
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier: g/ap8U/7UYoMFIr2zY3HB2DrnNCLUgT2YDKYKwDDG14=
Subject key identifier: 85:4B:9B:5F:E6:2F:80:D8:36:37:12:84:75:9C:4F:34:6E:28:8E:E0
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number: C0
Signing time: Fri 17 Apr 2026 06:41:35 +0000
Manifest this update: Fri 17 Apr 2026 06:41:35 +0000
Manifest next update: Fri 24 Apr 2026 06:41:35 +0000
Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: 1kA6rqmlQMf8BFmywMRfCeVR/Uw6tUbRhDv2BoujN0I=)
2: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: nnqJ8G7VjssukS+0G1GxoQBw1mxaaAbrJ8au5Om0Jj4=)
3: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: PGiX+wx067z9cwIv48GLAtfIhUtJveteXDe5HO2XbGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Validity
Not Before: Apr 17 06:41:35 2026 GMT
Not After : Apr 24 06:41:35 2026 GMT
Subject: CN=69e1d61f-c751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:ae:95:8f:88:7f:d3:0f:c9:5a:04:0a:cc:
7b:28:ed:bf:f4:4c:2f:88:91:01:d5:8d:33:77:03:
ec:ee:9e:e6:f7:22:a8:d8:81:5c:17:32:bf:a4:52:
70:48:34:fe:62:46:b0:bb:10:b7:3f:3f:7c:dc:ee:
79:ed:30:51:d2:72:29:08:17:eb:db:78:6c:cc:12:
e4:11:39:a0:8f:a9:f3:1f:07:22:81:1e:2d:fc:e3:
66:a2:11:f7:c8:42:bb:a2:a0:e9:44:5f:83:44:eb:
a8:06:ff:85:1f:2a:78:0f:6b:4b:c9:06:f1:79:f5:
59:ba:d0:66:1f:b9:00:6e:b4:e3:3d:f1:8f:8b:ae:
54:57:93:7f:34:1e:71:ad:4f:8a:f4:38:3c:5a:3d:
b9:a9:e1:8a:5a:90:11:48:4c:4d:78:d7:f4:27:97:
72:07:24:d4:87:41:57:8b:ec:f6:f6:bd:94:35:d8:
bb:fd:92:f3:9c:26:5a:60:51:7b:c5:f3:b5:e5:07:
82:8e:fd:70:54:e3:dc:4d:51:13:66:41:74:5f:c5:
a4:20:ce:02:78:1b:6f:76:d8:19:62:33:55:73:23:
4d:c7:10:35:92:c9:72:64:1b:5f:ac:4e:84:ea:dc:
a8:55:9d:ad:e2:4b:62:81:a5:2e:43:06:be:73:0b:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4B:9B:5F:E6:2F:80:D8:36:37:12:84:75:9C:4F:34:6E:28:8E:E0
X509v3 Authority Key Identifier:
keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:1a:69:61:5a:7c:29:2b:1c:a6:1a:09:ee:f6:42:a4:bb:54:
3f:e9:4e:38:5c:f6:97:6f:d8:fe:3e:2b:db:80:e9:d2:b9:96:
d1:33:fd:00:35:7d:92:74:8d:e1:f9:49:fb:02:c3:2a:58:b1:
40:77:0a:56:ea:d4:12:9d:00:88:f8:8a:0e:47:2a:85:2c:6e:
48:a1:71:df:32:e4:68:85:5d:0d:fe:56:e4:1e:67:56:04:2a:
e6:a3:b5:33:73:12:0a:c2:ec:bc:f5:91:02:10:6d:b4:00:58:
a5:18:0b:a0:17:7a:4e:77:4e:0e:7d:b6:11:ee:a1:39:e9:52:
f6:d0:e2:b2:53:53:79:42:84:04:83:a7:a9:75:da:ab:80:3e:
ee:a4:81:92:bc:0e:89:f2:08:78:02:70:be:62:59:43:3b:67:
f5:1c:54:98:14:be:61:1a:40:26:ed:36:42:dc:8c:eb:b5:ca:
1e:c1:f1:37:8e:e8:e5:9f:84:35:9f:25:10:9f:05:25:30:76:
d2:ef:38:d9:40:2d:29:10:39:65:0b:b3:eb:36:76:e6:0c:ce:
77:26:14:47:2b:f8:32:ed:d2:3b:e3:35:2d:97:a1:15:1e:41:
75:b2:93:69:b5:4b:40:f8:ff:3e:89:85:a8:fb:dd:9c:f2:35:
ab:9f:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:34 2026 by rpki-client