
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json)
Hash identifier: WBmnKnzIraOSSASoaEsbMF8J7xk3HGtNcQyaDra4aoc=
Subject key identifier: BB:6E:0D:6A:92:7B:49:0F:F3:29:75:CC:EC:8A:55:86:3E:87:F9:00
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 11A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
Manifest number: 112D
Signing time: Mon 02 Mar 2026 17:15:15 +0000
Manifest this update: Mon 02 Mar 2026 17:15:14 +0000
Manifest next update: Mon 09 Mar 2026 17:15:14 +0000
Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: bEFGk6EJp+0gJEjUM849MvcSSfxOB6cKWKQn0TMBOCA=)
2: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: r6j10YEzxAuJPnFHDmBq1me6EKjgZrwXuEyyfhL/DdQ=)
3: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: JuUJ4DOSBW01nrRIUTLHPfkliifJ+rq2zxYO36hJWcU=)
4: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: Pd6I10yKRgl85ZBaIcYKM4tnRuesswuVsiUCUOGCVbM=)
5: 52685F222E9111E999636910C4F9AE02.roa (hash: uaKA9Y3McJzmCeyJEJWsLKksi3AYaWdl6qS4vvefPN8=)
6: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: M9wrLdqCvf9Rebn1AxQjUYPshDSgwl/PTCAmwfRJfkY=)
7: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: Wg9nJcL+7yCwCNF5i9jX3GavDbjDIX0HONcfmVfocb4=)
8: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: IMj8qtFSd6hi4gKqRA7H36habWRd5bqBb8+O4kZejZ4=)
9: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: n9mHkt6czHPPUD5zY90UjJ7UAf6byhyKwZP1Ve452FA=)
10: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: 0AlAm/UllNu6nV+KmAJcUogCEbfOQbf6eO/9wodLVx0=)
11: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: 2tzoshkXR7/Luip7F+Asz7LyTGRXnuS+/JojvXSRlyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4515 (0x11a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Validity
Not Before: Mar 2 17:15:14 2026 GMT
Not After : Mar 9 17:15:14 2026 GMT
Subject: CN=69a5c5a3-1103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:db:ff:8e:66:7a:1d:6f:10:21:13:dd:94:
bb:ac:97:86:70:69:1f:84:e5:2a:eb:f7:44:b9:0a:
92:36:d5:66:4f:ee:5c:15:28:31:67:90:f0:0d:0b:
09:f9:d0:74:6d:61:23:e3:0c:14:2e:db:bc:ca:cd:
8e:47:93:2c:4d:cd:ec:a2:e4:95:05:36:d1:56:fe:
8c:a9:96:d6:ba:0f:76:8d:dc:2a:a4:e1:b0:d3:d2:
f9:2c:1f:52:c2:5a:46:84:fa:25:03:0b:72:9b:1f:
00:8e:6d:53:69:81:ae:7e:75:87:01:ef:73:f2:ad:
85:3f:91:ed:4b:df:a9:23:1b:de:a3:e1:f4:1f:e0:
d4:43:e3:69:16:42:3b:9d:7e:b9:d9:2c:61:d7:c9:
65:d8:93:f0:3c:aa:43:04:a6:0c:7c:e7:7d:cb:19:
e3:f6:af:9c:87:e7:40:cc:a3:e8:eb:d2:db:92:3e:
04:e6:cb:87:71:d0:35:ce:34:9e:5d:34:b0:48:ce:
0e:56:52:c5:22:2e:7b:5a:21:03:ce:2f:4c:d2:66:
24:41:cb:b1:61:2b:53:a9:c6:7a:e0:43:2f:da:89:
e8:3f:ad:b0:3f:d0:ee:83:d4:91:ff:22:36:48:5a:
06:7b:dc:3b:ad:cf:fe:67:1c:c4:6e:b4:dd:eb:e4:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6E:0D:6A:92:7B:49:0F:F3:29:75:CC:EC:8A:55:86:3E:87:F9:00
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:0c:09:61:b7:74:9f:e7:7a:bb:77:08:b6:f4:d3:1f:a2:cc:
e2:ca:fb:38:ec:37:e9:4d:fe:39:1f:e7:b5:c2:d8:92:69:65:
0c:b7:92:6e:f6:61:b0:5b:a3:6d:d9:0d:9c:c1:2d:2d:bd:c0:
1f:46:33:12:bf:f4:23:c6:36:81:45:1c:72:43:bd:4f:e5:7d:
47:ea:85:7d:40:1b:7a:6c:57:f7:48:af:72:ed:b5:59:a4:22:
f0:af:6e:c1:88:98:dd:33:aa:1b:b1:26:b1:32:18:13:d1:f6:
41:c2:04:9d:bf:97:d0:f0:85:64:b3:af:df:64:f6:e4:9d:c5:
5e:ef:5b:f0:c2:99:c0:06:a4:84:13:68:25:90:89:be:32:0d:
c7:d8:26:46:dc:0c:11:c5:ae:7e:a8:43:87:e2:d0:c4:6d:5e:
b4:bf:bd:8f:c3:3f:27:44:48:71:29:85:50:fb:00:db:2a:91:
41:77:1b:f8:c1:86:86:4a:a3:35:ed:ad:56:07:16:0a:65:1b:
08:16:85:87:ed:80:f4:58:50:ca:57:e9:a9:c2:18:89:f8:e3:
57:ad:85:ac:04:e6:67:f3:27:e3:1f:d0:1a:ac:46:94:91:cf:
51:b1:50:28:6b:7f:bb:a5:47:56:83:6d:3f:16:5b:84:46:4f:
49:62:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:46:02 2026 by rpki-client