
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
File: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json)
Hash identifier: 2Dqrahwfh1DGq4C4EbOpQMVu5cfFda0sapu11nPJIhA=
Subject key identifier: F9:01:CF:78:21:A4:FC:22:2F:AB:06:03:6F:88:92:0D:E6:E5:D4:D1
Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
Certificate issuer: /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
Manifest number: 85
Signing time: Sat 19 Sep 2026 07:41:17 +0000
Manifest this update: Sat 19 Sep 2026 07:41:16 +0000
Manifest next update: Sat 26 Sep 2026 07:41:16 +0000
Files and hashes: 1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: o/xVQpAqwIDxgQkgEWxJuRMp7cmttkJrolfSKZJhLes=)
2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 07:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Validity
Not Before: Sep 19 07:41:16 2026 GMT
Not After : Sep 26 07:41:16 2026 GMT
Subject: CN=6aae3c9d-c3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:e1:4e:a3:09:3e:7e:d1:b0:07:5b:b3:ee:
f6:10:00:6c:ce:20:e3:ea:94:dc:50:49:f7:03:94:
e6:45:ef:68:d3:8f:8a:58:f3:d3:55:f6:8c:5b:19:
7d:48:02:b6:ec:b6:8e:ea:69:07:57:d8:38:25:3d:
8d:18:c1:73:1e:da:24:90:01:02:2e:44:fa:28:cf:
84:03:dc:88:17:50:57:73:4c:d8:fd:f4:2a:78:b5:
60:1f:72:4d:d7:71:cd:21:b0:8a:85:a1:32:86:5a:
b7:33:50:a0:90:a5:17:1b:4f:e2:2c:e7:4a:ec:e9:
fc:f1:9f:4e:0a:2b:9f:ed:39:92:c8:7e:08:c5:54:
a6:66:41:2b:6f:a7:8d:0e:98:0e:a2:46:da:30:57:
69:1c:3e:31:44:fc:bb:09:84:90:2c:a0:ea:00:e7:
3c:42:70:ed:5c:f0:c3:c9:2c:e3:96:fd:4a:27:11:
e6:55:c3:9c:ae:b8:2c:5d:7e:8f:fc:76:31:6e:44:
7f:8d:cb:d0:4d:08:c1:da:07:a9:24:93:97:22:40:
19:f9:e8:d8:4a:a8:8b:5d:7d:9d:58:02:e4:63:73:
93:c8:f6:a4:bd:14:16:f2:0c:c8:c9:2f:a1:b3:d0:
cc:bd:3b:8d:e1:d7:33:07:7f:32:11:21:59:83:72:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:01:CF:78:21:A4:FC:22:2F:AB:06:03:6F:88:92:0D:E6:E5:D4:D1
X509v3 Authority Key Identifier:
keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:29:c8:d9:2d:af:04:19:f1:bf:a5:5c:c3:3a:d3:a8:2c:57:
74:aa:dc:be:85:56:e8:fe:a7:f7:e9:5c:1a:43:4b:8d:35:ca:
35:0a:5d:81:1d:06:22:ae:42:18:87:65:90:64:a6:e9:74:a5:
b3:02:ee:4a:a2:cf:fd:5b:a5:1a:eb:d8:dd:8f:6c:e7:6f:99:
9f:c1:df:0f:1a:20:cd:2e:fa:aa:0e:a9:aa:e1:d6:44:e8:2d:
cc:a7:e8:59:2a:81:1b:c5:11:d5:67:c8:ba:97:68:66:bb:45:
c7:fd:38:0b:23:da:16:32:fd:c9:91:4a:6b:05:ea:6e:12:8b:
82:1d:34:ae:0a:c2:3b:62:bb:df:cc:16:25:b8:29:35:d9:25:
25:f5:68:aa:ed:82:1b:30:73:88:43:92:18:e4:b9:71:d9:b8:
ad:b3:ef:5d:26:2f:e4:85:24:3e:40:82:63:c8:c0:2a:08:67:
6b:b9:83:4f:92:e5:bd:02:27:2d:5a:32:07:98:47:02:10:1c:
0c:23:9c:c4:09:fe:38:70:d7:a8:d6:f1:72:1d:47:6a:b7:17:
7a:7a:99:af:8e:b7:c5:41:b7:52:09:b1:67:89:f4:4c:48:fe:
7e:06:b7:64:82:b6:1a:a6:e3:e2:85:0d:cc:43:3a:72:63:9f:
1f:c9:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:31 2026 by rpki-client