
$ rpki-client -vvf rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft
File: nqxU6fn1nmg49IRgQhBWMwZtII4.mft (raw, json)
Hash identifier: M0QfJJqlgjztau3F2JOpbFAN+newrvwWm5IqKDrraMA=
Subject key identifier: 3F:82:AF:88:97:F9:71:44:24:10:D0:B1:1C:B7:F6:E7:BE:96:95:D5
Authority key identifier: 9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E
Certificate issuer: /CN=A91570D9/serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft
Manifest number: 81
Signing time: Fri 17 Apr 2026 07:24:52 +0000
Manifest this update: Fri 17 Apr 2026 07:24:51 +0000
Manifest next update: Fri 24 Apr 2026 07:24:51 +0000
Files and hashes: 1: nqxU6fn1nmg49IRgQhBWMwZtII4.crl (hash: XRg1bHBpPT6ordwMkC6TT4ttvYRKmOdrFupUUpxvsLA=)
2: AA3F24B67D8011F083953324C4F9AE02.roa (hash: jpFnK8zVyNjnf/ogEum40gO9rvhMUFJcUISF9Dfv6jM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl
rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91570D9, serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E
Validity
Not Before: Apr 17 07:24:51 2026 GMT
Not After : Apr 24 07:24:51 2026 GMT
Subject: CN=69e1e043-ea54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:d2:87:e7:ec:c5:f5:6d:d4:10:e7:78:5b:
ec:a9:47:e6:ac:ea:28:8b:4c:7c:9d:7f:b2:11:1e:
3f:cb:68:c1:91:a3:a2:7e:25:cf:59:26:e7:fa:e6:
37:3f:b3:50:c1:e8:8d:83:d3:39:c7:d0:40:c7:8f:
9f:a2:c1:dd:a9:9f:df:49:31:c7:53:02:f9:d6:15:
84:06:49:1d:ef:57:51:40:57:df:d6:98:6f:c6:d2:
10:e7:fd:39:3f:cc:c0:f8:30:75:bc:eb:40:26:d4:
d4:4d:43:cf:73:a9:34:10:c5:cd:8a:d5:34:37:cd:
51:0f:6e:36:97:7a:a9:8c:fd:2f:9d:a3:a9:be:b6:
d9:bb:4e:be:8d:9c:58:f7:66:42:ff:05:70:82:47:
ed:6a:8e:7b:07:83:d4:a3:9b:4c:c8:3b:83:93:75:
a3:57:bc:51:f4:4e:af:12:d7:70:cd:28:c0:9c:3d:
d9:fd:e2:d4:78:e2:ae:b6:9a:c3:df:ba:78:87:87:
e3:c4:da:74:09:86:51:c7:83:da:19:c7:24:2b:f1:
2f:ad:cc:cd:46:02:06:95:24:42:8a:cd:a0:2f:26:
4d:78:7c:e1:25:d3:25:bf:80:27:fc:8b:9b:4d:87:
0c:cb:51:62:e9:09:f1:0e:d0:c8:fe:a0:31:bb:5b:
51:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:82:AF:88:97:F9:71:44:24:10:D0:B1:1C:B7:F6:E7:BE:96:95:D5
X509v3 Authority Key Identifier:
keyid:9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d0:2f:35:27:08:d0:72:21:fc:93:5b:30:7e:0f:92:55:77:
d7:70:7f:52:eb:ab:6f:b9:58:87:e5:13:6a:4f:36:ad:69:0b:
dd:34:77:17:ee:df:d4:93:ec:13:c7:a3:3a:64:a1:f9:f3:1a:
e1:cc:12:c0:da:21:0d:b3:a6:ea:10:81:67:95:1d:1a:f5:54:
b1:a7:35:2c:1b:40:68:f6:9c:9e:6d:91:3d:07:a8:53:c6:50:
f8:c3:12:b0:41:c3:90:8e:45:4a:a0:97:06:1d:00:0f:eb:63:
3c:da:73:eb:fb:50:44:14:a9:8b:39:80:4d:70:2c:d7:8c:cd:
ba:7a:0c:fa:68:3f:db:e6:40:95:ec:a2:7c:e6:26:2e:66:62:
f8:6c:10:7b:93:62:33:96:d1:68:6c:62:04:c3:0c:74:7a:7b:
85:a5:b9:4e:71:75:2d:5c:17:e5:1c:5c:71:ff:9a:98:ab:22:
4e:4e:a0:07:ac:09:3d:1e:0a:ef:50:0f:08:b6:c0:10:5c:71:
3e:a8:5e:0b:58:67:35:27:06:3f:62:89:c2:67:bf:74:1b:70:
63:4d:21:f3:75:48:bb:12:91:a4:ef:7f:e4:fd:27:95:93:b0:
6f:82:64:fb:6b:08:3a:0c:3e:4f:5a:03:7e:20:dc:e1:2f:bf:
c8:cd:45:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTcwRDkxMTAvBgNVBAUTKDlFQUM1NEU5RjlGNTlFNjgzOEY0ODQ2MDQyMTA1NjMz
MDY2RDIwOEUwHhcNMjYwNDE3MDcyNDUxWhcNMjYwNDI0MDcyNDUxWjAYMRYwFAYD
VQQDEw02OWUxZTA0My1lYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3SjSh+fsxfVt1BDneFvsqUfmrOooi0x8nX+yER4/y2jBkaOifiXPWSbn+uY3
P7NQweiNg9M5x9BAx4+fosHdqZ/fSTHHUwL51hWEBkkd71dRQFff1phvxtIQ5/05
P8zA+DB1vOtAJtTUTUPPc6k0EMXNitU0N81RD242l3qpjP0vnaOpvrbZu06+jZxY
92ZC/wVwgkftao57B4PUo5tMyDuDk3WjV7xR9E6vEtdwzSjAnD3Z/eLUeOKutprD
37p4h4fjxNp0CYZRx4PaGcckK/EvrczNRgIGlSRCis2gLyZNeHzhJdMlv4An/Iub
TYcMy1Fi6QnxDtDI/qAxu1tR2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+Cr4iX
+XFEJBDQsRy39ue+lpXVMB8GA1UdIwQYMBaAFJ6sVOn59Z5oOPSEYEIQVjMGbSCO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBEOS8yRUNCMkZGQTdE
ODAxMUYwQTk3ODU0MjNDNEY5QUUwMi9ucXhVNmZuMW5tZzQ5SVJnUWhCV013WnRJ
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25xeFU2Zm4xbm1nNDlJUmdRaEJXTXdadElJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NzBEOS8yRUNCMkZGQTdEODAxMUYwQTk3ODU0MjNDNEY5QUUwMi9ucXhVNmZuMW5t
ZzQ5SVJnUWhCV013WnRJSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtdAvNScI0HIh/JNbMH4PklV313B/Uuurb7lYh+UTak82rWkL3TR3F+7f1JPs
E8ejOmSh+fMa4cwSwNohDbOm6hCBZ5UdGvVUsac1LBtAaPacnm2RPQeoU8ZQ+MMS
sEHDkI5FSqCXBh0AD+tjPNpz6/tQRBSpizmATXAs14zNunoM+mg/2+ZAleyifOYm
LmZi+GwQe5NiM5bRaGxiBMMMdHp7haW5TnF1LVwX5Rxccf+amKsiTk6gB6wJPR4K
71APCLbAEFxxPqheC1hnNScGP2KJwme/dBtwY00h83VIuxKRpO9/5P0nlZOwb4Jk
+2sIOgw+T1oDfiDc4S+/yM1FEg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:38 2026 by rpki-client