
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
File: NyCB99vi7xGkQRvU5q-G8yaYyvo.mft (raw, json)
Hash identifier: FcRUwLzCCijsYKi/+c3gknybtQqJG+IBT/5+DeoVz9c=
Subject key identifier: A2:8F:52:DD:DC:22:1B:10:41:82:79:6B:8B:BA:F3:43:2A:D1:0C:E1
Authority key identifier: 37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA
Certificate issuer: /CN=A9191E19/serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
Manifest number: 018E
Signing time: Wed 17 Jun 2026 05:34:37 +0000
Manifest this update: Wed 17 Jun 2026 05:34:36 +0000
Manifest next update: Wed 24 Jun 2026 05:34:36 +0000
Files and hashes: 1: NyCB99vi7xGkQRvU5q-G8yaYyvo.crl (hash: 4P3UWmd6oqusMci0Q492kmIs0LqCgFHB/C1OzaZ2Oa8=)
2: 82748D8A8D3A11F0833AB01AC4F9AE02.roa (hash: r4Ca6TL7G33YNpkOkNbOrzu02s5Gj49drdeKjyxRr/8=)
3: 4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa (hash: X9BGtBs1osigY8tUwUmWLsAjtgQ3b+t0twb857Yii5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl
rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E19, serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA
Validity
Not Before: Jun 17 05:34:36 2026 GMT
Not After : Jun 24 05:34:36 2026 GMT
Subject: CN=6a3231ec-3d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3c:30:7d:0b:3d:bd:b5:21:24:f1:5d:a2:a6:
ae:4f:cb:f5:2e:7d:79:27:44:66:77:67:23:61:b7:
a2:64:79:33:a2:ca:d9:03:7a:83:98:2f:22:c4:61:
19:2d:5c:8f:16:3d:f3:14:4c:c9:85:64:bf:27:73:
17:8e:87:68:9e:ae:55:e1:96:9b:ff:88:c2:25:db:
a7:73:b0:0d:04:54:c5:9b:1e:f5:fa:6e:99:a1:32:
3e:f4:97:45:d5:fe:5b:40:d8:cb:e4:dd:53:a3:c2:
c2:aa:ea:4b:1d:8a:bf:a0:46:c7:49:8f:79:6d:c0:
65:ee:93:11:9d:c3:6e:23:cb:71:a5:55:98:b2:30:
81:0e:4e:09:bd:95:15:10:65:02:75:c5:6b:12:24:
72:bb:40:53:6f:ec:f1:72:6a:b3:9f:fb:07:e0:dd:
d9:fd:30:13:e4:be:f5:f1:a7:bd:9f:ea:d8:ea:ec:
ab:58:56:70:a1:f3:68:35:c8:69:7d:58:ac:62:90:
ce:f8:61:e4:6e:7b:bb:73:86:f9:1f:bf:05:4f:e5:
73:70:4e:94:8e:45:10:1d:d8:52:8e:a3:4f:20:a2:
62:61:f6:1b:6b:53:b5:0d:cb:4f:b6:6d:bb:99:0b:
39:77:21:58:f7:aa:94:31:b8:18:d5:a8:11:cd:a3:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:52:DD:DC:22:1B:10:41:82:79:6B:8B:BA:F3:43:2A:D1:0C:E1
X509v3 Authority Key Identifier:
keyid:37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:a7:96:f8:68:00:25:c1:5c:f0:ef:1f:d8:fb:f7:40:25:7d:
