
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json)
Hash identifier: IGGF3HIZxcVD2rhikxI96UuzWj/3eLekQKRmqzShsbs=
Subject key identifier: B4:EC:1F:E1:FA:F6:1D:C7:29:4E:13:CB:66:5E:8A:A9:57:B0:1F:26
Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39
Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
Manifest number: BA
Signing time: Sun 01 Mar 2026 08:13:35 +0000
Manifest this update: Sun 01 Mar 2026 08:13:34 +0000
Manifest next update: Sun 08 Mar 2026 08:13:34 +0000
Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: FZg8zBUHjEbzq8mIzpkGe5dkEdhW6tUifs2iIieUCLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl
rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39
Validity
Not Before: Mar 1 08:13:34 2026 GMT
Not After : Mar 8 08:13:34 2026 GMT
Subject: CN=69a3f52f-e6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:c5:37:fd:45:8a:80:3b:76:37:c1:51:6d:
f3:7b:4e:e2:b6:f8:bf:1f:17:75:e4:3c:83:29:dd:
28:da:2e:3c:6d:83:13:71:94:80:82:51:9d:a4:d7:
c6:d5:44:ad:5f:db:7d:7e:f8:13:f2:d6:47:a4:c6:
57:d9:b9:d1:ba:61:93:81:b9:b7:55:10:fa:58:f6:
9b:e0:ad:84:19:34:27:ea:c1:71:45:5a:5f:fe:cf:
82:36:e1:b6:fd:9b:f8:93:06:a7:80:58:6a:bd:32:
8e:f2:fa:b8:ff:1e:2c:0f:cb:76:6f:93:bb:51:ea:
15:95:04:46:94:84:e0:0d:57:54:da:20:fc:b7:d5:
c3:05:a9:44:14:e0:1e:86:16:65:70:18:fe:e6:24:
51:be:4e:fe:f4:44:27:57:34:e1:5c:c3:b2:91:2a:
b9:77:37:f1:f1:93:de:07:56:28:d1:1a:95:0b:02:
04:c9:8b:12:ef:9f:52:e3:63:c7:eb:b2:ba:9d:10:
1f:30:3e:2c:78:2a:31:4a:a9:9a:93:e1:a0:6e:48:
5c:ed:c6:bb:f5:63:7a:e8:d9:f2:2f:ca:96:d2:07:
30:84:e0:b8:ed:e5:bc:9a:2d:4a:c0:5d:bd:a1:48:
06:2a:83:24:a1:fb:43:03:2e:7b:19:a8:b5:b6:5e:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EC:1F:E1:FA:F6:1D:C7:29:4E:13:CB:66:5E:8A:A9:57:B0:1F:26
X509v3 Authority Key Identifier:
keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1b:d1:bb:9b:9e:e8:55:75:62:bb:3a:b0:5c:b3:08:64:d3:
6a:30:59:ad:4d:56:c5:b7:a9:9b:86:26:67:7f:32:3d:dd:06:
5d:22:64:14:5c:a4:fe:89:85:bb:fa:95:27:40:22:f3:ac:6b:
a3:63:5e:5f:4c:eb:eb:f4:1e:8f:03:f2:f6:44:f1:96:b0:96:
c4:ce:9f:c8:7f:9a:16:69:a5:ef:b9:2a:35:17:a9:cc:1b:2d:
60:08:93:9f:01:1a:eb:8b:02:0a:7e:35:9c:65:c3:00:32:06:
1e:84:f9:67:ce:85:42:25:9a:63:50:b1:61:5d:2c:95:4a:ed:
70:1f:f8:d3:98:bb:41:b7:88:7e:99:b3:77:dd:9e:02:48:f5:
9b:e3:94:b1:a6:c3:4d:88:70:9e:96:78:ea:6a:48:57:d9:48:
3f:7c:fa:39:56:5b:5d:a7:25:74:f6:75:79:46:c1:54:4d:3c:
ff:9e:44:4c:78:03:43:59:e9:a1:b4:98:af:82:0c:ec:a7:71:
91:12:91:6e:46:47:e3:77:0b:ab:89:6a:91:50:26:08:ff:92:
c0:9f:b2:2d:f6:20:75:5a:26:57:f7:f5:1c:79:a2:ac:03:7e:
4d:d0:d2:71:3f:1f:36:55:47:d6:3c:69:08:8a:da:14:46:e8:
3b:23:b7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:47 2026 by rpki-client