
$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json)
Hash identifier: ooYT7A6TB52sACNlMuuQDgXG9Qp5yRPl+wKahLC/qUI=
Subject key identifier: 1A:50:F0:57:27:98:6A:C8:70:F7:93:77:87:D9:8F:4C:7B:28:92:2E
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
Manifest number: 01D3
Signing time: Fri 17 Apr 2026 03:24:00 +0000
Manifest this update: Fri 17 Apr 2026 03:23:59 +0000
Manifest next update: Fri 24 Apr 2026 03:23:59 +0000
Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: Sxd2bAoUdyP6D8dqclZoqby8lbc3BGxw98jqlhHzemQ=)
2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Validity
Not Before: Apr 17 03:23:59 2026 GMT
Not After : Apr 24 03:23:59 2026 GMT
Subject: CN=69e1a7d0-c1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:fc:aa:c8:ef:f4:89:0a:ab:7d:75:0c:02:
f7:dc:2c:01:2e:25:73:e5:f1:9d:29:08:4c:e9:27:
9f:50:61:6e:ee:7e:e4:85:03:2a:ad:47:33:c0:54:
5e:74:8e:f7:94:88:61:e6:40:b1:49:64:74:f4:5b:
0c:8a:60:29:6b:18:2f:98:cf:7e:cf:dd:d1:0b:35:
15:25:e2:5b:b9:bd:99:d6:a5:08:d1:b8:7b:7f:2e:
23:3e:c8:c7:d9:1a:e6:53:5f:8f:43:c6:ba:d9:c7:
3d:d4:32:e2:39:2e:8b:1c:40:aa:ec:df:6e:5b:d5:
4d:c8:0b:b2:cc:d4:5a:e3:0a:67:b0:1e:e5:a1:1a:
4e:c1:ef:37:c6:94:45:24:ff:31:11:51:85:92:27:
d0:49:73:9b:5b:91:6e:05:81:f4:6c:f9:50:88:cd:
c0:11:f5:cb:77:f2:50:b5:55:77:f9:31:44:fe:f5:
4d:32:2d:dc:cf:0d:01:46:80:22:c6:5e:00:30:48:
2d:90:6c:83:a3:47:02:b9:71:3c:38:6b:41:0a:c9:
25:e1:88:71:0b:a5:95:a7:8d:67:6d:af:4b:11:34:
27:6c:12:8e:c2:19:03:88:2d:f7:ad:18:2f:52:9c:
6c:53:2a:78:1e:3c:2e:0a:6e:cd:0a:57:94:4e:83:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:50:F0:57:27:98:6A:C8:70:F7:93:77:87:D9:8F:4C:7B:28:92:2E
X509v3 Authority Key Identifier:
keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3c:b0:4b:de:d2:29:e3:78:f4:3c:90:d2:ec:3f:6a:8f:59:
5e:7e:e7:18:eb:14:f7:d8:0f:a1:7a:a6:c9:63:1b:d8:6e:c6:
6f:82:e7:07:00:16:e2:a3:3f:12:56:49:4a:1b:97:1a:dd:a8:
32:fa:eb:87:88:c0:69:46:b3:7c:61:fd:6a:b8:d6:ac:2c:87:
5e:07:bd:4a:a8:ee:09:23:14:46:fe:ca:08:38:d0:f1:c6:c5:
c6:5d:af:9b:9b:b7:15:cf:82:97:b0:b6:f3:49:b9:54:86:8f:
cc:00:ca:30:00:2d:17:c1:55:f1:8d:89:d1:75:eb:1c:15:c4:
9e:96:9c:5c:95:16:ab:4e:f3:ea:7b:fa:b6:97:36:1b:71:a5:
2f:a0:20:f6:50:a4:e5:2c:d7:73:78:2e:e0:78:69:fe:e9:0e:
6c:2d:87:a1:82:84:11:e9:df:e4:b6:07:9c:49:cd:b2:07:54:
40:a6:24:29:f3:34:64:f3:27:d0:6a:db:8c:fe:dd:0b:ca:96:
ba:2b:7b:19:5d:63:32:78:7e:d7:2b:f5:f4:c4:d1:50:e2:b4:
56:b2:1a:e4:7c:e0:9c:29:36:0f:0b:88:40:5b:91:64:f5:22:
7f:29:b6:62:61:45:26:cd:0c:93:8c:61:32:41:b3:f7:70:9d:
da:dd:e1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:15 2026 by rpki-client