31:40:83:b2:4c:55:25:b1:55:d0:67:cf:d1:cb:96:fb:2d:e0:
c0:51:6b:a9:90:f8:19:04:3c:3e:e6:27:19:83:ad:35:19:d5:
a6:0b:34:22:51:49:04:98:b5:05:b7:70:1f:49:16:79:9d:14:
43:81:79:cd:5c:13:1e:49:e5:b4:5f:c5:4d:b1:1f:47:ec:85:
fc:33:d1:65:51:ae:01:ff:bd:5c:9f:ca:6f:ac:96:4b:4b:d2:
e0:11:82:b3:02:f7:18:03:0e:a2:a0:e6:94:fe:b0:9f:e4:4d:
e7:de:db:28:87:52:ed:46:e8:6f:e9:ae:3b:88:52:db:b8:a3:
bd:1b:35:65:84:09:69:1b:c6:7c:16:b7:2d:6c:04:8b:60:76:
c4:58:83:b1:b3:d8:90:4e:ea:e4:6d:02:55:36:ff:07:bf:38:
eb:9a:23:e0:6b:f2:2e:f6:d4:1c:ca:b0:d2:29:21:8e:0a:44:
33:d2:4c:56:4f:af:4c:67:95:6a:54:6e:83:44:55:02:96:df:
87:fd:04:ef:86:5c:c2:9a:06:2f:d7:50:85:7e:43:51:f7:6a:
60:b4:66:44:25:40:b1:df:08:a0:c7:da:2e:07:b6:bb:73:77:
a6:ed:67:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFFMTkxMTAvBgNVBAUTKDM3MjA4MUY3REJFMkVGMTFBNDQxMUJENEU2QUY4NkYz
MjY5OENBRkEwHhcNMjYwNjE3MDUzNDM2WhcNMjYwNjI0MDUzNDM2WjAYMRYwFAYD
VQQDEw02YTMyMzFlYy0zZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6DwwfQs9vbUhJPFdoqauT8v1Ln15J0Rmd2cjYbeiZHkzosrZA3qDmC8ixGEZ
LVyPFj3zFEzJhWS/J3MXjodonq5V4Zab/4jCJdunc7ANBFTFmx71+m6ZoTI+9JdF
1f5bQNjL5N1To8LCqupLHYq/oEbHSY95bcBl7pMRncNuI8txpVWYsjCBDk4JvZUV
EGUCdcVrEiRyu0BTb+zxcmqzn/sH4N3Z/TAT5L718ae9n+rY6uyrWFZwofNoNchp
fVisYpDO+GHkbnu7c4b5H78FT+VzcE6UjkUQHdhSjqNPIKJiYfYba1O1DctPtm27
mQs5dyFY96qUMbgY1agRzaOacQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKPUt3c
IhsQQYJ5a4u680Mq0QzhMB8GA1UdIwQYMBaAFDcggffb4u8RpEEb1OavhvMmmMr6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUxOS8xMEM3RjBBQTE0
MEYxMUVGOEE0QTcwMTZDNEY5QUUwMi9OeUNCOTl2aTd4R2tRUnZVNXEtRzh5YVl5
dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055Q0I5OXZpN3hHa1FSdlU1cS1HOHlhWXl2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUUxOS8xMEM3RjBBQTE0MEYxMUVGOEE0QTcwMTZDNEY5QUUwMi9OeUNCOTl2aTd4
R2tRUnZVNXEtRzh5YVl5dm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA6eW+GgAJcFc8O8f2Pv3QCV9MUCDskxVJbFV0GfP0cuW+y3gwFFrqZD4GQQ8
PuYnGYOtNRnVpgs0IlFJBJi1BbdwH0kWeZ0UQ4F5zVwTHknltF/FTbEfR+yF/DPR
ZVGuAf+9XJ/Kb6yWS0vS4BGCswL3GAMOoqDmlP6wn+RN597bKIdS7Ubob+muO4hS
27ijvRs1ZYQJaRvGfBa3LWwEi2B2xFiDsbPYkE7q5G0CVTb/B78465oj4GvyLvbU
HMqw0ikhjgpEM9JMVk+vTGeValRug0RVApbfh/0E74ZcwpoGL9dQhX5DUfdqYLRm
RCVAsd8IoMfaLge2u3N3pu1nRA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:38:16 2026 by rpki-client