
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json)
Hash identifier: J27xCuhibh+uW/9xmFd7sqK/TQL7YsmU0FdmcWgFM7s=
Subject key identifier: 9D:AC:7A:BA:D2:7C:CC:9A:14:E3:A1:CD:78:22:0C:AA:F8:C9:E4:FD
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 11E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
Manifest number: 1163
Signing time: Fri 12 Jun 2026 17:11:22 +0000
Manifest this update: Fri 12 Jun 2026 17:11:22 +0000
Manifest next update: Fri 19 Jun 2026 17:11:22 +0000
Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: +gocBtwFvHi0TgHWpzeL/Cw/faZ6Qvc8xqRPvRw+G5o=)
2: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: sm0eBXuJHpy/6GBiyFucIa3zwW7MRE4QJ04/eh2HAes=)
3: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: aOutH14XqTU7CvFjZF4RAhY9j2C5Nrg3m1MQwiLdC9E=)
4: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: NHQV92FmnuARgeDDhUDewRl+rTj+thYHcs3GlrXraHk=)
5: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: R3UXvxLGuAsLaHQCcYjq4jsLIsHsiVoo5zau0vUpLOo=)
6: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: tCQBUtYFoGYz0mkeelr2MTFt0PRYSbZ9klpLIVmb1oc=)
7: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: lflQBr5KFU0YHST8ZC+CiZu1r2eTacXElo40hp/vo78=)
8: 52685F222E9111E999636910C4F9AE02.roa (hash: 4Ei9jmJLAQOoAToGpIrcLdsdG3+i6HRC8BOB0H1zkBM=)
9: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: fzVldj66k6KXtgIRLEaGb66ZtwgbJga1awvd7qMV8+I=)
10: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: 3JBN2jyg46LmYUyUHhEZh4IoQyWfFsojDUHEe85wv/g=)
11: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: bAw2DJ5Kd887dPCmMIgU3xUTOQCR/psfXJJs57GhqSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4579 (0x11e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Validity
Not Before: Jun 12 17:11:22 2026 GMT
Not After : Jun 19 17:11:22 2026 GMT
Subject: CN=6a2c3dba-2d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:dd:39:5a:9d:75:77:3f:6e:7d:b9:55:00:
68:99:c0:c8:0b:db:fd:91:38:38:b3:08:4c:f9:17:
8a:d5:22:ce:5f:0b:cb:e1:1b:0a:94:02:ef:b2:d7:
83:73:d7:0c:f1:2d:35:35:1c:71:75:b2:aa:e1:84:
c4:7b:67:5e:96:da:74:b8:40:18:20:fe:69:b6:c9:
4b:c8:fa:6d:9b:fc:c0:b1:0e:ac:fa:15:f5:d8:2e:
1f:5e:76:7d:db:99:ba:15:9c:30:72:36:44:4c:c4:
38:9d:ac:60:07:c6:97:92:fd:30:14:e0:f2:4d:87:
78:bb:b5:2b:fd:2c:b4:34:75:32:47:0d:fc:ff:98:
d2:ea:26:b9:15:62:97:c8:7f:28:01:a3:5e:3f:c9:
7a:d2:f6:1d:4f:b2:14:42:25:d5:6a:dc:ad:3e:9b:
6a:ee:63:52:69:0f:40:b3:66:d4:7d:c1:86:df:a6:
7d:2b:e6:53:d8:00:a1:62:2c:a9:33:08:c6:1e:a7:
9c:52:ef:64:bd:f3:f7:a7:0a:e5:f2:7b:27:56:6e:
ea:54:3b:5e:62:e7:8e:f8:00:64:e9:7f:59:13:5e:
60:45:bc:8d:2b:99:88:fe:f3:70:ca:ad:1e:1f:8b:
13:31:b3:ee:3a:f0:d4:7e:8c:8e:40:12:cd:9f:89:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AC:7A:BA:D2:7C:CC:9A:14:E3:A1:CD:78:22:0C:AA:F8:C9:E4:FD
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:77:4b:b3:b6:6d:38:09:16:f7:9d:95:95:0b:a3:37:c2:42:
c7:e7:f6:aa:f5:95:02:0e:ba:2f:3c:db:bb:4e:2d:10:0b:9f:
cb:6d:9a:f4:4a:0f:da:d0:5a:60:68:88:cf:4e:87:b0:d1:16:
19:ec:75:3e:aa:b0:17:cb:82:9c:4c:7a:0f:d8:84:b9:d4:21:
d2:e0:67:75:0e:0a:96:13:f5:cb:94:f5:dc:9a:fb:41:9b:9f:
8a:63:c6:ad:ba:39:88:fb:71:d8:9c:a9:0d:a7:44:68:a4:5a:
2a:69:41:0c:da:3a:c7:a7:be:3f:d4:fd:16:9a:22:50:12:a8:
c6:52:38:ad:ba:d5:01:7b:bc:14:f4:71:a7:5f:bd:00:eb:cc:
a3:d2:e5:5a:3b:87:b9:39:d7:bf:9a:a8:07:e7:b6:26:05:55:
31:0f:2c:ba:6f:44:59:f9:4c:d6:14:91:ed:51:bb:7c:97:ef:
76:70:3a:a8:83:4d:7c:c6:30:fb:ec:92:68:ef:85:f3:b8:be:
49:d7:15:b9:12:67:1b:7d:16:88:41:d0:7b:40:1e:c2:1e:e4:
c9:65:bc:fb:ff:95:73:0f:e6:47:39:2b:d9:9a:c9:3d:51:dd:
6d:9c:b4:ac:77:96:be:70:2e:52:63:72:c7:03:a9:98:46:55:
06:d8:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:46:49 2026 by rpki-client