
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File: nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier: lF0mzyu9wJ8njZ4iD453td+JSoQdeXHiVReO8ECYYeI=
Subject key identifier: 5F:3E:EF:98:D7:27:69:2E:2D:13:E5:07:CA:42:E1:BE:3F:FB:D3:29
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial: 096B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number: 0943
Signing time: Sat 28 Feb 2026 20:29:15 +0000
Manifest this update: Sat 28 Feb 2026 20:29:15 +0000
Manifest next update: Sat 07 Mar 2026 20:29:15 +0000
Files and hashes: 1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: g9dqQg/HC0O7PUU2fke+/NlEn+wQ/uSQx+mRisoNv4I=)
2: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: zDo3tedfdMOEsVe84vVrZx7v1JGUP/8LspCoxSCfVr8=)
3: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: Qm2aLJkxdL/ExAF+KC+FyvUngFAR4g1LlNO2Ye9aSlg=)
4: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: x+qXnpZHzZY+dh94g38SoTHaDPy2ifolaZ4sk7Pctiw=)
5: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: vo1vQ06IWtOVdoqh+RNSWgatLNqDP616NDuTmCTqgBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2411 (0x96b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Validity
Not Before: Feb 28 20:29:15 2026 GMT
Not After : Mar 7 20:29:15 2026 GMT
Subject: CN=69a3501b-2f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:24:57:10:88:a7:43:39:a0:e3:4a:4d:5e:
94:75:da:ce:e4:6e:9c:98:b1:ec:0e:f9:6e:e7:73:
ed:4d:46:27:81:91:34:27:23:0c:c4:78:e6:d6:48:
cd:b0:d1:69:e7:03:f9:0f:5b:d0:82:e9:f4:ea:27:
7b:9a:cb:a2:9c:10:a8:a1:97:1b:38:ca:14:c6:5b:
cf:24:d7:19:ea:f3:59:5a:47:51:b2:dd:9c:87:cd:
6f:91:64:4d:d7:70:bc:08:58:56:dc:86:5c:b3:fd:
1b:8c:67:26:6f:e1:05:83:66:1e:2e:0c:9e:c8:27:
be:9b:ba:bb:27:5e:f0:12:c5:4d:15:9f:58:fa:5b:
91:df:5b:ec:0d:a5:a4:bc:30:84:3a:46:72:4f:50:
d7:f3:2b:7f:65:66:f8:44:9e:53:6f:11:30:99:13:
49:fc:ea:ba:1c:78:fa:ee:bb:a8:0c:17:63:50:48:
df:4f:04:52:5b:e5:de:6d:d1:d9:6c:7d:76:5d:8c:
97:21:fd:74:d7:65:5b:74:fc:a4:5f:46:82:dd:f0:
e7:3d:b6:28:14:62:fb:c4:96:3a:92:c6:26:24:07:
9d:17:e6:30:0b:09:f7:7c:bb:cf:34:63:63:80:e3:
8e:2e:27:45:8d:de:9a:f9:64:9c:b5:43:6b:bd:37:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3E:EF:98:D7:27:69:2E:2D:13:E5:07:CA:42:E1:BE:3F:FB:D3:29
X509v3 Authority Key Identifier:
keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ed:02:9f:ec:da:b3:ed:6f:e2:36:0f:b3:1b:96:e8:1b:22:
1d:9e:78:ed:3f:5b:cd:38:9b:7e:74:34:60:3c:37:cd:b6:6f:
13:ae:9b:66:33:0c:f7:95:67:45:e6:3f:fc:28:df:53:75:0a:
04:3c:a4:98:73:da:7d:7a:bf:a7:f8:8d:4a:c8:1e:76:76:d6:
60:90:7d:6e:e3:de:f6:89:67:93:e3:c9:a0:9b:53:f1:29:05:
0b:50:94:9a:31:29:c5:b9:02:91:14:09:ad:ec:e0:1d:b9:d8:
65:0d:37:08:a1:80:b2:fc:a3:e0:57:bb:51:05:09:64:33:a6:
ef:0e:77:fa:9f:aa:98:12:04:12:d6:90:24:01:e2:57:30:fb:
46:00:f0:81:45:b0:ef:ef:44:49:5b:03:19:c8:05:01:e1:c6:
88:47:21:ef:06:8b:f0:89:c3:ad:5b:62:d7:28:b6:ef:cb:d6:
52:16:47:b8:ea:c8:cd:2c:c8:ff:c8:5e:08:3d:3f:75:17:65:
cc:98:ad:9d:4a:9f:53:63:11:87:be:8b:96:d3:8f:b7:e8:d1:
d5:6b:dd:90:c2:10:d6:ff:83:62:a8:6e:3a:e8:c4:fe:1e:3b:
49:c1:fa:20:17:9a:2b:08:4a:12:b6:9a:f0:6c:cf:f4:31:12:
1d:76:ff:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:52 2026 by rpki-client