
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json)
Hash identifier: z+/RhJTuFTMuUMrQCUP81Xj76TRKNNzFvpvVY88ai44=
Subject key identifier: CA:3B:13:BE:7C:70:78:B9:4A:A9:23:B5:34:B1:81:90:C6:B5:B7:D3
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 11BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
Manifest number: 1144
Signing time: Thu 16 Apr 2026 17:10:18 +0000
Manifest this update: Thu 16 Apr 2026 17:10:18 +0000
Manifest next update: Thu 23 Apr 2026 17:10:18 +0000
Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: m56III0QgwWOrbpj6vHFWYjkx50X/RH9H1ctQM1gebY=)
2: 52685F222E9111E999636910C4F9AE02.roa (hash: uaKA9Y3McJzmCeyJEJWsLKksi3AYaWdl6qS4vvefPN8=)
3: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: M9wrLdqCvf9Rebn1AxQjUYPshDSgwl/PTCAmwfRJfkY=)
4: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: IMj8qtFSd6hi4gKqRA7H36habWRd5bqBb8+O4kZejZ4=)
5: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: r6j10YEzxAuJPnFHDmBq1me6EKjgZrwXuEyyfhL/DdQ=)
6: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: n9mHkt6czHPPUD5zY90UjJ7UAf6byhyKwZP1Ve452FA=)
7: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: JuUJ4DOSBW01nrRIUTLHPfkliifJ+rq2zxYO36hJWcU=)
8: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: 0AlAm/UllNu6nV+KmAJcUogCEbfOQbf6eO/9wodLVx0=)
9: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: Wg9nJcL+7yCwCNF5i9jX3GavDbjDIX0HONcfmVfocb4=)
10: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: Pd6I10yKRgl85ZBaIcYKM4tnRuesswuVsiUCUOGCVbM=)
11: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: 2tzoshkXR7/Luip7F+Asz7LyTGRXnuS+/JojvXSRlyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4538 (0x11ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Validity
Not Before: Apr 16 17:10:18 2026 GMT
Not After : Apr 23 17:10:18 2026 GMT
Subject: CN=69e117fa-ae3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:3e:9c:e0:02:72:ad:2a:d0:f2:c7:ef:f4:
8e:99:92:62:10:ba:03:c9:8a:37:42:98:c5:eb:0a:
2c:fe:40:32:6e:52:43:48:f1:72:9d:42:4b:b9:fe:
76:35:ea:8d:5a:b4:7d:c3:31:75:3f:65:f1:d1:8b:
30:59:2d:a3:2b:d9:07:3f:35:44:71:69:e5:24:53:
d9:8f:04:cf:cd:79:da:bc:d6:41:4c:aa:68:8d:de:
a8:2e:22:70:eb:ae:5b:c7:23:a0:67:83:10:e5:a5:
d9:55:0d:b7:22:1e:73:e7:ce:b0:17:ab:02:57:8a:
b5:87:3d:25:e4:ff:39:0e:1d:98:5a:4b:80:f7:3d:
1f:4b:bb:d3:c8:b5:50:7b:2b:8e:8b:6c:e9:cb:6c:
36:9b:00:fc:e7:88:6e:89:8b:77:fd:30:57:56:d7:
bf:e2:5b:c3:af:37:0d:fb:4e:e1:01:cf:9c:bd:79:
1e:98:a7:9a:15:6a:7a:72:cf:e9:7c:09:7c:1d:53:
