
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File: nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier: bo/kVzpg9EhTWTvEq4peWV+gqrJGGhRXjE+2SbDkq7I=
Subject key identifier: EA:03:C4:ED:3A:6A:0B:45:0D:08:73:78:2A:90:AD:02:A3:A0:E9:CE
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial: 098D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number: 095D
Signing time: Thu 16 Apr 2026 20:02:53 +0000
Manifest this update: Thu 16 Apr 2026 20:02:53 +0000
Manifest next update: Thu 23 Apr 2026 20:02:53 +0000
Files and hashes: 1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: +D+OO4L5vlZjqZ4uOoE8Luzcp6kiH2335xqwLPv+79w=)
2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: 7BcXlcd3LJPGSVAJ0cpsMaAQmbsNPhOb+ijpOwrVFzQ=)
3: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: iXUcdsv3ddU69YIhWzDFLhl35LQs6AD3EeqPaisI2Hw=)
4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: mdaUyLNP5ILBUXwjj5qxgg+9hrAAfPyxuDqIwoe7rWU=)
5: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: jmiRcmGtCSPQ80tETmfEOVJ+GurX16ZfdMdpnSOQ5WA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445 (0x98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Validity
Not Before: Apr 16 20:02:53 2026 GMT
Not After : Apr 23 20:02:53 2026 GMT
Subject: CN=69e1406d-3ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:9b:2e:51:6c:f5:fe:3b:95:18:79:36:a6:
a5:8d:9e:39:2c:5e:60:16:b1:d7:0a:47:ea:9c:cb:
ad:20:a0:ba:48:9a:73:1c:0f:9e:70:0b:d4:b3:01:
0b:0e:57:34:f4:14:65:97:ba:76:6a:b8:dc:7c:f2:
bf:dd:ad:87:49:7c:90:4e:ad:de:fa:00:ac:a0:83:
ee:ae:b2:52:c3:23:e2:ea:e3:d1:a2:43:52:18:4c:
e0:57:0c:d0:25:81:9e:09:b0:01:9b:ec:4d:cd:01:
9e:9a:78:17:e1:56:c6:e6:43:57:d0:fc:41:1a:0a:
6e:3b:84:13:30:76:92:4e:97:c8:ee:9e:bf:fd:0d:
fc:f3:92:ae:f5:e9:70:ec:3a:e7:9b:2e:78:c0:51:
e4:fd:f0:91:0a:93:f8:5d:63:8a:38:fc:ff:20:b3:
25:06:5b:ea:66:7a:07:bd:58:fa:62:21:fa:f4:b8:
a1:5b:79:f4:a6:a4:22:a7:4f:eb:cc:e0:e7:19:23:
b1:33:f6:f8:97:f9:20:f1:3a:c0:1d:17:1a:2a:63:
ee:c7:ad:0c:c3:c3:81:02:5e:d6:33:6f:4d:d5:75:
3b:ad:30:80:fa:d9:3c:ed:1b:cc:66:0b:da:5d:97:
1c:d8:94:a5:5c:ae:26:e1:4f:ee:eb:18:f0:a5:e7:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:03:C4:ED:3A:6A:0B:45:0D:08:73:78:2A:90:AD:02:A3:A0:E9:CE
X509v3 Authority Key Identifier:
keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:32:b3:1c:6a:bc:d6:42:a2:8d:3d:ba:2c:bc:4c:86:90:21:
8b:79:76:cb:fa:3f:f0:d3:9b:1d:7f:41:23:e2:c0:f4:f7:77:
11:77:d4:d7:19:13:99:20:9c:9f:ee:5e:6d:27:a0:e0:06:17:
ea:85:e7:e1:be:7f:2e:23:e6:af:1c:54:93:d9:09:01:2e:2b:
6a:73:de:db:72:d7:60:9c:69:dd:e0:cd:a5:04:c7:d9:40:ae:
08:13:cd:55:fb:29:b3:ef:91:3d:1c:67:e8:93:42:10:8c:88:
6c:ea:c9:66:86:ba:e7:87:e0:2a:42:30:76:05:ec:f2:9f:d0:
41:86:1f:46:c7:d8:25:04:10:5e:db:d4:02:9f:3c:4b:12:a8:
b9:e7:ae:7b:73:65:0d:ed:c7:5e:56:0c:2a:4b:e2:ce:8d:1d:
65:b3:8d:ea:37:7e:da:34:21:d1:96:aa:3b:4b:6f:8d:ec:82:
8b:4e:85:83:8a:33:3c:cf:3c:95:07:ce:0d:f9:fd:d6:29:f0:
8e:89:a7:e5:4b:1e:88:f7:bb:7a:a8:0e:04:c8:33:8d:5f:89:
04:9a:f9:50:96:eb:99:10:6c:16:11:77:3d:ed:13:cd:1b:a3:
8c:cc:c6:7f:7f:0c:a6:bd:0e:39:1e:c9:e6:69:4d:a5:b8:c9:
42:56:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:02:22 2026 by rpki-client