYDM+3drCi8LX8darlg=
Subject key identifier: 06:D3:83:3E:84:AA:6E:1C:B2:8D:9F:D8:A9:97:AD:E4:A7:FC:9E:DD
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial: 062E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number: 0627
Signing time: Thu 16 Apr 2026 22:41:52 +0000
Manifest this update: Thu 16 Apr 2026 22:41:52 +0000
Manifest next update: Thu 23 Apr 2026 22:41:52 +0000
Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: WyWscLVP3DVClF1hL7Ka9jqzV9wUlRpt7LUuennv5fM=)
2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: PwomU+D7WSzTyKJbENDcuXSXxZUfrB5PjKw8Vn35Qbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Validity
Not Before: Apr 16 22:41:52 2026 GMT
Not After : Apr 23 22:41:52 2026 GMT
Subject: CN=69e165b0-f52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:92:1b:95:20:0a:88:77:1b:a3:8b:3d:38:
32:14:20:8e:1a:69:7d:d4:93:54:f5:a8:67:4f:89:
72:0b:3c:09:52:30:ff:34:3d:cf:b6:86:aa:fc:19:
cd:f3:1b:7f:31:38:17:fc:5b:f0:43:50:a5:a7:77:
12:81:70:45:ca:6a:06:3d:6c:92:55:63:1f:a5:d5:
67:bb:8a:cd:7f:ef:44:c2:b3:24:f0:aa:26:ea:f1:
ac:fe:3f:6b:20:0b:7c:52:ce:f2:08:84:a0:55:d9:
c9:ad:b0:b7:6f:58:8d:e8:77:d1:9c:09:ae:65:66:
9a:8c:02:21:f7:c9:0e:34:97:16:39:4a:aa:36:1d:
58:a4:8d:fb:74:b0:74:22:c4:7c:5c:0d:37:9a:59:
44:79:99:a2:90:2c:4a:fa:65:fa:54:9c:ce:19:d5:
31:32:cd:1e:f7:4a:91:90:b7:b4:56:92:7d:b4:f6:
3d:a6:2d:cd:4c:d9:13:76:d0:a9:06:cd:0d:14:b9:
8c:f0:db:cc:89:11:b5:a7:dd:88:5d:5a:38:7d:59:
9c:73:6a:18:8c:bc:65:4f:a1:1a:3d:d2:f0:0f:80:
64:0f:b6:71:35:bc:05:a4:36:d9:fa:09:99:7b:96:
d0:26:37:f6:6e:12:91:3c:3a:73:4d:56:08:22:f5:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D3:83:3E:84:AA:6E:1C:B2:8D:9F:D8:A9:97:AD:E4:A7:FC:9E:DD
X509v3 Authority Key Identifier:
keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:b9:5d:8b:9a:e8:3d:29:ad:8d:0f:c7:0c:fb:b6:23:39:4c:
f5:05:97:e0:b7:56:14:8f:cc:4e:cb:34:de:00:34:ee:a6:10:
08:01:a5:45:3f:7f:c7:80:3e:2b:50:41:1e:49:9c:37:b7:66:
89:ca:07:13:e7:94:32:c7:b1:07:16:ab:39:63:cf:55:48:14:
f4:72:5b:1c:85:91:05:11:35:f6:e2:9f:65:fd:c8:0f:27:77:
93:b0:6f:4f:87:a4:d2:50:56:81:14:f8:e4:53:fc:0f:33:38:
94:66:7e:9b:83:a5:0a:22:5b:ba:8f:d8:62:77:d1:e7:88:2e:
0b:10:4b:fe:59:fd:9d:13:72:76:40:ad:3a:0a:3a:d1:de:88:
31:2c:fa:c7:01:26:79:93:9c:a3:9f:d4:eb:db:2a:25:c8:f3:
51:8c:d7:44:be:f0:86:43:9b:11:83:66:0a:95:75:53:c2:46:
e8:0d:d5:6f:4e:15:1a:61:a2:e9:f5:3a:b9:db:06:02:5f:f4:
d1:57:e7:fa:34:0e:13:6b:2e:61:1f:07:ea:95:40:d6:ab:44:
8f:65:04:0a:63:1b:10:8b:dd:c3:8e:f3:b3:37:11:7a:cf:b7:
79:4e:92:36:83:d5:79:e9:36:1d:60:57:68:d3:49:73:01:e4:
22:7b:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:50 2026 by rpki-client