
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json)
Hash identifier: oGnGJXA/tFVkAsttquB4kjuu1ubk/SMmNGkh4Jh6S8E=
Subject key identifier: A5:F3:3F:6F:2D:A3:D1:09:DA:57:8E:29:09:70:EF:D4:AA:58:89:92
Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Certificate serial: 3568
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
Manifest number: 3550
Signing time: Thu 16 Apr 2026 14:42:23 +0000
Manifest this update: Thu 16 Apr 2026 14:42:22 +0000
Manifest next update: Thu 23 Apr 2026 14:42:22 +0000
Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: bVJ1gI75cuDPBXsDevYazdrukBcu//I+235D5jsjnPY=)
2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: 9VyiC9O6U//ZPVxmrlig/dycvmzYpPGTRnjYrlBpYSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13672 (0x3568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Validity
Not Before: Apr 16 14:42:22 2026 GMT
Not After : Apr 23 14:42:22 2026 GMT
Subject: CN=69e0f54f-b460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:57:89:d8:81:0c:43:9f:b8:be:d3:b3:7d:
a0:7d:25:36:10:ce:70:20:cd:02:9a:78:a9:92:e9:
e6:95:61:4f:f4:23:f6:50:ad:fa:a3:1f:79:9e:5e:
5d:a3:5b:18:0c:01:e9:28:37:fd:f8:52:3b:c6:c7:
98:0f:47:e7:98:83:ad:2f:07:c2:2d:a2:8e:05:d9:
4e:b4:95:c0:29:d8:04:ca:9c:14:a2:6e:89:74:f4:
cc:71:b7:c4:75:8c:73:15:9d:ef:41:06:4d:c0:d6:
60:28:ef:81:c9:d7:df:6f:5c:f6:60:5b:38:f3:1b:
db:93:09:b4:09:5e:2f:6f:74:d1:48:ec:81:d1:74:
ba:a0:08:1e:f1:78:cf:b6:57:45:a8:43:b6:76:bd:
ea:89:29:98:f8:96:7e:ba:2e:40:91:02:3b:3e:8b:
a2:7b:56:1e:8f:a2:e9:ab:32:65:b8:0d:db:67:bc:
e0:32:66:27:a1:8b:24:74:2e:f1:fd:f9:27:cf:80:
24:aa:f6:a9:26:29:82:74:01:65:a7:5b:9b:bf:38:
01:6e:41:d5:09:90:6b:4b:fc:4b:81:e3:e5:11:33:
6e:53:88:38:a6:99:f0:2d:ae:83:dd:c2:9d:e5:3c:
c5:63:9e:50:49:4f:0e:3e:53:58:4d:ac:f7:32:83:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F3:3F:6F:2D:A3:D1:09:DA:57:8E:29:09:70:EF:D4:AA:58:89:92
X509v3 Authority Key Identifier:
keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:dc:6f:ae:ed:10:16:f2:43:f5:c7:19:dd:f9:9d:0b:d6:78:
7b:0b:6f:33:65:38:23:ac:29:11:9e:33:13:2c:f6:ca:74:27:
f9:3b:da:13:2b:02:94:c7:f1:57:79:eb:96:e1:2d:a9:3b:36:
1a:23:78:5d:40:02:7e:70:55:20:f3:1f:a4:ed:95:56:f2:7d:
6a:60:f2:cb:87:cd:e7:1d:ff:b8:f3:ef:dc:cd:c7:9d:a0:57:
80:d6:e1:41:71:e7:a0:fd:fb:a3:4c:7a:a1:55:c9:10:19:44:
0e:4e:8e:48:8a:0a:9b:c8:a7:c6:1b:26:a6:51:d8:07:97:fb:
c7:c4:b7:ca:47:36:3f:6d:f9:50:06:0f:40:c7:bc:b3:ff:81:
6a:92:7f:96:dd:da:1c:7e:6a:a3:3b:b5:f4:1d:70:0c:14:6d:
5f:c4:ce:c0:86:b9:41:20:41:78:52:6d:f2:39:a4:70:ea:0e:
0a:9f:4d:91:80:55:95:1c:e3:85:49:ab:2d:ee:46:32:2d:e0:
29:73:95:ad:26:0c:1c:6e:50:02:da:3d:49:e4:37:c3:7e:97:
c2:d2:ed:6d:07:1f:48:ad:50:fd:f3:78:af:24:54:d8:ec:13:
64:d6:71:19:61:08:e0:ba:2b:be:49:90:c7:2e:39:00:d5:48:
6c:35:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:01 2026 by rpki-client