
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
File: NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft (raw, json)
Hash identifier: JGNhm+Vuogn6mtAmZqKkVG4HCEpV8eReVkE1UReIOW4=
Subject key identifier: 11:91:5B:71:65:15:14:B1:1A:DA:4E:A9:83:60:C6:73:4B:3F:82:8E
Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62
Certificate issuer: /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
Manifest number: F7
Signing time: Mon 21 Sep 2026 06:18:36 +0000
Manifest this update: Mon 21 Sep 2026 06:18:36 +0000
Manifest next update: Mon 28 Sep 2026 06:18:36 +0000
Files and hashes: 1: NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl (hash: 4raugKKBw9RzegTA9dA81/GMOkyYbBH1fgeJYjbUrMU=)
2: 5E4EF73E409011F0986B1F68C4F9AE02.roa (hash: 1WHv+TkV2LE9j58jQN6HoRvbl9s/+GT559gmESgjHR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl
rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
Validity
Not Before: Sep 21 06:18:36 2026 GMT
Not After : Sep 28 06:18:36 2026 GMT
Subject: CN=6ab0cc3c-8abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:1c:0f:0b:3d:a2:bd:1d:7e:9a:72:87:89:
e9:c4:b8:af:fa:43:82:20:26:05:2d:ba:18:2c:57:
32:a5:b4:c8:b7:c6:c2:76:f8:5a:65:65:67:21:a4:
29:df:09:37:9b:32:fd:a6:13:a9:21:c7:59:35:98:
ef:26:9f:7f:e7:09:ba:97:9b:2a:3f:a5:bb:61:8e:
a1:ca:43:a8:30:6a:d7:90:81:83:97:64:54:d5:58:
52:33:e6:51:bd:1e:63:dc:7b:1e:d5:c6:45:9d:48:
c0:e0:a2:be:86:93:21:58:4c:dc:95:c6:f7:a1:55:
6d:6d:df:25:19:7b:c9:a7:d0:16:16:72:36:c1:5c:
ba:d4:c2:56:17:0d:70:63:98:04:44:a1:a4:53:49:
d0:b9:a9:83:f3:9d:94:21:63:0d:7d:ce:08:3e:44:
8c:ca:ba:ea:cc:93:a8:f2:0f:3a:7c:87:b9:0a:69:
25:98:d1:91:8d:f5:f7:26:6f:6f:68:02:a7:81:71:
ef:59:e1:27:81:d6:9e:a0:8f:af:45:7e:4c:e5:00:
cc:1b:dc:1e:70:e5:e7:e9:80:fc:95:f0:a2:55:dd:
6f:2e:f8:9e:b1:35:8e:60:ff:9d:d6:12:a0:18:0c:
38:d8:af:87:c6:b4:34:c3:0d:54:ec:b3:2f:12:53:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:91:5B:71:65:15:14:B1:1A:DA:4E:A9:83:60:C6:73:4B:3F:82:8E
X509v3 Authority Key Identifier:
keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7e:0e:2a:f2:00:67:ea:71:02:61:43:a5:77:f3:e5:b2:af:
73:11:44:5a:cc:26:35:c7:66:16:90:80:49:98:26:21:01:35:
43:90:12:a9:e8:a2:c3:59:22:20:d1:d6:40:e5:8e:51:55:ef:
75:9f:6d:b9:9c:91:1a:71:80:7b:98:fc:34:c9:f8:42:53:84:
27:e6:f7:9f:b8:7f:7f:9e:e5:a0:ed:e4:d9:17:3c:49:41:ca:
a4:66:60:f7:15:1a:18:60:aa:fa:90:f3:16:b1:f1:a9:b0:a6:
3f:38:69:ab:02:a0:d9:d2:3a:f1:ed:fe:da:23:5e:ea:3d:00:
98:eb:49:92:39:9f:00:77:82:01:42:a5:a9:b0:6a:0d:98:79:
ac:17:d3:b2:93:48:e6:e3:d0:43:13:c2:9e:ec:05:83:96:92:
6a:00:f1:6d:f3:4a:6d:82:0b:72:2c:8f:1a:ca:ae:0b:ec:a0:
df:aa:34:72:ec:81:a4:98:6f:ca:c1:7e:a0:0f:24:1f:1b:eb:
74:c4:02:8c:a4:91:a6:cb:92:df:a1:2f:dd:84:0e:13:d2:75:
81:a2:8f:7d:ec:ae:e5:2e:91:72:5f:2d:65:20:7d:cb:dd:3e:
4f:54:aa:30:ef:8d:2d:a3:31:5c:38:64:58:3f:05:e9:c2:6c:
7b:bb:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:06:20 2026 by rpki-client