
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json)
Hash identifier: vhCj60UN4aOSuDyBq4lA98Z6UkXM00Z7NHi8Rni5IrQ=
Subject key identifier: 3D:F3:D0:33:39:75:0A:17:11:E0:5D:FB:5E:18:DE:58:43:7C:1E:70
Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C
Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
Certificate serial: 0AE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
Manifest number: 0AD4
Signing time: Thu 16 Apr 2026 19:21:02 +0000
Manifest this update: Thu 16 Apr 2026 19:21:01 +0000
Manifest next update: Thu 23 Apr 2026 19:21:01 +0000
Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: quTgrYlc0H7uAkhstTYrgGQRWfrUrZ0rCMqKkmDjMY4=)
2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: EsS37XCQ+hTMcMmbjcFpgJOlLiK3n71SoYQ41+HMC6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl
rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2785 (0xae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
Validity
Not Before: Apr 16 19:21:01 2026 GMT
Not After : Apr 23 19:21:01 2026 GMT
Subject: CN=69e1369e-9000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:e3:38:b1:69:fd:3c:76:a7:98:50:d6:18:
7a:b7:24:24:9a:75:58:fb:a5:3d:bd:72:b4:00:d2:
fe:f0:87:76:eb:6a:27:69:99:67:68:d9:19:c9:4e:
d6:4a:c0:17:ef:34:cb:7c:b4:30:c2:b9:2c:9d:97:
b8:8d:62:a5:8c:39:13:47:4a:28:6c:37:62:6e:ab:
d3:e1:fb:84:eb:b0:bb:12:95:c0:96:e7:91:6d:d6:
4d:05:83:9d:a0:98:bf:b5:64:f1:11:c8:30:be:a8:
3a:f4:c7:50:e5:5c:16:cf:aa:45:35:2e:28:af:f5:
5c:5b:64:32:b1:9c:74:28:41:59:87:9f:44:7b:e6:
59:9d:00:27:70:c2:7c:e3:32:d3:d2:ee:2e:f3:a5:
08:87:59:94:9f:44:d0:26:e7:91:a1:61:fb:da:cd:
05:11:35:5a:c8:e3:0b:12:44:00:f3:94:a3:0a:7b:
51:ab:de:a3:16:4f:ce:7b:0d:b3:a9:28:7b:68:b0:
1b:ed:b4:fd:10:72:38:a0:59:00:92:93:18:27:6c:
48:85:25:b7:16:be:51:4f:a6:75:c1:b7:0b:f1:01:
4c:bb:20:5e:30:52:ce:0e:ea:2c:8a:b5:aa:da:2a:
c1:36:f4:53:ce:3b:51:4d:c9:a1:0d:a0:0c:a4:3f:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F3:D0:33:39:75:0A:17:11:E0:5D:FB:5E:18:DE:58:43:7C:1E:70
X509v3 Authority Key Identifier:
keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:94:f0:8c:91:7c:71:9e:6e:ba:5a:e3:3b:1a:20:61:77:76:
6d:42:c7:46:ff:2a:71:0b:92:48:84:de:4a:5e:3e:c0:2b:ba:
10:19:db:7b:23:7d:33:3d:74:82:66:63:4d:a9:ff:9d:26:fd:
a6:c1:c5:cf:74:5e:ff:71:7b:2f:c9:78:98:75:52:59:c6:e5:
02:25:d1:63:ae:ba:dd:5e:d6:06:9b:62:93:30:68:df:54:91:
9d:3e:bc:b9:c1:e0:e7:0a:b5:1a:e8:b0:a9:7e:24:9a:d5:7f:
84:55:6e:ef:98:c5:3a:2e:29:eb:1e:b1:dc:c7:70:60:73:c3:
1c:39:b1:a9:e1:29:5d:61:56:c0:b4:99:4d:d8:87:82:53:22:
8a:ef:a3:a7:5c:9e:fa:d2:33:18:da:06:16:d2:42:fb:63:a1:
48:91:67:5c:84:80:cc:c4:d3:83:d3:df:f4:05:63:22:b2:fc:
cc:77:2b:5d:6f:99:c7:73:e1:51:fc:e2:f3:1b:60:da:d0:f2:
1b:d4:3b:b0:78:7d:61:40:5d:74:7f:1f:dc:43:8e:b6:f1:e5:
d1:3a:31:fc:59:6a:f6:9e:0c:68:45:b8:30:c7:30:b6:e1:52:
f6:5a:bb:5c:91:91:a9:5b:72:59:d0:d9:18:8c:25:3a:ce:92:
72:cf:8a:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1
MDIwNTlGMEMwHhcNMjYwNDE2MTkyMTAxWhcNMjYwNDIzMTkyMTAxWjAYMRYwFAYD
VQQDEw02OWUxMzY5ZS05MDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApTHjOLFp/Tx2p5hQ1hh6tyQkmnVY+6U9vXK0ANL+8Id262onaZlnaNkZyU7W
SsAX7zTLfLQwwrksnZe4jWKljDkTR0oobDdibqvT4fuE67C7EpXAlueRbdZNBYOd
oJi/tWTxEcgwvqg69MdQ5VwWz6pFNS4or/VcW2QysZx0KEFZh59Ee+ZZnQAncMJ8
4zLT0u4u86UIh1mUn0TQJueRoWH72s0FETVayOMLEkQA85SjCntRq96jFk/Oew2z
qSh7aLAb7bT9EHI4oFkAkpMYJ2xIhSW3Fr5RT6Z1wbcL8QFMuyBeMFLODuosirWq
2irBNvRTzjtRTcmhDaAMpD90TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3z0DM5
dQoXEeBd+14Y3lhDfB5wMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE
QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6
Y3d1bU02UlFDdlZRSUZud3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQZTwjJF8cZ5uulrjOxogYXd2bULHRv8qcQuSSITeSl4+wCu6EBnbeyN9Mz10
gmZjTan/nSb9psHFz3Re/3F7L8l4mHVSWcblAiXRY6663V7WBptikzBo31SRnT68
ucHg5wq1GuiwqX4kmtV/hFVu75jFOi4p6x6x3MdwYHPDHDmxqeEpXWFWwLSZTdiH
glMiiu+jp1ye+tIzGNoGFtJC+2OhSJFnXISAzMTTg9Pf9AVjIrL8zHcrXW+Zx3Ph
Ufzi8xtg2tDyG9Q7sHh9YUBddH8f3EOOtvHl0Tox/Flq9p4MaEW4MMcwtuFS9lq7
XJGRqVtyWdDZGIwlOs6Scs+KeA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:57 2026 by rpki-client