
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
File: NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft (raw, json)
Hash identifier: RUxVNyTrnlbiY3KfmFg1oeFL6jg7jrwTuWYdXF4OO5I=
Subject key identifier: 12:D9:A3:69:01:00:67:41:9C:D9:04:A7:13:13:5A:8A:28:89:17:48
Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62
Certificate issuer: /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
Manifest number: A6
Signing time: Fri 17 Apr 2026 06:58:46 +0000
Manifest this update: Fri 17 Apr 2026 06:58:45 +0000
Manifest next update: Fri 24 Apr 2026 06:58:45 +0000
Files and hashes: 1: NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl (hash: zvZOb47bmW/JmCNjwCKDp+epz1umh0JBB12QZtv6gW4=)
2: 5E4EF73E409011F0986B1F68C4F9AE02.roa (hash: lbwk8mNKjMeoW18suzzRQjcBAL5Bd/eKgngvQTadOm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
Validity
Not Before: Apr 17 06:58:45 2026 GMT
Not After : Apr 24 06:58:45 2026 GMT
Subject: CN=69e1da25-9aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:6c:0f:41:d2:06:b6:9c:6a:ae:6f:aa:f0:
1e:00:cf:c0:e9:6e:b9:71:5e:36:60:d9:e4:35:bd:
91:3e:ca:a8:9b:b3:1e:d7:9f:e3:f0:92:4c:28:cd:
44:ab:b5:27:e4:74:5d:aa:08:6b:35:61:08:76:5a:
fa:ce:40:72:03:cd:38:8a:b3:64:bf:8e:9d:18:83:
e5:a6:60:db:cc:88:93:b5:01:4e:f1:c6:50:19:9f:
79:49:e0:46:b4:20:8f:2d:2c:fc:01:95:9a:c5:ed:
12:c8:69:46:ef:78:5d:ad:55:8f:50:99:02:a0:c1:
40:5a:1b:9c:e8:bb:7a:56:44:d6:40:d0:af:69:c5:
55:e8:94:56:fe:0b:e5:e8:ba:a7:e7:f4:61:9c:5c:
27:4f:dc:0f:e6:44:c6:84:3f:96:a3:b5:50:7b:f8:
f9:3b:6c:2f:12:a4:d3:41:23:d8:94:0c:9d:08:d0:
8a:18:be:fa:80:fa:d9:19:8c:0e:af:ef:bc:49:d7:
b5:ef:97:6b:14:da:ac:02:f0:ec:0b:96:13:99:66:
4e:ce:77:d9:40:59:1e:b8:f3:e4:73:80:b6:a6:d0:
14:ee:c4:83:d5:a3:42:a2:4b:d0:8c:91:05:de:4d:
40:c3:1b:62:8e:38:ba:8f:95:71:ec:8c:c3:5c:18:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:A3:69:01:00:67:41:9C:D9:04:A7:13:13:5A:8A:28:89:17:48
X509v3 Authority Key Identifier:
keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e4:5f:47:45:59:e8:02:f3:d6:52:aa:2b:48:e8:1e:85:fb:
7e:a9:2c:2e:68:4d:cb:64:16:40:ff:48:f0:26:16:28:dd:67:
9f:5f:1d:b1:71:b6:01:f5:4d:28:8d:58:7c:20:3e:24:0c:68:
22:f3:eb:4d:6e:52:83:5e:28:43:0d:1b:3c:68:2c:7d:33:a0:
4e:87:c8:7c:8b:94:08:85:6f:6c:2c:cf:55:43:51:62:d5:f7:
3a:e5:5b:95:bc:72:2d:d5:b1:15:5e:ce:01:a6:e1:6f:3f:ac:
b8:9a:6b:24:0d:56:2e:77:ce:09:0c:a7:42:2e:82:e5:93:c5:
22:8b:61:c0:4e:91:ea:dc:76:7b:0f:15:68:c6:f2:e6:4c:24:
5c:c0:4c:79:19:4d:a4:a2:c4:89:f5:e9:5c:43:26:d4:6c:4d:
3d:5b:06:4c:eb:8b:59:6c:c7:c5:cf:8c:75:09:d3:eb:9c:37:
49:88:5e:51:15:ca:a2:40:82:dc:97:0d:0a:1c:36:e3:cf:f6:
6b:e3:c6:30:18:a3:ed:82:fe:db:7f:30:f5:04:4e:8c:d8:f8:
91:92:04:4a:e5:5c:82:33:67:fa:ad:a2:c4:67:de:78:f0:4e:
f0:f1:cc:4e:95:0f:ec:90:cc:a2:17:db:bd:63:22:6d:64:24:
ac:93:d9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:27 2026 by rpki-client