
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json)
Hash identifier: sADWpBxC+qgbyI9ySbwg92bT/Y0zlJqBkozle/YhsDc=
Subject key identifier: BE:84:7B:BA:89:E3:26:6F:14:4C:96:01:5B:7F:81:39:80:40:45:36
Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF
Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
Manifest number: 0205
Signing time: Sat 19 Sep 2026 03:18:19 +0000
Manifest this update: Sat 19 Sep 2026 03:18:18 +0000
Manifest next update: Sat 26 Sep 2026 03:18:18 +0000
Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: baW+upRdJqz48oMq35iWrAEOQ9gPDFn+GEA8Ocy9hUQ=)
2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: uZLI87yhkZqBREf9Dkw2+sZTis7hj3RLHWj7/G8COxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl
rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
Validity
Not Before: Sep 19 03:18:18 2026 GMT
Not After : Sep 26 03:18:18 2026 GMT
Subject: CN=6aadfefb-4ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:56:d1:2d:42:5f:5c:78:b3:57:07:e2:98:
ab:9a:57:cb:99:c5:97:0d:fe:4f:5b:3a:65:cf:ef:
f5:c4:7b:55:d4:6e:fd:3c:1f:c1:fc:dc:d6:e7:4e:
e9:f7:24:76:20:20:de:f9:1a:ab:e8:bc:d7:23:ce:
2c:35:57:0d:58:a9:26:c5:bd:62:06:ae:9c:3e:7e:
ae:4c:7b:05:50:bb:84:62:3c:67:c8:46:1d:bd:0e:
69:2c:70:ce:cd:0b:ed:53:9a:78:5f:5a:7a:c5:a5:
d3:39:71:c2:5d:8c:e5:33:25:c6:37:a4:83:65:e7:
bd:42:66:13:b8:56:a1:5b:20:33:b1:3d:ed:06:47:
50:75:a3:b8:4b:8f:19:15:dd:22:d3:4e:e8:72:41:
3c:0c:74:4b:d3:92:89:32:86:23:c7:65:e7:bc:2e:
31:70:df:f5:6d:6e:44:af:fc:20:2f:d4:e4:6f:fd:
27:08:e7:82:4b:fc:22:e1:e8:14:38:7b:81:cb:b4:
9d:8a:b8:1c:f8:f6:89:2d:3b:50:40:c1:bd:c6:a0:
05:6c:c3:f7:60:06:b5:de:b9:da:72:ca:7c:9f:c5:
1b:f6:36:da:0e:9f:f3:9d:02:1c:61:bd:a6:7f:f8:
78:72:99:45:48:47:a1:7f:7f:ba:02:f8:a2:3e:0b:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:84:7B:BA:89:E3:26:6F:14:4C:96:01:5B:7F:81:39:80:40:45:36
X509v3 Authority Key Identifier:
keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:12:d7:75:6a:2f:f9:01:71:43:de:b4:18:20:fc:52:50:95:
9c:34:65:3d:0e:cb:bf:42:69:51:19:3b:81:39:19:21:b2:b1:
af:9f:35:46:3f:01:ab:f9:33:17:8e:b9:0e:2f:cd:5a:8e:71:
16:df:b9:d4:2f:59:57:02:13:6d:8b:3b:10:e8:1d:bf:96:d3:
de:b8:a1:52:bd:5d:6d:3c:a8:19:68:c4:4b:d8:84:d5:e9:30:
b4:72:33:0d:1a:37:e1:48:a0:6d:3c:a0:37:94:5f:3d:1a:b0:
89:0d:c8:36:6f:e4:5f:45:a8:ae:0d:89:b0:91:df:6a:71:6f:
3b:47:ee:a6:19:51:3a:9d:1c:63:19:9d:4a:4f:67:2a:f0:35:
8c:0a:9c:4d:d8:09:cb:be:3b:75:e4:d3:54:50:5b:a0:63:a9:
27:63:86:da:a5:e8:5b:4d:21:e3:e8:a0:58:bb:0d:07:3f:1c:
63:15:3b:81:f4:36:e4:d4:a8:d9:2c:dd:f8:2f:aa:38:bf:55:
27:a1:fe:02:d8:ad:0b:78:82:d7:c5:82:49:43:63:0b:15:7e:
54:18:3a:12:b6:70:f1:b9:1e:61:b6:fc:7a:57:cb:26:e8:f1:
8e:a3:2e:6e:b9:e7:f5:61:c3:ed:3d:c9:ea:7c:8e:f1:cd:fd:
66:2c:b3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:34:44 2026 by rpki-client