
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
File: NAYp5_yg0jJa2fswVWg0aO8t0MM.mft (raw, json)
Hash identifier: eXJ222XSXGpQ2JXjLjjnD7XBwSYbtCJMMv9AJk2jcFc=
Subject key identifier: 5A:34:DF:62:84:4F:9C:2A:48:23:A2:34:C8:59:0F:2F:16:7D:9D:44
Authority key identifier: 34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3
Certificate issuer: /CN=A91B9477/serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
Manifest number: 65
Signing time: Mon 27 Jul 2026 10:19:48 +0000
Manifest this update: Mon 27 Jul 2026 10:19:47 +0000
Manifest next update: Mon 03 Aug 2026 10:19:47 +0000
Files and hashes: 1: NAYp5_yg0jJa2fswVWg0aO8t0MM.crl (hash: 6ByE0mE+s4DhaG90p4lK9tV69DXPiGX6yzeopsy4kn4=)
2: 6A1304F0F4DD11F09B4FF218486F56BC.roa (hash: MVWHTycXop2ncCPzUo2tw9R/cfqnpVaE5CQiK4/0/Wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl
rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9477, serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
Validity
Not Before: Jul 27 10:19:47 2026 GMT
Not After : Aug 3 10:19:47 2026 GMT
Subject: CN=6a6730c3-fea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:41:c8:37:95:d5:80:32:71:4b:a2:df:84:
3b:85:e2:11:58:85:4f:6f:32:13:10:c2:ab:73:56:
10:f5:fd:ff:84:e0:f5:9b:55:67:ea:a3:8e:86:df:
e3:14:b0:ef:35:96:68:4c:50:c6:4c:7d:f3:74:ed:
8c:87:f8:88:e8:db:d9:eb:90:6a:fa:bd:f3:a4:af:
7e:6b:99:74:d3:4e:cf:6b:2b:f8:02:a1:ec:13:f6:
b9:0d:94:77:4d:97:1e:d3:92:7a:26:1d:9a:bc:24:
c0:49:13:c5:76:aa:a7:83:f1:1f:29:d1:46:b3:c2:
b7:ec:d4:75:70:ad:df:82:72:f8:84:5d:82:33:62:
51:40:a5:a5:cd:5e:f4:98:28:77:ea:51:47:a4:8d:
6d:b5:75:f5:83:39:bd:8e:63:eb:9c:b9:71:64:ed:
ff:8f:a0:c4:0c:41:d6:51:88:18:3e:88:43:ed:40:
e6:2f:4e:89:e9:5e:4f:ad:1b:0f:68:94:d6:c8:2c:
f6:21:06:16:b3:7a:95:36:5e:5f:b6:f2:a2:9d:ed:
be:44:a0:20:b3:9f:3b:1f:ba:09:f0:f4:1a:4b:0a:
d5:63:b2:de:a6:2f:80:00:94:c3:bf:10:ab:29:53:
fb:b7:2a:da:86:46:c7:48:a8:c3:74:e6:ca:71:0e:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:DF:62:84:4F:9C:2A:48:23:A2:34:C8:59:0F:2F:16:7D:9D:44
X509v3 Authority Key Identifier:
keyid:34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ae:7d:16:29:89:78:ab:3e:ca:9c:58:69:05:bd:73:a5:62:
bf:c1:6e:61:95:28:73:76:52:03:bf:eb:b9:5d:5f:45:1d:8e:
84:90:96:bf:05:ac:3e:cd:01:dd:51:79:0a:16:13:7a:97:4e:
5c:da:19:52:79:70:48:c3:c0:0a:11:3e:f7:c0:f6:0a:57:0e:
c8:75:47:46:99:8b:d0:ef:4f:3d:6c:7f:ca:ec:26:58:9a:81:
45:8c:df:bb:54:a6:3e:cd:57:18:ae:5a:4b:df:62:84:9e:95:
0b:a3:f7:42:9a:c4:5d:fe:5c:ae:19:e3:b8:3a:30:00:c1:a3:
07:fc:fc:c3:c3:93:84:82:21:2a:6c:ac:5c:2b:2e:c8:11:3b:
c9:18:e2:98:24:bb:1c:dc:6e:d6:7a:35:07:35:66:32:35:35:
28:36:a7:32:4f:85:57:f8:47:2c:76:6f:1d:f1:66:28:4a:a8:
54:3d:a0:90:a5:3d:85:ee:b8:a5:4d:88:79:25:d2:85:df:0d:
98:31:bf:46:27:fa:af:47:4c:58:4a:ba:bd:c7:a9:3a:3c:8b:
10:58:cb:dc:bd:a6:92:b4:ca:d9:41:6d:f9:e9:f0:e6:a1:49:
b6:ee:f9:6e:9a:aa:f3:de:4c:72:7a:d4:6f:fa:a2:06:d8:e1:
92:33:99:4a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
OTQ3NzExMC8GA1UEBRMoMzQwNjI5RTdGQ0EwRDIzMjVBRDlGQjMwNTU2ODM0NjhF
RjJERDBDMzAeFw0yNjA3MjcxMDE5NDdaFw0yNjA4MDMxMDE5NDdaMBgxFjAUBgNV
BAMTDTZhNjczMGMzLWZlYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6hUHIN5XVgDJxS6LfhDuF4hFYhU9vMhMQwqtzVhD1/f+E4PWbVWfqo46G3+MU
sO81lmhMUMZMffN07YyH+Ijo29nrkGr6vfOkr35rmXTTTs9rK/gCoewT9rkNlHdN
lx7TknomHZq8JMBJE8V2qqeD8R8p0Uazwrfs1HVwrd+CcviEXYIzYlFApaXNXvSY
KHfqUUekjW21dfWDOb2OY+ucuXFk7f+PoMQMQdZRiBg+iEPtQOYvTonpXk+tGw9o
lNbILPYhBhazepU2Xl+28qKd7b5EoCCznzsfugnw9BpLCtVjst6mL4AAlMO/EKsp
U/u3KtqGRsdIqMN05spxDp95AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWjTfYoRP
nCpII6I0yFkPLxZ9nUQwHwYDVR0jBBgwFoAUNAYp5/yg0jJa2fswVWg0aO8t0MMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5NDc3LzE0MDNENTc2RjRE
RDExRjA5MzAxOTA4NzQ3NkY1NkJDL05BWXA1X3lnMGpKYTJmc3dWV2cwYU84dDBN
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTkFZcDVfeWcwakphMmZzd1ZXZzBhTzh0ME1NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5
NDc3LzE0MDNENTc2RjRERDExRjA5MzAxOTA4NzQ3NkY1NkJDL05BWXA1X3lnMGpK
YTJmc3dWV2cwYU84dDBNTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCprn0WKYl4qz7KnFhpBb1zpWK/wW5hlShzdlIDv+u5XV9FHY6EkJa/Baw+zQHd
UXkKFhN6l05c2hlSeXBIw8AKET73wPYKVw7IdUdGmYvQ7089bH/K7CZYmoFFjN+7
VKY+zVcYrlpL32KEnpULo/dCmsRd/lyuGeO4OjAAwaMH/PzDw5OEgiEqbKxcKy7I
ETvJGOKYJLsc3G7WejUHNWYyNTUoNqcyT4VX+Ecsdm8d8WYoSqhUPaCQpT2F7ril
TYh5JdKF3w2YMb9GJ/qvR0xYSrq9x6k6PIsQWMvcvaaStMrZQW356fDmoUm27vlu
mqrz3kxyetRv+qIG2OGSM5lK
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:46:24 2026 by rpki-client