
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier: +4rj5rHy2wWEH+p/ZR81Xhz37jSsK7v9aPbEsj/VG2A=
Subject key identifier: 7A:F4:0F:0D:DE:28:6B:3B:E7:77:68:FB:EC:2E:3F:DA:D9:6F:9D:4C
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number: DE
Signing time: Sat 13 Jun 2026 06:43:47 +0000
Manifest this update: Sat 13 Jun 2026 06:43:47 +0000
Manifest next update: Sat 20 Jun 2026 06:43:47 +0000
Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: lgkbTW1CPDFDfRzUWnGRhJ/msfi20oQNIR87ql4YCsA=)
2: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: i1rnPuXqbnMqAc4PCX48sTcxB0t1JxdfTOj4tcvmsyk=)
3: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: 9XVTTsK1JeE28Aq3qvoIFUpxYW3yzAOh3tPhanTDLuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Validity
Not Before: Jun 13 06:43:47 2026 GMT
Not After : Jun 20 06:43:47 2026 GMT
Subject: CN=6a2cfc23-9355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:33:e5:b3:f5:2b:b3:ca:ae:de:b3:4a:41:
1f:d9:fc:2f:ee:8c:13:05:18:74:dd:5b:fa:6a:c5:
34:69:40:b2:7c:ac:ba:0f:1c:2e:0b:a8:49:78:4d:
26:fa:ac:ea:97:2f:55:11:a9:40:88:fc:20:38:9d:
c2:d6:4c:dd:58:c3:24:b6:e5:ed:4e:1a:22:36:cb:
86:d7:07:7c:6b:07:06:2d:a7:e1:2a:d2:3a:7c:16:
3d:85:c2:45:6e:a9:5b:ea:34:7c:99:47:8e:49:38:
bf:df:30:e8:62:74:b5:65:41:ba:9d:dc:e9:60:82:
d1:37:ff:26:8d:a0:b6:f9:b2:7d:b2:54:f8:26:db:
4c:3a:e7:c5:f0:97:34:1b:35:1e:fc:8f:0a:39:c1:
93:a4:0c:8b:b6:fd:f5:b3:5f:80:92:f7:35:d9:5d:
3e:55:78:eb:d0:3a:92:d0:4d:a7:fa:8e:49:40:c6:
8a:ca:87:e2:13:3c:0e:3c:f2:ca:93:e5:6a:2f:00:
f0:8d:fd:3c:75:1f:b5:52:dd:1c:1d:ef:80:af:ea:
5b:c4:c6:74:c9:60:2f:97:b4:2d:66:6c:8c:e4:0b:
3b:22:8a:40:ef:c6:b1:d9:00:49:ac:0c:b7:e4:f8:
04:a5:4a:3d:81:e0:c2:23:74:96:49:36:c5:8d:ea:
e0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F4:0F:0D:DE:28:6B:3B:E7:77:68:FB:EC:2E:3F:DA:D9:6F:9D:4C
X509v3 Authority Key Identifier:
keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:16:08:07:9c:e3:e4:51:9c:c9:02:e4:fe:2b:d0:61:3c:1b:
23:64:e0:0d:c8:95:b4:19:06:c2:71:c6:87:0c:41:1e:a1:d4:
d3:52:c9:bf:8e:b4:3a:28:f0:d2:49:54:fb:66:fb:9e:45:75:
78:d3:f6:fc:f6:f1:9c:9c:9c:5c:7a:46:62:6c:12:d5:1c:27:
a0:6e:f7:d8:42:23:9f:14:4a:e8:f5:44:e5:2e:9f:f7:c9:0b:
5e:68:54:8d:9c:24:e8:70:fe:ba:95:ae:3e:19:ff:d8:33:3f:
ef:ff:74:28:81:7d:9b:27:ca:ce:54:40:05:41:e5:2a:0f:fd:
fd:2f:a5:24:b0:24:8a:af:56:f5:4e:09:db:a1:45:04:8f:73:
8a:7b:45:d9:15:7d:6b:44:a3:68:34:a1:c2:eb:80:7b:77:b4:
28:52:5a:64:f6:9d:d5:63:b4:7d:3f:cf:08:42:71:98:49:18:
63:e8:fd:85:6c:80:a9:c9:82:64:da:28:bd:2a:37:32:65:da:
84:86:bb:25:ce:f6:0b:19:c7:36:59:2f:c4:d1:ce:a3:d7:37:
90:d8:8f:ce:97:4a:ed:7b:93:21:4d:31:5f:d2:ef:f6:67:9b:
a1:04:d5:41:97:ca:9c:f0:e5:41:e5:77:ce:e2:9e:ca:83:a4:
75:3f:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:59:45 2026 by rpki-client