
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json)
Hash identifier: NJs4sUbjVhudmqlZQzpOEOoITM6MY5/WyL6bzTYsNls=
Subject key identifier: 9B:AB:A7:AE:45:F7:52:FD:F9:F5:B8:A4:4C:19:C4:87:CD:AE:6B:8D
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial: 1D44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
Manifest number: 1D27
Signing time: Tue 28 Jul 2026 16:13:49 +0000
Manifest this update: Tue 28 Jul 2026 16:13:48 +0000
Manifest next update: Tue 04 Aug 2026 16:13:48 +0000
Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: xzE/TL+yTQmr5c/irv+2GWexwN36Rv6ZzGAGEnaCmWc=)
2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: Y1gVzkwfOLuyPoIfE59zPK8DMvF4H060KJy8V8tGtwo=)
3: xfIw3q3qM2oF8nKAJKiIyOXPmts.asa (hash: Iw8t2cOOoe9YoYuawbsMRtKnfr4RdcfMSHPUEPUr57I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7492 (0x1d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Validity
Not Before: Jul 28 16:13:48 2026 GMT
Not After : Aug 4 16:13:48 2026 GMT
Subject: CN=6a68d53d-91a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:26:b5:a3:3f:52:90:58:13:16:69:b4:44:
78:46:51:ab:f2:4b:10:0d:04:00:d1:ba:77:5b:35:
16:f6:c8:d7:c2:67:5d:70:e8:d8:1e:b5:6b:f9:0a:
22:22:cd:7b:e4:e0:21:79:5e:1a:45:10:42:db:fc:
04:92:d3:ab:16:ff:bb:de:0e:93:06:a8:b9:1b:af:
19:08:ce:9f:8e:bf:be:4d:3a:94:91:36:4a:6f:93:
66:2c:86:c1:ae:2d:98:fe:6f:de:de:73:85:3d:7f:
f9:0b:15:92:57:27:98:22:38:f8:25:15:62:a8:8c:
ea:c0:0f:07:cb:85:7a:28:ae:47:32:d8:a3:ff:ce:
5d:db:df:60:46:17:07:50:88:a7:1c:0c:1e:2d:bc:
92:ba:6b:c8:dd:1f:71:e9:44:5e:e8:33:f3:6a:7a:
46:6f:48:ac:e8:a0:c6:3e:05:ab:7e:88:57:b5:54:
65:b7:e2:8e:ed:0a:39:96:a1:89:bf:03:a7:c4:26:
28:b1:cf:c5:1d:d4:26:c8:1f:d2:41:47:d7:08:cb:
0d:3e:52:25:ee:5b:b0:18:b5:4a:bf:7c:a9:04:67:
54:e0:5d:ae:f5:60:cd:22:ca:71:39:f8:b6:2d:8e:
75:d7:55:40:a5:23:a2:fa:0c:69:e5:3c:44:37:41:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AB:A7:AE:45:F7:52:FD:F9:F5:B8:A4:4C:19:C4:87:CD:AE:6B:8D
X509v3 Authority Key Identifier:
keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:22:c9:46:54:d0:45:5b:75:8e:af:58:68:85:26:f8:63:ae:
d2:0c:41:38:bc:a7:86:93:d3:e7:1d:14:fe:a8:2b:15:ee:28:
d8:93:e9:8a:f3:77:2f:02:8a:2d:76:40:ed:42:6e:d7:4c:16:
f0:a1:a4:96:ae:59:f7:9b:92:86:7e:ba:f2:4f:cb:36:ad:15:
80:67:5f:4a:cc:48:7e:72:05:2c:f5:69:f9:87:d9:d0:6a:38:
54:4d:00:ff:80:da:a4:2c:29:cd:f5:28:00:09:3d:a4:4d:75:
7c:9d:58:73:61:d6:78:47:2b:7c:f8:05:92:99:b4:a5:9b:03:
b8:43:de:60:ec:15:1b:5c:40:a8:52:ab:a3:28:72:ab:b2:ce:
4c:dc:49:ce:ee:46:d3:a4:38:8e:6f:7a:1b:02:c4:17:66:05:
fd:bb:2c:95:ba:ca:a4:32:92:17:0c:3a:58:4d:c0:97:d1:5e:
73:66:ee:f9:b2:ec:e9:3e:31:e9:88:80:a0:c1:60:cd:4a:6e:
c6:c1:fc:9a:91:47:d2:cb:14:d4:25:c1:45:d1:1e:7a:bf:2a:
39:b4:87:30:41:54:b9:8f:92:df:03:c8:e0:87:2c:6c:aa:6e:
de:dd:e5:a9:34:4e:91:ea:a5:14:ca:4f:10:a5:d5:87:46:39:
db:cc:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:18 2026 by rpki-client