
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json)
Hash identifier: gEx92ufubM182z5acIN8xgTdNPogKRgg2et5HEMWx04=
Subject key identifier: 14:A3:CA:38:1B:79:26:85:E5:B2:4A:AE:6F:9E:22:4E:22:6E:C3:7F
Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16
Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
Certificate serial: 082D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
Manifest number: 0820
Signing time: Tue 28 Jul 2026 21:34:20 +0000
Manifest this update: Tue 28 Jul 2026 21:34:20 +0000
Manifest next update: Tue 04 Aug 2026 21:34:20 +0000
Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: Ueud00peMtcwXIUzRWfsm2YvlCpneLXtNqqjNSQon8o=)
2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: wKAEYn7N0s61lmDabEnuaSxEMJJCyF8MvcXmo7hrc/w=)
3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: uGgUAHKjFCdKGRYwfRLplSrRPtlghY9PMVrAiNXtlcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl
rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2093 (0x82d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
Validity
Not Before: Jul 28 21:34:20 2026 GMT
Not After : Aug 4 21:34:20 2026 GMT
Subject: CN=6a69205c-8a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:e9:7c:3d:3f:67:31:62:18:d5:f2:bc:7d:
9e:f9:8c:55:df:8d:fd:a4:31:4f:6b:01:09:91:fe:
b0:02:14:9b:57:eb:b4:24:e8:05:9d:12:6c:13:75:
91:f4:d3:bc:f9:4a:3c:56:2d:26:9a:97:39:b4:97:
26:42:7d:35:51:53:a9:4c:a2:08:82:b7:a4:a6:84:
97:83:24:09:06:15:21:4e:e1:92:40:82:31:4a:04:
eb:ee:90:90:fd:5c:41:36:d2:14:85:6a:17:d1:86:
6c:70:45:d6:15:24:dd:fc:6a:ac:bb:17:77:4e:a8:
16:67:76:f0:7a:c3:07:21:f3:4a:b4:04:7a:39:5a:
11:09:91:fc:3e:9c:f2:7d:40:eb:62:66:5c:df:5f:
e6:06:58:1e:ce:9f:75:4a:ec:24:6c:7b:d1:08:9e:
0c:fa:fc:d4:68:78:a7:0a:ad:ae:2b:a9:7b:1c:67:
19:d8:e4:65:05:a0:b9:e6:16:fd:83:19:03:7e:3f:
53:fc:71:ae:c1:2a:75:7f:c8:32:a9:8c:95:e6:9a:
51:4e:a1:12:35:00:41:57:cf:00:c4:53:bb:e9:f5:
c8:e1:dc:7d:f3:df:8a:1b:6c:51:7a:03:41:96:89:
21:95:36:f8:e6:17:3d:2e:bc:e0:f0:4b:ce:1e:e3:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A3:CA:38:1B:79:26:85:E5:B2:4A:AE:6F:9E:22:4E:22:6E:C3:7F
X509v3 Authority Key Identifier:
keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e1:e2:3b:07:22:7a:7d:0e:26:8b:37:05:97:e7:70:14:b8:
c3:4e:e6:cb:a9:33:f5:e5:5c:80:ee:f5:ce:50:f6:9c:f7:00:
f3:ba:d8:c5:45:24:24:7b:0e:b7:ac:38:1a:4c:f3:04:33:c6:
5a:53:cb:4f:f9:cb:71:6e:69:ed:4d:e5:31:63:e9:3e:df:bd:
f1:0a:b1:9b:60:e2:e5:7f:c2:c2:1c:19:dd:80:1c:9c:ee:3a:
4e:0b:84:64:5f:98:01:73:3d:df:a2:12:54:c1:8f:30:f5:ef:
7a:e0:8f:6b:1b:b0:14:8c:0c:e0:3e:74:40:a1:64:53:cb:2b:
1f:ac:5c:86:13:da:96:ff:91:50:65:cd:a8:46:c9:a2:fc:a1:
4b:63:54:0e:70:04:14:08:80:16:e2:7b:c2:c7:6e:70:fc:10:
e5:fb:df:23:4e:f0:e5:07:35:fc:5d:36:96:17:82:8e:b2:cf:
e5:cd:b8:ba:4e:f5:d6:61:a2:94:4d:d4:64:2c:51:39:8b:fe:
f1:24:ca:46:33:72:40:51:95:75:f1:61:f0:db:08:ef:b0:35:
12:a6:d7:65:27:a9:48:9b:ed:b9:ef:a7:86:47:95:97:7b:4b:
76:99:80:9f:a9:99:5c:e6:7a:93:01:03:e6:af:30:2f:79:ef:
b6:78:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:58 2026 by rpki-client