
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json)
Hash identifier: WL8tVrytjAZxmRAD8ScDnDMNoKH+IqeDotPz2PVf5e4=
Subject key identifier: 3E:DF:14:71:35:90:59:43:50:33:66:BC:80:B3:C5:01:2D:67:37:46
Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
Manifest number: 013A
Signing time: Fri 17 Apr 2026 05:20:16 +0000
Manifest this update: Fri 17 Apr 2026 05:20:15 +0000
Manifest next update: Fri 24 Apr 2026 05:20:15 +0000
Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: 67oAQQSRS+PLd1KbVlzBfigQMHpsdeWjLgOc6iXc3PE=)
2: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: YSZYviBTPxtzDHVeHnT8ow3/nXxU9t04H0K+ZmSVj7U=)
3: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: /Mfb+/GCj01R9lifsGJinmVrLBP5+B8J3/UWQZMFbAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Validity
Not Before: Apr 17 05:20:15 2026 GMT
Not After : Apr 24 05:20:15 2026 GMT
Subject: CN=69e1c30f-10ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:21:31:60:17:fd:e2:97:08:09:1e:09:8c:
60:97:ec:99:84:40:1c:3f:da:e9:9b:55:25:32:6a:
78:3a:d9:71:4f:2c:ea:a0:34:64:ec:a4:5c:22:29:
11:0e:7f:4f:09:2a:cb:53:6c:ca:8c:18:9c:9a:58:
88:41:2d:b3:82:0d:b7:44:b0:7e:f9:3a:b8:08:b2:
2f:01:21:91:0b:bf:a6:76:58:39:61:a0:01:8e:67:
d2:13:9b:15:0c:d6:00:c6:ab:f8:d8:00:7b:b6:58:
86:e2:68:45:14:6e:5a:e7:1c:3d:b8:73:11:ec:2d:
b9:74:b5:f4:5e:7b:6f:43:5f:5f:37:9b:51:2a:48:
d7:a8:ac:50:09:82:4e:69:51:16:31:76:6b:d3:5e:
eb:cf:e1:b8:c7:9d:ac:b3:28:bd:19:9b:c9:38:a1:
fb:65:49:87:e3:b2:89:8b:0b:30:78:db:72:1c:4a:
10:d6:38:b8:45:ae:a3:1f:5d:d4:df:50:2f:0f:16:
fe:15:74:1f:90:53:58:44:41:3f:ea:e3:8f:77:c8:
37:e5:05:b6:c0:9b:85:f3:d1:5f:92:a8:46:04:91:
c3:d4:91:8b:5d:c3:3d:09:a1:b2:24:2f:6b:11:29:
ca:98:70:57:c4:16:4c:6f:8e:9f:8b:69:8b:ae:05:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:14:71:35:90:59:43:50:33:66:BC:80:B3:C5:01:2D:67:37:46
X509v3 Authority Key Identifier:
keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:c8:ea:93:25:55:d8:b4:9e:cf:a7:2a:fb:ac:fd:86:c1:be:
cf:c7:99:77:a1:26:dd:36:cc:6b:0b:60:eb:6c:a3:e8:aa:0d:
e2:25:d5:d2:1c:87:65:2c:41:b7:1a:69:06:a9:31:c7:e0:64:
22:d2:7d:f8:db:23:6b:04:34:c3:09:1f:5c:92:55:ad:11:b4:
3c:82:6e:a7:55:6f:0d:64:88:c3:e7:7c:bb:9d:8f:81:48:1d:
d2:aa:95:fc:73:80:36:c6:fc:8c:e4:f1:04:13:4d:f1:48:59:
43:d2:ee:23:8c:21:09:84:96:83:02:31:cf:7e:26:d7:c3:9c:
44:b7:81:d4:cb:48:66:5a:d8:b1:69:99:fb:47:4e:c3:bd:10:
b2:1c:f4:14:55:29:05:a6:02:ad:61:6f:a6:37:4c:77:18:c6:
72:81:d8:b6:0d:c3:d1:b5:c8:e9:f4:bc:82:64:22:51:7a:ab:
1a:78:65:00:2f:4c:0c:5c:30:cd:a5:4e:99:84:2a:53:73:97:
fd:c8:42:77:81:95:19:63:10:7c:b4:bd:03:4b:7c:d3:d3:d8:
f1:2d:a5:e5:44:6a:3c:1c:87:62:b3:6e:55:33:30:e5:fb:55:
4f:f7:91:45:fb:d5:13:e0:9c:f7:7f:0f:02:0e:5b:37:1e:d7:
53:cd:3d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:14 2026 by rpki-client