
$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json)
Hash identifier: AXhA/ZoWU+CqkfIAyN6H5+YEpRpMyIXUO99ED9GFfIM=
Subject key identifier: F1:70:1A:44:06:3F:CA:98:39:A3:43:E2:E7:56:7F:89:9A:E3:A9:88
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
Manifest number: 0205
Signing time: Mon 27 Jul 2026 04:44:06 +0000
Manifest this update: Mon 27 Jul 2026 04:44:05 +0000
Manifest next update: Mon 03 Aug 2026 04:44:05 +0000
Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: n9FVPCb0sFC2ZaO+Se/hRAtrrVEVbd3OaJLVx3mNCfE=)
2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Validity
Not Before: Jul 27 04:44:05 2026 GMT
Not After : Aug 3 04:44:05 2026 GMT
Subject: CN=6a66e216-e3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:f8:75:19:3f:fe:ce:f1:14:d8:ec:63:06:
ed:f5:82:d9:e8:ae:91:2e:87:cb:ce:0c:76:b0:14:
01:e3:ff:a3:ab:65:0f:58:98:75:c3:5c:3f:85:c9:
3a:a3:5b:ba:7a:50:06:2c:2c:2a:a6:ef:ca:da:e8:
f1:cb:73:11:2e:3e:9d:8d:ca:0a:38:8e:9d:17:f0:
c8:10:32:0c:9d:65:4e:c9:9f:28:7b:81:13:d7:e4:
c0:4f:f7:0d:62:99:cf:ee:e2:ab:91:91:95:70:10:
91:08:31:58:21:d5:45:fc:5e:4f:2a:cf:84:26:74:
ae:7c:22:d4:58:fe:fe:41:bc:24:b4:c2:fd:8b:b0:
fd:17:19:36:67:f1:b3:a0:9a:da:9c:ef:90:b5:a3:
b6:b6:fb:fd:c3:40:7d:c5:1b:d3:73:6d:05:fb:bd:
e7:b3:72:a3:d7:a4:a9:9b:9a:17:af:c5:65:21:21:
bd:01:73:33:66:8f:b7:ba:b3:cf:44:8b:50:3d:75:
5a:7b:52:1b:bc:65:b3:b6:d6:32:70:53:d3:4f:e2:
8b:25:29:5f:bf:cf:4a:0c:09:df:23:95:d1:a2:b9:
ce:6e:f6:31:ed:b0:d1:1d:32:ef:0a:69:80:71:e7:
87:4a:db:85:14:e2:69:8c:0f:67:2d:3f:b7:92:51:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:1A:44:06:3F:CA:98:39:A3:43:E2:E7:56:7F:89:9A:E3:A9:88
X509v3 Authority Key Identifier:
keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d4:ba:2f:cc:39:d5:76:73:30:04:80:db:ff:04:27:c2:47:
9a:47:cb:cc:6c:ca:fb:c3:0c:e1:70:4b:62:c4:e3:fb:99:40:
d4:a2:60:1d:db:67:cd:ce:4c:e5:26:a9:ee:a1:89:9e:a8:2c:
24:c8:79:5e:49:15:20:43:03:56:1e:63:c1:bd:18:08:13:d0:
3a:0b:cc:4b:95:cb:f8:44:87:e8:6c:e3:0f:b4:4c:ad:5e:ae:
5a:3a:90:db:97:a9:a0:c8:d5:98:ec:4a:99:1b:b6:6e:70:1e:
5c:6d:b0:f9:84:27:48:aa:ae:b0:80:68:5b:2f:97:19:e8:18:
3b:66:82:20:9d:c7:cf:ea:33:8c:e7:37:80:73:c8:ce:df:f6:
43:b0:3f:7e:67:90:3a:ae:f5:d1:88:13:b7:30:39:ea:1e:cd:
95:a2:72:fb:8b:92:00:94:a5:f2:7e:ec:0d:f3:d5:3e:11:72:
bf:42:92:18:06:08:a2:4c:94:4a:2e:f6:55:6c:68:95:a6:10:
bf:c2:8a:58:35:7c:ac:f9:cb:b9:e8:f6:e0:77:de:e2:5d:56:
81:0b:3a:ca:e4:be:2a:98:d3:59:45:a5:66:c8:0c:d5:75:70:
85:e3:a3:44:51:ff:9b:fd:3b:22:77:34:36:39:7a:4e:98:db:
21:8c:1b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:29 2026 by rpki-client