
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
File: N6Zf20DoxlmxflAA-ommVoCXbVs.mft (raw, json)
Hash identifier: 7/3iBiDwbJdH3UBtphQcs4+fI2wb1tSJwxiET5Ek0wM=
Subject key identifier: 44:C1:90:90:ED:75:F0:1B:E1:BF:44:9D:D7:E1:A3:78:7C:C6:E5:8C
Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B
Certificate issuer: /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
Manifest number: 8E
Signing time: Fri 17 Apr 2026 07:20:14 +0000
Manifest this update: Fri 17 Apr 2026 07:20:13 +0000
Manifest next update: Fri 24 Apr 2026 07:20:13 +0000
Files and hashes: 1: N6Zf20DoxlmxflAA-ommVoCXbVs.crl (hash: klWlCMpUjKXpbme1BPwW5f61MSgLU8XqrAqqYEy9438=)
2: 482874AE710E11F0B4CBA430C4F9AE02.roa (hash: Enrr3cuFwRAqoDocsM8n82Zm7sQ1w4sn1Dd/0z7i8QU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl
rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
Validity
Not Before: Apr 17 07:20:13 2026 GMT
Not After : Apr 24 07:20:13 2026 GMT
Subject: CN=69e1df2e-7ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:57:de:cf:59:0a:60:9c:5f:e4:65:78:2a:
fd:ad:8d:83:e1:ab:f7:6e:ba:dc:a3:26:e5:79:82:
ff:7b:50:cb:6e:8a:86:a8:3d:f7:43:9b:d3:a9:fa:
03:2a:28:91:89:14:88:92:11:33:21:aa:f6:69:ec:
50:73:4f:94:e0:a6:50:a0:c7:0e:63:79:00:b8:1c:
8c:8a:4f:de:2b:13:ca:ac:64:63:e4:3d:67:d7:ba:
16:7f:ae:1f:24:ca:3b:60:08:fb:d7:bd:d0:a9:79:
f4:83:28:de:5e:02:06:37:a0:98:57:d7:8f:41:03:
67:d2:6d:e2:a9:3d:b8:08:e4:5b:80:ac:91:21:68:
22:8d:93:9c:41:7f:11:fb:4b:94:61:92:29:1d:86:
05:5a:dd:33:e6:66:7d:f2:c4:7f:18:19:e8:94:aa:
73:64:9d:48:11:fe:eb:e5:b0:04:6b:ba:fb:e5:88:
05:a7:6f:03:8c:67:fd:75:21:ba:60:49:d0:84:a1:
ac:79:41:26:9c:64:13:a1:43:73:6c:b5:6a:68:dd:
b1:f6:db:fb:d9:14:53:c5:8e:87:83:62:9c:4b:9c:
80:b4:28:6f:21:42:c0:35:f7:86:12:cb:b5:f0:e1:
79:83:59:37:29:4d:12:54:46:66:28:3b:a3:37:53:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C1:90:90:ED:75:F0:1B:E1:BF:44:9D:D7:E1:A3:78:7C:C6:E5:8C
X509v3 Authority Key Identifier:
keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c6:25:66:dc:b3:32:af:38:92:61:32:12:c9:c6:5f:f2:44:
61:6a:60:6d:2e:8c:f1:c4:2f:e7:05:69:70:a0:c0:73:52:aa:
93:98:8d:3a:b2:01:b8:2f:49:ee:01:d0:74:fe:9f:cc:b9:06:
4c:5f:f1:8f:ca:1a:68:ad:d3:32:48:9d:08:75:74:23:83:9a:
4c:15:8c:1e:14:d8:4c:4e:8c:8c:f0:ea:0d:44:f1:61:b6:ea:
6c:d5:24:5f:bd:21:39:9d:e2:65:c8:fc:6f:38:ad:ae:99:11:
6a:de:a8:cf:51:97:72:74:0d:ca:0a:73:56:44:c1:e6:bc:c9:
4f:db:8c:ee:07:30:f4:da:e9:32:05:f7:59:5a:5e:a2:38:a5:
0e:1c:40:82:10:76:2c:dc:5f:30:88:c5:e2:d0:5b:d3:5e:a0:
d5:59:24:de:db:b9:43:0a:f1:cb:ce:35:79:45:53:4e:52:8e:
13:b7:0d:f7:88:d2:01:19:f8:3d:c6:53:36:8e:a6:11:7e:e5:
97:75:f2:92:af:58:d0:5c:d0:5b:e9:29:30:cc:a9:01:76:74:
5f:e2:6c:b2:a9:9f:db:85:8b:12:8c:05:2a:ab:be:9b:a1:57:
de:23:94:21:d4:8a:c9:72:53:76:62:8c:5c:7c:83:5e:8b:e3:
a0:68:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:25:10 2026 by rpki-client