a8:fc:29:9c:c9:db:6d:16:5f:59:22:18:ba:2a:66:
ef:71:9b:a3:5b:bd:e3:1a:ae:e9:c4:10:92:39:dc:
c9:d2:15:08:32:f7:13:88:c3:4c:8d:ce:59:2a:b6:
1a:f1:82:1d:da:df:52:cf:29:6f:2d:b2:cc:02:85:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:13:BE:7C:70:78:B9:4A:A9:23:B5:34:B1:81:90:C6:B5:B7:D3
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:5f:50:28:2a:ad:07:6b:ae:9f:15:20:d2:73:82:08:73:94:
52:76:4c:08:a3:66:db:83:23:9f:1b:a4:0a:fe:2e:c1:7f:22:
7a:96:5a:b4:2e:8a:31:08:15:f7:38:35:d4:3d:c4:ec:93:8a:
f1:fa:36:61:08:7b:8a:e8:7f:0d:a3:2d:30:4c:50:66:f2:cf:
ab:0b:79:d5:6b:c5:3b:f9:c4:9d:be:f1:3d:61:ea:bd:7c:b0:
ce:b0:b2:98:8c:cd:a1:9f:50:8a:6b:20:13:15:d0:88:37:2e:
df:09:84:70:97:87:4c:37:af:61:93:94:ca:b1:c7:25:b1:9d:
b3:a7:8f:23:51:f3:33:89:2a:6d:4f:c0:d8:9b:f9:3c:1e:55:
8f:50:44:4a:54:a4:56:21:3e:23:71:ad:67:d8:92:85:58:8b:
6b:d7:c5:81:04:01:b6:3e:aa:86:4b:36:cc:bf:a8:a4:6f:36:
ca:f1:22:c6:d4:96:e8:dc:73:c1:39:03:c3:1a:ab:b5:8f:8d:
d6:2b:93:1e:4c:ef:a2:a3:5a:03:93:6d:3e:06:d8:30:6c:f8:
69:d2:50:1d:9c:82:39:d8:99:c7:ae:67:8d:21:af:88:d0:c9:
ac:1d:1f:6e:50:83:f2:6e:6c:1e:50:4a:6d:ff:ac:e1:ee:ac:
04:d1:31:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4
QUFCN0UyNEYwHhcNMjYwNDE2MTcxMDE4WhcNMjYwNDIzMTcxMDE4WjAYMRYwFAYD
VQQDEw02OWUxMTdmYS1hZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqyc+nOACcq0q0PLH7/SOmZJiELoDyYo3QpjF6wos/kAyblJDSPFynUJLuf52
NeqNWrR9wzF1P2Xx0YswWS2jK9kHPzVEcWnlJFPZjwTPzXnavNZBTKpojd6oLiJw
665bxyOgZ4MQ5aXZVQ23Ih5z586wF6sCV4q1hz0l5P85Dh2YWkuA9z0fS7vTyLVQ
eyuOi2zpy2w2mwD854huiYt3/TBXVte/4lvDrzcN+07hAc+cvXkemKeaFWp6cs/p
fAl8HVOo/CmcydttFl9ZIhi6KmbvcZujW73jGq7pxBCSOdzJ0hUIMvcTiMNMjc5Z
KrYa8YId2t9SzylvLbLMAoWBMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMo7E758
cHi5SqkjtTSxgZDGtbfTMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF
OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0
azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDlCQy84OTI4OTczMDJFOTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6
amlqWWFsMjM5MktLcTM0azgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB19QKCqtB2uunxUg0nOCCHOUUnZMCKNm24MjnxukCv4uwX8iepZatC6KMQgV
9zg11D3E7JOK8fo2YQh7iuh/DaMtMExQZvLPqwt51WvFO/nEnb7xPWHqvXywzrCy
mIzNoZ9QimsgExXQiDcu3wmEcJeHTDevYZOUyrHHJbGds6ePI1HzM4kqbU/A2Jv5
PB5Vj1BESlSkViE+I3GtZ9iShViLa9fFgQQBtj6qhks2zL+opG82yvEixtSW6Nxz
wTkDwxqrtY+N1iuTHkzvoqNaA5NtPgbYMGz4adJQHZyCOdiZx65njSGviNDJrB0f
blCD8m5sHlBKbf+s4e6sBNExBA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:13:49 2026 by rpki-client