
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json)
Hash identifier: qm4nroWzePHgUKqLrZvPKfNcGmo5UhF22jksrjNL2FI=
Subject key identifier: 63:B7:FC:94:F3:F5:AC:25:EC:FE:27:74:A8:5B:88:8D:D3:BB:4B:0F
Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Certificate serial: 0CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
Manifest number: 0CDD
Signing time: Tue 28 Jul 2026 18:35:54 +0000
Manifest this update: Tue 28 Jul 2026 18:35:53 +0000
Manifest next update: Tue 04 Aug 2026 18:35:53 +0000
Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: h34OSoDnmaQ92zxAG4BjrTVCzLRJhLwv7Ym5HiIp5KE=)
2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: +1OqTpdYQThGOs42BYoaAj2a2Cg6wC/jJbBuEZgzjdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:35:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Validity
Not Before: Jul 28 18:35:53 2026 GMT
Not After : Aug 4 18:35:53 2026 GMT
Subject: CN=6a68f68a-298c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:0d:ed:d5:bc:38:70:d3:49:ad:ec:36:94:
2e:43:a3:83:2d:b5:20:d9:67:c1:55:db:01:86:3f:
03:c9:19:55:ef:69:40:2a:41:15:11:4d:9f:95:20:
ca:0f:81:ca:92:a9:86:5a:33:fa:09:9c:dd:6e:48:
7f:a8:b6:bc:d9:a1:7a:8b:74:43:46:5a:f8:42:83:
55:ad:8f:21:f2:47:ff:58:85:a7:65:64:16:2c:49:
ce:60:73:fc:6f:03:18:ba:58:7a:b6:4f:2d:e1:af:
9a:0c:e2:3a:b1:cd:bb:e5:15:57:28:4b:e7:e7:e7:
d5:2a:e2:10:42:fb:fd:f4:6f:86:12:35:7e:a3:ea:
fb:08:21:26:34:92:93:bd:13:40:5e:77:a9:db:29:
20:3c:a3:8e:56:9d:27:69:79:d6:fd:85:d3:2b:c8:
65:a0:d4:13:32:a9:f2:cc:66:f7:f5:90:0a:f0:f3:
30:b3:38:b1:92:2d:5e:c2:92:b7:a2:e8:1a:b8:56:
0e:8c:13:25:44:22:31:5d:b0:9d:40:a8:a9:68:66:
3e:60:c7:49:6a:09:47:ba:a5:35:e9:52:c9:b5:28:
06:76:71:65:11:18:ce:d4:f8:f8:1c:29:fb:68:24:
a1:0a:14:e2:7c:5a:c3:54:bc:89:7f:3b:4f:e9:48:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B7:FC:94:F3:F5:AC:25:EC:FE:27:74:A8:5B:88:8D:D3:BB:4B:0F
X509v3 Authority Key Identifier:
keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:e0:bc:47:50:5e:8e:5c:a7:ec:3c:54:c0:bf:6e:05:10:0c:
d1:cd:0d:f1:56:bc:cb:7f:1a:29:ef:0f:0a:55:af:94:3c:c7:
3b:25:81:02:90:9b:a0:a2:ad:e8:f2:60:72:17:37:50:3f:26:
86:9b:0f:33:85:1d:c2:78:76:5a:af:cd:57:81:c6:51:93:21:
22:84:ba:f3:36:34:79:8b:c2:23:b0:bc:b4:30:d6:05:23:e2:
e8:84:fe:76:95:92:36:b7:67:65:78:f3:f3:76:12:de:97:e0:
cd:f2:43:78:50:0c:06:d7:72:6e:0a:93:98:b0:8e:d1:7b:5c:
ef:cd:73:43:cd:5c:0e:26:22:27:74:24:e5:5d:02:16:14:07:
cf:38:77:16:72:66:08:92:1a:fb:cb:2e:dd:02:8f:f5:87:81:
af:47:b4:b9:8c:1c:1f:23:49:e1:ed:b6:84:3f:cc:64:94:bb:
63:4e:ba:cd:59:b8:f5:4b:6a:b3:b4:8b:0d:7c:32:d1:bd:05:
c8:e3:db:90:ab:f9:b6:12:07:e2:50:58:7a:9c:8e:5e:06:51:
d2:94:99:76:d3:37:35:22:3e:da:47:70:9b:44:5b:f3:7f:b6:
17:8f:3f:45:85:b2:86:cf:01:08:34:1c:53:29:15:ad:fe:1f:
a9:b8:cb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:01 2026 by rpki-client