
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json)
Hash identifier: BBHBXtV6xNYzaRBCXWN4sl6qaKqA8gC+SFQBKk6Yqig=
Subject key identifier: 9D:3F:8A:87:0A:2B:39:DD:2D:71:41:01:0D:C7:4F:89:12:C0:E5:F9
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial: 1D0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
Manifest number: 1CF2
Signing time: Thu 16 Apr 2026 16:06:23 +0000
Manifest this update: Thu 16 Apr 2026 16:06:22 +0000
Manifest next update: Thu 23 Apr 2026 16:06:22 +0000
Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: m9OwYPvTFEAAK6LmMMw2jrMElCdESFMFMODMshHVTjw=)
2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: Y1gVzkwfOLuyPoIfE59zPK8DMvF4H060KJy8V8tGtwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7438 (0x1d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Validity
Not Before: Apr 16 16:06:22 2026 GMT
Not After : Apr 23 16:06:22 2026 GMT
Subject: CN=69e108ff-b0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:21:92:14:6a:4e:ea:2c:2e:54:a5:1a:63:
cf:5d:c5:31:96:95:93:e2:d5:e0:83:d0:7d:5c:94:
85:fc:83:e8:bd:b1:0c:95:57:95:0f:04:21:b7:40:
55:19:25:00:11:02:91:c7:ec:6c:06:1c:8c:38:6c:
4c:08:d3:df:ce:6e:cd:42:83:48:e5:29:cb:20:3f:
a6:3c:e0:02:b4:99:ce:0e:82:52:52:5f:22:df:81:
08:67:8a:b0:5f:b9:51:99:73:78:38:a4:ae:12:8f:
c4:6b:ff:04:2c:00:93:1e:29:3a:54:06:fb:19:a3:
cd:b0:a6:e7:f2:ab:39:02:e5:ec:cd:04:66:e9:ec:
d1:ec:cd:07:eb:7d:c5:bb:97:f7:57:22:0f:1d:35:
c0:9b:52:ac:d3:33:58:30:bb:14:71:a1:fc:cb:b8:
b0:1a:c1:8a:e6:13:a8:d3:e3:50:88:a6:0f:7a:ff:
29:05:3c:c3:3c:c7:8b:58:05:02:c7:bb:8a:81:4b:
9b:b4:ab:bb:1d:e6:46:b3:83:87:10:4d:9f:89:99:
7e:9b:fe:65:13:a2:27:81:a3:e6:46:98:97:46:51:
1f:c2:bd:61:19:87:6f:f7:55:00:07:32:f7:c1:d8:
f4:f5:41:24:af:15:84:0e:da:8e:ec:a8:99:ae:ce:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3F:8A:87:0A:2B:39:DD:2D:71:41:01:0D:C7:4F:89:12:C0:E5:F9
X509v3 Authority Key Identifier:
keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:4f:46:9c:06:da:f3:89:19:8b:4f:b9:5e:b3:5b:34:a6:7f:
c8:2f:24:f6:86:59:98:4b:8f:29:53:0f:7a:47:44:a8:10:58:
68:0e:ba:69:ff:fc:a5:52:e8:d1:c0:39:4b:0f:90:5e:0b:53:
33:46:ce:bd:fc:7d:71:89:b7:76:a8:55:ef:c9:5a:a6:b5:3f:
1f:7f:3d:a1:34:51:27:6e:4a:df:74:0a:d9:e2:3f:40:d4:20:
85:2b:73:b8:8a:42:ea:85:a4:39:33:06:ad:32:dd:4c:4d:51:
5d:05:3e:87:70:7a:ae:7d:4d:9d:f6:27:1c:c1:c4:e1:4e:57:
91:8f:cd:14:8d:8a:06:a9:fa:d4:95:67:b3:c2:96:93:65:fc:
d2:63:76:3e:94:1d:55:92:1f:43:9a:83:e6:67:ea:51:64:a5:
41:83:44:d3:98:a8:7f:72:88:f2:41:be:83:6b:33:1c:23:6f:
f1:84:0a:d0:57:34:36:ef:ee:85:23:80:b2:a8:69:da:0b:4c:
3f:69:fb:5a:96:d4:44:db:8b:fe:79:0a:17:01:c8:58:6d:9d:
9f:fa:ba:52:96:67:a2:80:34:f5:66:cf:ff:5a:55:f3:47:b1:
d8:fb:ab:96:fc:5e:66:f0:a9:36:ba:ff:d4:64:23:39:a1:28:
1b:59:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:08:24 2026 by rpki-client