
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft
File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json)
Hash identifier: 4S2pvjmpw2MzfSW5oXaWSS0nIV33weNi5/q358UU3dc=
Subject key identifier: 52:78:0D:3C:DC:8C:E2:2D:24:39:B2:99:FD:7B:D4:B3:34:55:75:B9
Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26
Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft
Manifest number: F2
Signing time: Fri 17 Apr 2026 06:00:30 +0000
Manifest this update: Fri 17 Apr 2026 06:00:29 +0000
Manifest next update: Fri 24 Apr 2026 06:00:29 +0000
Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: z4z4YlcExMWh7MEM1uGTbKdtr5ZCfGJYTaEbfmrWYoI=)
2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: VXJPLa2QkwTK9qAfsf4K4gTbZZAIxfCK2fVcEe5zOgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl
rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476E2, serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26
Validity
Not Before: Apr 17 06:00:29 2026 GMT
Not After : Apr 24 06:00:29 2026 GMT
Subject: CN=69e1cc7d-6ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:c7:f3:e7:b6:b7:09:6b:3c:86:f4:4a:53:
ec:b4:42:2d:42:cc:83:0b:86:b1:34:8f:b2:65:8f:
78:8d:2d:23:35:92:e2:f7:6f:43:70:cf:d5:ec:d5:
71:f7:d6:e9:dd:e9:60:71:1c:d3:99:5c:91:e8:a7:
5c:83:df:3a:74:b2:7e:de:b8:5c:3c:4c:79:86:8a:
56:15:ef:03:0a:75:0f:c3:0f:19:05:54:09:71:ff:
f8:56:3a:b3:90:84:3a:cf:98:7f:3f:30:fb:d1:57:
26:bd:e2:58:a1:46:09:a2:8d:59:31:2a:7c:54:9b:
e8:da:c3:88:ba:b6:90:50:13:1a:b0:fb:41:45:5a:
25:e6:7c:1f:37:a6:da:c9:33:9b:4c:f6:f7:a9:c5:
87:96:40:48:4c:3e:a6:7c:4e:13:8e:57:b4:d8:16:
cb:9a:f3:04:b3:c1:37:b7:c5:3b:dd:2d:24:81:7f:
1c:99:02:38:48:94:10:f2:cb:54:01:35:73:50:c6:
21:53:d1:df:51:2b:bf:df:1e:fc:a9:66:af:31:f5:
80:18:b7:78:03:01:be:9c:47:4c:a2:0a:32:37:3c:
06:f8:a5:bd:0b:8c:51:17:a8:a3:f3:43:38:ff:6c:
d5:f1:09:9c:7c:cf:92:11:c6:fb:2d:c8:74:ff:43:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:0D:3C:DC:8C:E2:2D:24:39:B2:99:FD:7B:D4:B3:34:55:75:B9
X509v3 Authority Key Identifier:
keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:54:3e:16:c2:ca:4f:56:ef:a2:17:68:4b:84:d9:83:ec:ab:
95:38:66:ca:89:9c:7c:b2:1d:ea:f9:95:03:cf:d9:61:97:ce:
d0:2e:67:e8:ec:ed:c7:0e:17:05:3f:ef:08:1b:f9:e1:74:1f:
d1:59:f5:fb:ff:7a:7d:7b:68:3b:15:1d:6f:de:57:db:be:7d:
98:24:05:28:0c:e6:06:34:3c:68:7c:0a:f8:05:a9:e4:e1:20:
17:b1:d4:c3:19:fb:dd:48:69:1b:dd:8f:f2:a5:93:ac:cf:5b:
70:55:4a:d6:3e:fd:c5:75:12:dd:30:28:3a:cb:38:c2:30:ca:
07:a7:bd:2d:e0:95:8c:58:2b:68:86:00:d6:26:46:25:3f:e5:
e6:05:24:ac:98:5c:70:87:09:dc:4d:68:91:d7:44:bd:de:34:
84:ec:48:00:0f:86:56:35:61:62:7e:6f:39:69:27:25:bd:e8:
12:d6:1f:3f:05:f9:fb:e7:13:97:4b:ec:aa:6b:77:4a:60:93:
33:dd:d5:40:6f:d3:c3:51:9e:e2:9e:b6:28:fe:60:a6:d6:d8:
c6:69:77:41:e4:0e:ee:3b:37:57:4b:e0:39:b0:16:1c:7a:4c:
ec:b7:62:47:33:61:96:1a:bc:89:fe:72:a4:8a:ed:a2:39:72:
88:fd:ac:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:05 2026 by rpki-client