
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json)
Hash identifier: P9Z+qODeTcmgSyaY2RU9y706OPQHJkfe2pg/M4wZjq8=
Subject key identifier: 70:FE:A3:11:03:8E:C1:79:6E:CB:B3:BE:BF:3A:31:B9:97:90:60:4E
Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
Manifest number: 0156
Signing time: Sat 13 Jun 2026 05:17:33 +0000
Manifest this update: Sat 13 Jun 2026 05:17:33 +0000
Manifest next update: Sat 20 Jun 2026 05:17:33 +0000
Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: +Eq44mA3V+TppJeM73cuiHjKp/EXKJgqye1x15GW43s=)
2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: /Mfb+/GCj01R9lifsGJinmVrLBP5+B8J3/UWQZMFbAU=)
3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: YSZYviBTPxtzDHVeHnT8ow3/nXxU9t04H0K+ZmSVj7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Validity
Not Before: Jun 13 05:17:33 2026 GMT
Not After : Jun 20 05:17:33 2026 GMT
Subject: CN=6a2ce7ed-9a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:bc:d7:5d:d8:b2:39:18:09:eb:87:8d:25:
89:ae:af:33:8d:ea:c9:b0:71:c0:82:6c:38:e6:60:
4e:e2:e4:8e:82:93:3a:94:94:33:26:02:16:9c:f3:
76:ee:64:aa:16:96:59:bb:23:85:7f:50:1e:97:7d:
79:cb:0d:f0:ee:58:7b:e0:d4:f4:86:d5:20:d6:c4:
c4:89:fc:c4:71:67:6f:05:e9:fd:6c:cc:a9:18:59:
4a:68:b6:d3:56:99:a0:cf:74:08:9d:09:63:f4:e3:
12:b0:d9:be:c9:e8:af:34:6e:c7:5f:d8:f0:3c:f9:
8a:5b:58:ea:7d:ac:5d:a6:43:18:c9:41:e7:84:b9:
15:fd:cb:8a:1c:f6:6d:c8:dd:fc:df:6a:96:e7:60:
a6:71:55:ee:42:aa:08:79:a3:f6:99:76:0c:33:ed:
d2:25:3e:c1:6c:29:b0:41:42:20:e2:36:d3:11:a6:
f2:ed:f3:fa:2e:b4:7a:b9:f3:2d:d9:8d:45:93:04:
22:c9:6e:0b:cf:f8:cf:2b:70:8b:9a:8c:52:48:b3:
28:67:7c:c6:87:57:3a:0e:9f:85:9f:ac:d0:de:5a:
f5:c2:48:6c:c7:11:39:fc:dd:11:b1:e9:a9:10:1d:
f9:c7:10:8f:7e:b9:f6:8a:2e:65:37:98:b2:79:cc:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FE:A3:11:03:8E:C1:79:6E:CB:B3:BE:BF:3A:31:B9:97:90:60:4E
X509v3 Authority Key Identifier:
keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:ab:21:01:b7:56:65:50:3b:42:39:20:7b:65:90:09:67:5f:
d9:1b:fd:40:6d:ff:71:cf:6f:41:37:71:e7:a5:7d:35:cd:81:
96:d5:74:14:24:5b:2d:c0:b0:d3:97:a3:57:79:55:82:28:a0:
64:1c:bc:6a:2c:25:e6:7d:f6:9d:2a:46:bd:a9:a7:fa:d2:93:
c1:85:17:3d:3a:41:2e:24:ea:20:1e:b3:07:e5:d0:c0:57:af:
0b:83:d9:d6:08:b8:a8:fe:4b:99:03:4f:71:40:e4:24:02:2d:
10:60:49:59:bf:2b:aa:25:40:87:0c:87:34:f5:27:df:13:34:
02:c5:6f:b7:ed:ad:88:a3:a8:fe:95:24:32:57:bc:ee:b7:28:
61:f8:72:19:f5:68:8d:a8:35:c4:67:28:06:99:3b:e0:0a:3b:
96:3c:86:18:e4:4c:ba:23:4f:58:02:1a:44:09:94:83:fd:aa:
94:f8:16:b2:22:08:d5:cf:0c:72:43:8e:0d:2a:b6:b5:3a:9f:
3d:f6:57:48:db:14:79:80:01:e8:c3:6d:71:27:2c:d2:9e:be:
06:41:9a:4d:e8:f8:7e:0f:91:f4:8f:e7:4f:c8:c0:95:ee:0b:
a1:e6:57:6a:fd:77:73:86:48:e1:8b:b1:16:3b:c6:5d:5b:30:
cd:72:eb:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk5OEExMTAvBgNVBAUTKDlDMDcxRTgxNEQ4MEIxMEUyQ0ExRjcxRTlCMkU1MzVD
MzkwNUNCNjUwHhcNMjYwNjEzMDUxNzMzWhcNMjYwNjIwMDUxNzMzWjAYMRYwFAYD
VQQDEw02YTJjZTdlZC05YTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmva8113YsjkYCeuHjSWJrq8zjerJsHHAgmw45mBO4uSOgpM6lJQzJgIWnPN2
7mSqFpZZuyOFf1Ael315yw3w7lh74NT0htUg1sTEifzEcWdvBen9bMypGFlKaLbT
Vpmgz3QInQlj9OMSsNm+yeivNG7HX9jwPPmKW1jqfaxdpkMYyUHnhLkV/cuKHPZt
yN3832qW52CmcVXuQqoIeaP2mXYMM+3SJT7BbCmwQUIg4jbTEaby7fP6LrR6ufMt
2Y1FkwQiyW4Lz/jPK3CLmoxSSLMoZ3zGh1c6Dp+Fn6zQ3lr1wkhsxxE5/N0Rsemp
EB35xxCPfrn2ii5lN5iyeczC4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHD+oxED
jsF5bsuzvr86MbmXkGBOMB8GA1UdIwQYMBaAFJwHHoFNgLEOLKH3HpsuU1w5Bctl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk4QS81MjJDQjczNDdB
RTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNRNHNvZmNlbXk1VFhEa0Z5
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnkyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNR
NHNvZmNlbXk1VFhEa0Z5MlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWashAbdWZVA7Qjkge2WQCWdf2Rv9QG3/cc9vQTdx56V9Nc2BltV0FCRbLcCw
05ejV3lVgiigZBy8aiwl5n32nSpGvamn+tKTwYUXPTpBLiTqIB6zB+XQwFevC4PZ
1gi4qP5LmQNPcUDkJAItEGBJWb8rqiVAhwyHNPUn3xM0AsVvt+2tiKOo/pUkMle8
7rcoYfhyGfVojag1xGcoBpk74Ao7ljyGGORMuiNPWAIaRAmUg/2qlPgWsiII1c8M
ckOODSq2tTqfPfZXSNsUeYAB6MNtcScs0p6+BkGaTej4fg+R9I/nT8jAle4LoeZX
av13c4ZI4YuxFjvGXVswzXLrUw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:54 2026 by rpki-client