
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
File: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json)
Hash identifier: 7slp8dRuCfVp7ChESeVG9f1M3Ta5uhkk7cS+canNWVk=
Subject key identifier: 1E:50:C9:CC:0D:CB:74:2C:6E:DC:01:6A:F2:F1:55:9A:14:EA:B0:A5
Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
Certificate issuer: /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
Manifest number: 36
Signing time: Wed 15 Apr 2026 08:10:02 +0000
Manifest this update: Wed 15 Apr 2026 08:10:01 +0000
Manifest next update: Wed 22 Apr 2026 08:10:01 +0000
Files and hashes: 1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: t6GBK+1Rdl18f4+LMkkte3EvJC+wti36H0W1mveeXPE=)
2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Validity
Not Before: Apr 15 08:10:01 2026 GMT
Not After : Apr 22 08:10:01 2026 GMT
Subject: CN=69df47da-9a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:e7:cb:7f:00:81:b3:71:87:f5:4b:fe:6d:
ce:94:b1:a3:9f:d4:8b:7a:84:5e:b0:dd:50:d3:8f:
aa:4b:0f:e3:84:5d:ab:5f:f2:f5:d2:5b:11:0e:76:
8e:df:cc:bd:d0:7c:85:fa:6e:1d:10:57:fa:52:b5:
f0:58:ff:0d:5a:83:18:49:6d:c7:a8:87:41:83:61:
00:b5:77:f8:e6:dc:25:49:f4:66:99:f8:d6:84:9a:
6e:2c:ab:7c:d4:02:81:c5:11:26:fe:28:3a:ec:5d:
e4:d0:cf:50:6b:9b:7e:8c:e4:f5:58:54:b0:9c:32:
91:30:48:25:73:1d:82:73:4b:9e:07:49:da:38:e8:
20:76:33:b6:90:7e:da:70:9b:3e:81:0e:8e:4f:4c:
de:ac:a0:5c:51:e8:6a:fb:c4:4f:c3:70:17:69:df:
8f:2b:5c:8f:de:c3:f0:fa:99:90:0b:0e:d5:d5:53:
06:33:d6:98:43:42:d2:6b:f4:bc:11:c4:0e:5c:07:
b7:73:10:81:1d:e8:28:67:ac:9f:0e:07:28:37:30:
ae:24:e9:44:7a:68:7d:05:00:49:61:96:30:e0:ea:
88:92:11:0f:c9:05:c6:03:c7:10:51:43:0f:82:10:
f3:69:99:11:65:34:61:29:ec:18:78:77:d5:13:d9:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:50:C9:CC:0D:CB:74:2C:6E:DC:01:6A:F2:F1:55:9A:14:EA:B0:A5
X509v3 Authority Key Identifier:
keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:a8:b3:7b:ec:d8:f3:18:80:f9:74:e9:a0:30:a4:0a:ef:38:
31:f9:a6:ab:ed:a8:cf:8c:0f:40:6d:4b:1e:68:e4:10:4a:39:
27:cb:e0:26:54:05:cd:8f:49:25:a3:dd:7e:d6:f6:98:4c:bc:
77:c9:34:f0:19:8c:b6:23:73:b7:ff:e0:1a:66:5c:3e:b5:70:
da:09:97:4c:7d:c3:2e:0e:41:60:43:d7:53:d9:af:a9:ee:b1:
e9:db:0f:38:84:ea:0c:54:c7:ee:df:a3:94:0e:b9:65:b1:c8:
7e:4a:76:e6:86:3c:53:bd:9e:f0:6c:be:3d:7d:84:e0:48:f5:
1e:5e:72:51:37:b6:dd:e7:80:61:74:ac:c3:27:44:8c:f7:c0:
7f:82:9d:22:d3:11:35:81:2f:2b:51:7d:47:28:95:07:11:a2:
9b:28:69:1b:ce:31:55:c1:1c:15:d6:27:30:33:36:db:97:03:
d2:3b:4d:a0:4b:ee:72:de:2c:56:4c:c2:25:b3:db:6c:aa:39:
03:e1:46:6b:f3:8b:e6:06:fb:d7:20:ae:34:0d:f5:ce:25:d7:
86:f5:91:07:aa:aa:46:6b:ee:1f:cb:1b:9c:9c:38:24:af:49:
fc:14:34:25:1b:63:3c:c5:24:66:6d:f1:2f:1f:74:fe:70:67:
14:e0:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:00 2026 by rpki-client