
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
File: nMJa0Q0U5nMm84672jnBK4x95YM.mft (raw, json)
Hash identifier: aMiikDJ30E+UaP8k+3jAbjY1CUIJlxL8p5qI2LG9RiU=
Subject key identifier: A3:08:83:63:46:9A:52:B1:0B:01:B4:7F:69:77:4B:F0:9B:05:CB:9E
Authority key identifier: 9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83
Certificate issuer: /CN=A91AA1F9/serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
Manifest number: 3C
Signing time: Fri 09 Oct 2026 09:19:46 +0000
Manifest this update: Fri 09 Oct 2026 09:19:46 +0000
Manifest next update: Fri 16 Oct 2026 09:19:46 +0000
Files and hashes: 1: nMJa0Q0U5nMm84672jnBK4x95YM.crl (hash: 7VkyAlfxz4giBhy8uRNfaPWeuHxz1a4xF8eVBMdfuj8=)
2: 375CD0C4687B11F18B8955F26647A888.roa (hash: NFBGXohwTAbP6RYJ9RBlPbPILrA7Ch+/AQAFkCpBYas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl
rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA1F9, serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583
Validity
Not Before: Oct 9 09:19:46 2026 GMT
Not After : Oct 16 09:19:46 2026 GMT
Subject: CN=6ac8b1b2-4748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:cd:48:a1:93:1a:14:e0:d2:8e:e9:82:cb:
58:3e:18:4e:6e:b5:e8:93:16:10:4a:74:4e:dc:6c:
1c:d3:f3:8d:9a:14:05:fb:d9:7b:a7:0c:71:5a:2c:
89:57:7d:94:8a:ec:1f:88:37:91:cc:52:e7:83:7a:
9c:4d:62:91:76:28:e1:f9:83:cc:1b:6c:83:d5:65:
51:8c:36:79:68:3b:14:34:5c:95:4d:71:c4:c9:c8:
f7:40:08:59:e6:4c:59:22:7b:7b:9c:6a:5b:5a:3d:
ba:df:0f:2d:e4:a9:7e:6a:b4:9c:ed:04:70:35:bc:
e8:9b:cb:11:30:67:69:4a:ac:58:7d:ce:45:e6:00:
b2:20:82:cc:b1:64:a1:b6:4e:74:9b:ad:d2:ae:37:
c8:4d:ab:32:de:c9:bb:7f:e1:36:34:c9:c5:c5:dc:
f6:b9:f0:12:21:df:c0:59:06:ad:1d:6a:8f:39:f9:
ab:71:fd:c8:11:18:0b:04:ff:89:29:b5:ac:5e:d1:
f6:0d:93:8a:ae:9c:51:ee:84:70:84:99:74:43:6d:
83:10:9b:92:12:32:40:ad:46:99:92:7f:f1:87:d8:
90:e3:e2:eb:e8:63:7e:1c:79:67:1e:28:9a:bf:89:
ed:76:76:1e:18:e6:0d:cc:da:a5:77:56:8a:a8:b4:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:08:83:63:46:9A:52:B1:0B:01:B4:7F:69:77:4B:F0:9B:05:CB:9E
X509v3 Authority Key Identifier:
keyid:9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:76:b0:0d:bd:0a:44:05:46:b6:50:22:5f:a9:b1:50:bb:ea:
1b:ad:43:ff:8c:4c:62:27:fb:6d:39:da:f6:e3:ce:84:4b:f0:
98:bc:91:68:86:b7:4f:ae:a0:f3:dd:a3:46:29:68:b2:86:db:
00:f9:4b:a2:ff:1e:b9:34:cf:d0:6c:c9:51:8d:2c:88:de:14:
16:a2:9a:f1:15:85:51:c3:a3:ce:88:a3:b1:ca:1b:c5:12:28:
24:06:81:27:e4:58:1f:1e:d4:c5:7b:3b:f0:35:34:18:09:75:
80:52:be:d7:8a:b0:df:b0:ec:7a:3c:04:20:15:4e:47:70:e3:
ba:fb:1e:4f:4b:7f:0b:3b:2e:4a:f0:0e:15:3f:a9:24:ad:b1:
b8:05:b6:4f:16:92:65:b1:9a:3a:11:bf:72:fc:2c:44:68:39:
3e:15:39:79:ba:e2:bf:73:37:f5:8b:89:c5:24:42:2e:91:b8:
a5:15:87:5c:c2:04:50:ae:39:52:d5:17:0f:96:a1:ea:60:01:
f6:55:dd:1e:db:79:04:dc:3f:a6:16:2e:cf:90:55:e9:2f:ac:
b0:e4:1b:65:c2:d3:a6:00:03:42:04:52:33:85:1f:62:8e:b5:
96:ee:a3:3b:9b:c8:5d:41:fe:c5:33:0d:16:5d:55:28:ec:4a:
99:a7:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:22:07 2026 by rpki-client