
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier: 40VkZFr+rMLpDfbzEdPytUGymEBjdp5xil4fL/FtNY8=
Subject key identifier: 67:AA:ED:88:A4:10:00:3C:F4:A9:AE:B0:1F:6A:65:A0:7E:12:76:66
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial: 1407
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number: 13FF
Signing time: Sat 28 Feb 2026 16:58:55 +0000
Manifest this update: Sat 28 Feb 2026 16:58:55 +0000
Manifest next update: Sat 07 Mar 2026 16:58:55 +0000
Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: KkWzZHzbvUpH+h15lZlwWYoCptGmE2zrc6GO1r5HTKI=)
2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: WNdbUIrq72HztcMiWEgIIxA2+CqivH5XP6V6egY23qM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5127 (0x1407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Validity
Not Before: Feb 28 16:58:55 2026 GMT
Not After : Mar 7 16:58:55 2026 GMT
Subject: CN=69a31ecf-f013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:8f:18:ea:21:22:bd:c7:cc:28:b9:14:05:
ba:cd:1b:7c:e6:15:ef:8b:b4:5a:57:d4:3d:65:cb:
cf:51:44:2c:2e:b8:53:9d:8e:b1:51:05:1c:a9:07:
51:0f:29:0f:2b:d2:bc:03:bb:a7:3b:f3:1d:6f:cd:
13:bc:24:f5:6f:82:94:1f:f7:c8:0c:28:6a:1f:63:
09:08:32:43:d0:47:67:90:71:8b:c0:cf:b1:b1:96:
8a:3f:ce:91:d1:39:76:7d:e0:d1:6d:51:0b:c9:23:
27:7d:6a:5b:d2:04:da:2e:a1:f8:84:33:6c:48:42:
d4:29:c8:03:c6:66:21:5a:b7:f9:1f:20:a9:47:93:
aa:32:98:66:a9:32:72:ff:1e:38:b6:44:26:79:c2:
86:1c:3b:20:bf:61:6f:f0:2a:2a:67:c3:6d:b3:bd:
ac:11:41:57:d9:97:5c:7a:a6:13:4c:75:92:20:d6:
42:e2:bd:e5:ac:5a:52:53:89:fc:ac:66:74:ff:98:
a5:b2:86:ae:d7:20:73:3f:cf:67:9b:c4:f2:4c:f8:
bb:e9:b1:10:e7:64:d7:13:17:bb:25:61:be:45:dc:
cd:02:66:47:d0:ea:04:f1:02:d2:d1:5a:bb:1c:57:
1b:67:24:04:4e:ec:4f:ad:84:c1:c7:55:34:7f:dd:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AA:ED:88:A4:10:00:3C:F4:A9:AE:B0:1F:6A:65:A0:7E:12:76:66
X509v3 Authority Key Identifier:
keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:83:d0:10:2a:79:2a:bb:ee:29:1f:05:88:8d:0b:c8:8f:59:
94:3b:a5:88:c5:7c:85:6d:c7:d3:09:bd:2c:d6:94:d4:a4:e3:
be:14:55:fe:f8:79:d2:ae:d9:a3:d1:a9:7b:ef:28:87:90:e1:
54:7b:5d:28:b0:74:78:db:e8:35:74:c7:48:fe:bb:2a:f1:49:
af:0b:d0:2e:f9:41:9f:a5:ec:81:1f:09:96:07:7c:ae:52:87:
28:d5:01:a6:f2:c7:9d:01:3b:2b:54:67:c2:b2:d4:98:b8:89:
ac:60:8a:18:09:b6:d7:35:e9:01:8f:74:bf:ad:c8:bd:56:36:
c7:21:bf:4c:18:56:70:d9:5b:31:a7:62:1a:67:42:a6:98:02:
b7:65:a7:38:13:99:8d:d5:a4:78:b6:b1:fc:1d:31:34:f0:f0:
f4:69:2d:9a:32:ea:c6:af:21:5f:b2:76:7c:ed:18:52:b3:4a:
2e:97:6c:da:ad:e1:52:65:66:73:99:cc:92:a3:6d:49:29:8d:
cb:1d:44:14:83:55:b5:24:6c:0a:d5:0f:f2:ed:a3:ff:21:3a:
44:76:75:b2:91:b1:68:52:ac:2d:e9:15:1b:83:16:84:02:98:
2c:c7:95:5b:e0:5c:2e:04:cd:b8:e1:e5:09:4a:11:ba:a5:67:
09:52:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:35 2026 by rpki-client