
$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json)
Hash identifier: SzYZRvK/J3drr+bL3wSYvyioO5N2wn+EJZQcu9VV45I=
Subject key identifier: 1E:1A:3C:89:9C:4C:A9:BD:66:08:78:47:95:31:DB:68:84:9E:53:83
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
Manifest number: 01F4
Signing time: Sat 13 Jun 2026 03:19:49 +0000
Manifest this update: Sat 13 Jun 2026 03:19:49 +0000
Manifest next update: Sat 20 Jun 2026 03:19:49 +0000
Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: GO72hEef1wY/0cI3/YeBSGBtK1g8G7Q0ZlEj23gkhTU=)
2: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: 4mOEHeBhGChXkeLtaY3MjKqXMs560mEi/SBozflvvQE=)
3: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Validity
Not Before: Jun 13 03:19:49 2026 GMT
Not After : Jun 20 03:19:49 2026 GMT
Subject: CN=6a2ccc55-f30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:07:63:50:cb:65:3b:ff:71:a0:d9:fb:09:
c5:df:92:3d:22:0f:95:9a:17:2a:85:56:30:f0:8f:
36:f8:74:2f:2f:29:c8:5d:43:3a:46:b6:b9:37:7c:
51:c6:34:4b:be:86:30:80:2f:7a:8a:80:16:39:b9:
dc:a1:a1:c8:40:86:ca:4e:00:90:0e:af:4d:4a:6d:
78:27:2e:23:ad:e9:6e:3a:5a:ea:5f:6f:ea:9c:18:
f4:ac:37:ae:bf:ce:92:92:58:ab:23:e4:6c:7f:da:
ce:c2:8c:65:59:f0:0c:2e:1a:e8:7a:d0:8e:1c:a2:
8d:26:89:af:0e:ac:aa:91:3e:62:3e:1a:97:da:eb:
d3:fa:04:07:3a:94:1d:a7:f6:fb:c4:56:de:05:d2:
19:9f:3e:43:51:4f:71:ae:e0:a3:ab:3d:4d:bd:dd:
f6:bc:5f:97:73:aa:8e:ad:98:80:bd:98:d1:ac:b5:
50:76:08:33:91:d8:fb:a4:05:4b:3a:4f:a9:f1:c1:
4e:77:82:4a:86:d2:73:a8:15:09:18:a9:f3:34:39:
6a:44:91:02:98:64:c7:eb:18:2e:e9:61:9a:13:21:
30:ee:3c:2a:37:30:8e:2c:72:dc:f6:17:94:43:bc:
ae:26:a6:c5:3d:9b:4f:be:74:48:9a:5e:d2:c4:8f:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1A:3C:89:9C:4C:A9:BD:66:08:78:47:95:31:DB:68:84:9E:53:83
X509v3 Authority Key Identifier:
keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fe:51:36:69:2b:fa:a5:1d:22:22:b9:16:6c:ca:b9:c2:ee:
9e:a4:ca:e7:b5:e6:61:25:14:bd:5d:2f:00:b7:30:ee:f7:2c:
dc:3e:a6:c8:79:aa:6c:21:22:af:69:82:76:00:66:0e:73:b4:
67:c0:2f:b0:f2:e4:31:80:1a:fb:0e:71:f5:b2:d9:d3:5b:3b:
61:96:7b:fd:03:9b:5e:f7:b6:7b:00:fe:9f:cf:3b:cf:56:81:
32:d5:19:bf:8c:3b:d8:22:fc:1b:a6:58:dd:52:bc:93:97:32:
83:d2:f0:4d:b8:8f:ae:c3:d9:4c:e9:1d:32:8b:00:e3:e4:de:
73:13:4a:5e:3a:86:80:c3:87:7a:8f:4b:49:49:bb:9f:44:ad:
a8:4a:2c:c4:6f:52:e3:4e:fe:1e:2a:42:53:b4:23:df:9a:9c:
4b:3a:70:44:f0:ec:1a:fd:7c:be:1b:3e:54:12:74:f4:15:8c:
32:ae:40:15:6a:08:30:d7:92:d1:f5:17:be:fb:db:e5:c1:b1:
94:c5:c9:86:77:52:16:dc:7c:d7:7e:53:d2:8b:16:a3:3e:45:
a3:8d:06:39:85:35:77:cb:e4:88:db:cc:54:8b:34:ab:45:4c:
db:fc:4b:2c:f1:6c:f7:5d:3a:44:c5:14:31:7a:61:42:a5:6f:
8f:9c:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:37 2026 by rpki-client