
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
File: N2LeNhaqS6BLeurLVIuGpi5vFw4.mft (raw, json)
Hash identifier: MW/1CnFiE3lWXSahN2rtH1IEz5I9yIX03WSxqzl7gPA=
Subject key identifier: F6:39:3A:9E:0E:50:EC:A5:80:1D:91:D5:79:02:8C:F1:48:BC:81:D4
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Certificate issuer: /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
Manifest number: 87
Signing time: Sat 03 Oct 2026 08:26:15 +0000
Manifest this update: Sat 03 Oct 2026 08:26:15 +0000
Manifest next update: Sat 10 Oct 2026 08:26:15 +0000
Files and hashes: 1: N2LeNhaqS6BLeurLVIuGpi5vFw4.crl (hash: IUlysvR+s34VXhEoZsjIRiurq4Zcu26k3UleRP6k2O0=)
2: 3B91F0E650E511F1B3C6CC42C3833773.roa (hash: 14xyf5BgEGdxYISaOxLmZCE19ludmdYaT6MeaJylJoQ=)
3: 3A8D72EC50E511F1B3C6CC42C3833773.roa (hash: G9gjTmASAxWaSGyTQLyM5wPNBpCQflf0owj+nNRdQME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Validity
Not Before: Oct 3 08:26:15 2026 GMT
Not After : Oct 10 08:26:15 2026 GMT
Subject: CN=6ac0bc27-6520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8a:0f:84:91:e1:41:7c:36:51:a1:ed:3c:b4:
59:25:d5:70:ad:93:61:1b:12:d1:da:eb:b2:e0:f0:
fd:08:bc:b3:0e:93:db:3a:f6:f6:38:64:59:19:10:
41:6f:f4:51:32:62:24:5c:3c:de:e0:74:40:d7:fe:
da:93:a9:43:1f:a2:3d:0c:4d:c8:9a:b1:b1:01:f3:
7a:d5:2e:fe:67:67:a3:96:16:6d:b3:0e:73:1e:20:
a4:37:0c:02:49:dd:6e:aa:24:27:90:fb:ca:58:77:
22:fa:cc:c4:4c:1f:ef:d5:f0:9d:1e:0f:d1:d2:e6:
d6:94:4a:62:00:a7:79:d1:fa:04:e1:e4:1b:86:33:
85:de:99:4c:67:49:4e:af:6d:00:e8:42:ba:d3:a6:
fb:6c:dd:f7:57:22:38:3a:7a:d5:18:b6:9e:f8:14:
6c:00:e8:85:ea:39:09:c8:02:28:96:f5:b6:9a:61:
a0:74:4c:c0:90:dd:71:62:b3:1e:e7:b4:08:54:37:
7e:5a:3e:82:a5:cf:d3:87:ba:14:41:6d:01:bf:98:
6e:72:ad:f8:f2:38:2d:c6:72:12:bf:89:02:b3:52:
d2:25:43:12:1c:96:e7:db:d1:bb:88:58:75:e6:2f:
c4:9b:82:88:8f:94:da:60:ef:21:ed:d5:15:12:89:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:39:3A:9E:0E:50:EC:A5:80:1D:91:D5:79:02:8C:F1:48:BC:81:D4
X509v3 Authority Key Identifier:
keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f6:99:ee:e0:70:8f:f1:3c:17:83:23:76:cf:43:6a:1f:46:
05:2a:c2:3f:0a:09:a1:5f:b0:53:58:3a:d3:9e:82:d5:f4:56:
3f:e4:5b:c8:db:e0:e4:41:87:c8:5c:e8:dc:a8:ef:01:1d:62:
32:0a:88:15:e5:52:ad:31:55:0d:01:d3:72:c6:29:94:ea:ce:
27:a8:61:c0:8c:f1:a9:48:df:96:fa:c7:45:46:5f:7f:88:06:
ff:c9:45:d2:19:42:5a:64:2b:2c:14:80:9b:40:8f:79:ab:18:
de:6a:c9:99:65:7e:f3:63:f1:57:a6:50:e6:47:4c:40:34:94:
1b:da:0a:ff:d6:6f:2b:66:c4:69:17:6c:3c:42:c1:ad:78:bf:
d6:2e:e9:8c:9c:0b:08:9e:d7:03:e7:c8:0e:da:be:6e:c8:aa:
a6:62:aa:94:c7:04:2e:0a:8c:6b:6f:7c:3e:c5:81:b3:c5:70:
ec:60:a4:11:14:44:8f:a1:c2:10:fa:a5:01:4d:8b:13:30:6a:
e1:10:c0:96:f9:22:a2:84:c8:8e:1a:7b:19:cb:e1:a9:81:76:
99:ba:cb:68:c7:21:be:a2:d8:7a:83:14:53:5a:54:4e:36:02:
b6:2b:5f:b9:fe:85:93:ef:f4:15:f6:cf:65:b6:b1:ee:58:43:
35:10:e8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:52:46 2026 by rpki-client