
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json)
Hash identifier: Ti3vdPG/eW0xVDQ6j11oxgFIaddmdh1PkaBp+Kc5A8Y=
Subject key identifier: C2:AC:1F:9C:68:E7:9B:E3:B0:12:7C:96:D9:94:67:8A:C5:51:A2:00
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 1277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
Manifest number: 10D7
Signing time: Fri 18 Sep 2026 17:28:45 +0000
Manifest this update: Fri 18 Sep 2026 17:28:44 +0000
Manifest next update: Fri 25 Sep 2026 17:28:44 +0000
Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: HiivxKizAWNjhxTB9epWulju4tXUzdO45MQ5nlqGML8=)
2: I3gtydeyCoEzxoHhphV7nSBEdcE.asa (hash: UsfZdqrzXmth4HfD3tidOb1ZQGOW3dFNJ6v8mpbSRSE=)
3: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: dneRbel94yY09BrODhW/cm0eDKRgptqdSpSXdfm04G0=)
4: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: ig8ZCKfrZ5CJ7ljOZZuhrKZUQ/12pkHKHaOO+01joog=)
5: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: i5Rintjycnuo9u71FbQoVNcu5/vekh+2HiEq9B95npE=)
6: DFC4CB6686F011F19E006003A7EE528E.roa (hash: e4jwE0ZT8KKqzAYg8acBAl1aL2eMGYBkO5WKPD4gY0E=)
7: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: yfpfiXjcixpP9IQZ4ifctX4fhZj0BN5GuoJO9ai0I80=)
8: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: GeYMMjQQO4OJv0hhzntd/IKM1r5EywrlvT+cEVRcT2M=)
9: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: A3mprKP4/bzMlJDhCze5Spg/p0sS0GlpyT+kIwue5HU=)
10: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: jSm32Eb8eMElOEnd+VebqX3ziEBklNA1JW0RK3i6/Ok=)
11: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: qVwJ/vwm5XFANli3yyVsiUhVINMVoW4a5PClUSRYBSE=)
12: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: WtxeX8BB0opbdwzUtALDCwbBr4nNuxXM2Tpyyv444y0=)
13: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: VxYvOO28xeiG9c6rCrahvvpw2JaHPPY/8pkFYEDdB48=)
14: C2356A948FE811E98B967A66C4F9AE02.roa (hash: tZuST+AOoUn223wk8bZTKDT1J1Cy3KgRlLbmHSwBjOc=)
15: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: u6/wQAnigEtagpknx3tXOVG7uwO7ZVlGNYHIfxcAb4g=)
16: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: e4iJVgXrOeEESzCVIGc2vflltGz2qDITSBKrnWa8B+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4727 (0x1277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Sep 18 17:28:44 2026 GMT
Not After : Sep 25 17:28:44 2026 GMT
Subject: CN=6aad74cc-1434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:e0:c5:d6:bf:fb:a9:96:d8:fe:af:02:e5:
21:e5:26:5f:91:be:bb:fd:35:37:16:5b:f3:58:43:
f9:1a:c5:d6:22:11:69:13:e2:1e:47:27:bc:09:13:
a9:7d:32:88:7a:6e:c6:26:8d:c8:39:fd:ac:55:fa:
3e:10:40:b7:69:20:02:d1:22:40:da:65:a4:ad:ad:
04:f5:47:32:4e:e9:63:b4:3f:99:81:da:23:d5:37:
9b:99:58:81:31:3a:dc:09:d6:2b:9e:13:14:37:50:
d9:69:0e:ca:9f:52:18:c6:ce:8d:8f:f1:91:66:59:
5d:5f:76:6e:33:e9:5d:5b:3a:3c:71:1c:21:75:b8:
b5:4c:61:c7:be:f2:d0:27:d1:9b:31:22:3d:90:34:
39:0d:70:6a:01:1e:15:1b:de:4b:87:a6:2e:fd:60:
ec:c7:10:ef:40:d7:a4:17:63:88:5e:76:55:2e:79:
6c:fa:d0:73:e8:f2:d3:ad:1b:64:2a:48:c6:fc:2c:
54:11:7e:40:69:a8:af:9a:a6:74:f3:96:2f:b6:b2:
0c:91:c8:8e:22:9b:7b:31:c8:2f:f4:1d:5c:c5:dd:
92:f6:42:78:70:3a:c5:c4:d8:52:78:51:73:1c:ee:
fb:90:78:e6:66:93:7e:17:fa:ac:c0:cc:8f:14:d8:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:1F:9C:68:E7:9B:E3:B0:12:7C:96:D9:94:67:8A:C5:51:A2:00
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:dc:25:c2:b9:3f:05:0e:a9:66:9e:9c:34:5b:0a:2a:65:f3:
95:49:1b:2b:c5:a0:f0:d1:77:2e:68:d3:b3:e1:bd:fa:af:6b:
5f:0f:1c:a2:b3:aa:bf:8f:04:af:13:2d:4c:2b:89:b6:10:44:
3d:a8:bc:e5:85:30:f8:0d:74:a7:ed:77:17:e7:fd:71:bf:2c:
c3:da:f8:4a:ff:9f:85:a6:a3:6b:bc:6c:a4:97:2a:9f:ab:16:
24:1f:58:25:fe:85:ee:04:b2:db:f6:67:b3:ec:a6:1e:2b:c4:
94:42:cb:4f:6b:14:d4:8f:96:39:28:fb:33:cf:a7:a8:60:8a:
af:39:8d:8b:79:5e:25:0b:84:06:2d:00:dc:e1:95:41:e3:dc:
52:17:19:6a:2b:5a:59:ef:64:fc:7f:a7:c5:19:67:c3:79:09:
3f:f8:3f:d2:33:2d:bc:41:6a:fc:7d:30:0c:b6:2d:c6:5d:31:
7c:43:a9:62:9d:f3:fc:06:a1:a8:07:8d:cc:91:cf:02:1a:e2:
87:2e:8b:58:23:1e:06:32:a3:71:94:15:23:6c:3b:7b:65:70:
c8:20:c0:74:a8:a6:ce:09:92:44:0c:44:aa:af:91:d8:82:65:
8d:e1:8d:11:a1:66:1d:98:1d:ff:1a:c1:30:02:9f:c3:e8:cc:
d0:f5:08:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:49:37 2026 by rpki-client