
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json)
Hash identifier: 9hZow+KcRTm2FG3LSfXMHrPVV8dMn5mXMOCbTDumOz0=
Subject key identifier: 04:BC:DD:4F:C2:F2:AC:BC:4D:31:84:B3:39:2C:FF:F6:31:20:E6:34
Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Certificate serial: 35BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
Manifest number: 35A3
Signing time: Tue 22 Sep 2026 14:41:49 +0000
Manifest this update: Tue 22 Sep 2026 14:41:48 +0000
Manifest next update: Tue 29 Sep 2026 14:41:48 +0000
Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: CtyI1zUOjlhx2x0/owayJgdJB7qkAS3aHmpfQndrKBo=)
2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: b12I5DSwhN0Bm2MDcv3H2tx6IO2KcAPD+wYWdyKS7tU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13756 (0x35bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Validity
Not Before: Sep 22 14:41:48 2026 GMT
Not After : Sep 29 14:41:48 2026 GMT
Subject: CN=6ab293ac-88c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:34:71:80:99:21:58:4d:4c:f7:ad:a2:fd:
3d:23:10:1d:90:c9:25:f9:d7:c1:e8:1e:74:94:ad:
75:c9:af:13:02:c8:e3:10:dc:b4:5b:78:31:be:1e:
04:f3:f7:ad:ff:28:7f:14:10:03:fc:0b:d4:85:34:
4a:2c:ed:5a:0a:7e:5f:3a:87:97:7d:58:9a:a5:21:
59:f9:17:81:98:e6:48:01:06:77:0d:9e:3e:76:28:
b4:64:df:eb:71:06:68:ce:3b:09:6f:b7:37:bc:e1:
04:60:77:30:f9:dd:b4:1d:19:1f:90:ae:c7:b6:2e:
3d:99:11:fd:f9:6f:59:a4:a1:dd:b6:75:3a:98:02:
28:ae:57:08:18:c7:8c:42:33:11:3d:d0:81:59:7b:
e2:ad:4c:a2:b8:fc:99:62:d7:66:ee:06:06:e3:b2:
6f:9d:98:2b:f9:2b:02:2c:aa:b0:ae:20:4f:43:bf:
46:16:37:72:25:d3:77:55:a1:e5:69:31:4f:a2:ed:
60:9b:6e:e7:ed:06:c0:11:68:aa:5f:b9:e8:db:27:
b1:1f:51:34:b4:25:36:e3:ee:dc:b7:51:00:75:74:
0c:e2:b2:53:06:a7:23:a6:9b:6f:92:de:00:ca:9a:
2d:64:65:ae:fe:3b:5e:ef:16:37:98:72:d3:77:d4:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:DD:4F:C2:F2:AC:BC:4D:31:84:B3:39:2C:FF:F6:31:20:E6:34
X509v3 Authority Key Identifier:
keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:af:f3:01:54:3f:3f:59:4e:45:8f:48:59:16:25:91:fb:79:
9c:ed:21:bd:9c:d9:9a:03:65:7b:48:86:b7:af:87:ad:90:4b:
01:08:4f:1b:5c:eb:54:7b:c0:7a:47:b5:49:34:d5:e9:ee:41:
8e:51:9a:b3:51:8a:69:6d:6d:ea:4d:86:26:7e:5c:c4:37:d1:
f6:75:1c:9e:07:35:52:46:ae:bf:7c:15:c0:dc:c7:5f:20:33:
2a:80:1a:0a:8f:7d:85:1f:43:bd:ad:87:89:a8:55:aa:3a:d8:
eb:9d:94:a5:03:a4:39:98:70:6b:3c:ba:4c:eb:4a:4a:65:3d:
17:73:75:ab:69:90:70:e5:86:a9:e5:89:1e:c4:f7:1c:74:48:
9e:f5:18:8e:3f:cd:78:f5:a9:22:59:d2:ad:69:18:01:93:c9:
ce:30:ce:b7:61:ed:bc:09:1d:b4:ad:c9:72:24:e4:17:8d:6c:
b0:7e:e3:c0:e6:78:c8:54:45:32:b1:0e:3d:70:3b:f2:b6:95:
2e:fd:8c:54:75:8c:be:0b:7a:d6:7b:f2:76:86:17:7e:54:70:
5d:a0:d3:01:b1:ac:b0:30:1a:07:f2:f1:f5:30:95:c0:66:eb:
7c:4c:e9:c2:0e:7f:b2:90:8e:27:8b:3d:4a:1f:22:38:ce:59:
ba:97:88:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:53:22 2026 by rpki-client