
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
File: nlE6zE17kAFKhn-1KviSKeALpKw.mft (raw, json)
Hash identifier: jjoCd3Q5S5Jjp/kyavlHF5j1qgg/dxIS1LJavlbbz98=
Subject key identifier: C8:79:61:47:A9:E3:C1:4A:D3:58:8D:7A:AE:B9:07:1D:49:3A:3D:73
Authority key identifier: 9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC
Certificate issuer: /CN=A91B2472/serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
Manifest number: 0149
Signing time: Fri 17 Apr 2026 04:56:31 +0000
Manifest this update: Fri 17 Apr 2026 04:56:31 +0000
Manifest next update: Fri 24 Apr 2026 04:56:31 +0000
Files and hashes: 1: nlE6zE17kAFKhn-1KviSKeALpKw.crl (hash: HGwjNSBa1klHloE+cf+/nmrkV7wpt0zaEwIopr9usgc=)
2: 1B4BDA5C48B011EF9D34415EC4F9AE02.roa (hash: i0u++KF1Q5xKES8G1ajMnqQJU/uhVCVuB5dgmU3QsM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl
rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2472, serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC
Validity
Not Before: Apr 17 04:56:31 2026 GMT
Not After : Apr 24 04:56:31 2026 GMT
Subject: CN=69e1bd7f-688a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4c:a4:3e:59:b0:aa:bb:1c:50:e1:ac:79:55:
f8:ae:ca:9e:8e:a5:01:dd:bc:ec:cc:2f:42:80:6b:
6d:b2:ef:6c:c1:0e:71:79:50:1e:8e:1b:bd:e3:3b:
b0:84:34:f4:bf:6a:35:bb:ee:72:31:07:18:5d:a6:
e4:43:64:63:54:fb:28:c5:ae:d6:17:fa:23:88:73:
95:4b:da:04:b9:0d:c1:0c:8a:d9:c0:50:e3:de:46:
e0:01:f8:64:1f:b8:1e:d4:50:88:ae:55:7b:37:2a:
6d:a6:b8:06:29:d0:69:a5:70:cc:64:fd:d6:6c:3e:
26:e3:2d:dd:24:03:c6:58:56:74:9e:c7:21:4b:75:
c7:03:55:a6:cb:6a:16:87:42:43:5c:7b:56:3d:b4:
d5:07:73:ef:d1:ec:2f:9e:e0:15:c0:d4:fa:ea:37:
23:8a:37:49:fe:a3:59:ce:65:34:3c:38:a2:63:23:
40:1b:26:01:07:09:8c:77:f4:33:e9:4b:79:e2:52:
87:4c:3f:dd:be:31:43:4a:f9:95:72:85:9d:11:53:
55:63:0c:fd:68:88:9e:9e:c7:b8:d7:29:96:73:60:
08:e0:d4:27:f5:07:98:e4:c6:b7:a2:41:c0:7b:48:
c5:55:90:6b:3c:1e:23:08:c1:fb:1c:16:de:f9:57:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:79:61:47:A9:E3:C1:4A:D3:58:8D:7A:AE:B9:07:1D:49:3A:3D:73
X509v3 Authority Key Identifier:
keyid:9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6c:85:f1:ae:57:71:fa:dc:74:52:83:f3:0d:ad:35:70:b7:
f0:22:cb:2d:60:ad:8d:24:76:54:9b:af:b4:3c:43:d5:d3:dd:
4d:5c:c6:5c:c7:45:b3:66:27:eb:2e:4c:31:65:33:94:99:13:
02:8f:d1:b7:ea:fc:20:1d:75:a4:ec:84:26:08:86:47:9b:eb:
fe:51:ca:a7:7b:a9:e7:7d:78:df:e5:e7:75:39:ae:cb:32:8a:
cd:cc:1d:f8:49:09:3a:9b:8b:e7:e7:50:76:68:64:d7:23:fa:
16:9e:67:f7:cb:1e:33:24:0f:e0:d7:4a:11:e3:70:7d:88:04:
5c:83:df:fb:5f:51:c4:9d:38:94:5d:b3:86:2b:49:23:68:d3:
04:62:e7:3a:cf:84:66:09:29:77:33:7e:34:23:d4:85:bd:c2:
d9:8e:5c:50:16:e1:d6:99:38:87:54:12:51:4b:ee:b1:e1:83:
7f:ce:d1:61:4e:1d:6e:46:1b:36:17:01:16:ae:6c:63:af:24:
20:29:f7:53:00:b0:64:56:3d:a4:54:78:f2:73:87:56:2b:8d:
68:2a:f6:22:d9:60:02:e3:37:21:85:78:04:bb:6e:3a:13:27:
eb:f9:46:cc:e6:5a:b2:e7:24:51:7c:ef:6a:02:31:95:7e:13:
0e:24:91:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:32:15 2026 by rpki-client