
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json)
Hash identifier: K6oiRWELG0XQTKOAOinlsKpR5xNuWewO8+RIvK6Ijp8=
Subject key identifier: BE:E1:99:AE:4C:12:A0:CE:43:79:A5:90:D5:E5:47:5D:7C:2E:B4:8D
Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
Manifest number: 01B3
Signing time: Fri 17 Apr 2026 03:51:32 +0000
Manifest this update: Fri 17 Apr 2026 03:51:32 +0000
Manifest next update: Fri 24 Apr 2026 03:51:32 +0000
Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: VCKY4Py1442zroalW9bP/9wNVbD0Mprb4DGgcaS9xyM=)
2: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: gnfLlur8gPdUkwqDHn+eOeiErOoehQs7kmodfs4S4jc=)
3: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: j9PF6XHW/9cjHdZemEYcO4bIyJTkShVbfz28uJrkeSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Validity
Not Before: Apr 17 03:51:32 2026 GMT
Not After : Apr 24 03:51:32 2026 GMT
Subject: CN=69e1ae44-4e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:03:13:f2:8a:cd:b2:da:24:fe:5f:18:0d:
73:09:5f:e9:0a:81:b5:18:b3:9f:04:06:82:4e:65:
94:ea:31:91:6e:c9:13:6f:a6:4f:05:23:ee:cb:34:
37:dd:77:4f:59:97:31:c5:97:03:04:1b:3c:67:b1:
ab:de:35:26:0d:25:ce:9e:11:16:1e:10:4d:56:94:
d8:51:57:1c:92:0c:a8:e9:ab:3d:61:2a:a0:db:af:
37:56:01:c8:53:f3:2b:49:fd:11:cf:1b:fc:4b:4d:
c1:21:88:1b:0c:b2:62:df:73:12:8f:01:0e:4a:1f:
b7:20:e1:84:1e:e2:e5:05:ae:48:40:6b:9d:74:e6:
c2:40:84:92:0e:cf:1a:bf:cb:55:51:5b:d3:58:bc:
ca:f4:5f:88:c2:9d:d4:10:4a:93:ef:95:4c:f8:c5:
42:c9:1b:18:4b:ad:19:d0:e7:68:e4:bb:04:72:fa:
e8:8e:6c:da:5b:d1:1f:92:02:09:62:da:b3:0e:3d:
26:40:e9:30:e3:b8:78:2a:c2:57:02:31:68:46:aa:
42:23:02:7d:a7:aa:5a:2a:e1:7b:6a:97:ce:c5:a6:
bd:d9:ef:ff:84:15:71:7b:d0:95:1e:9e:f6:32:d5:
3b:93:ed:15:a0:f2:0e:f7:1e:f8:25:bf:6e:4a:da:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E1:99:AE:4C:12:A0:CE:43:79:A5:90:D5:E5:47:5D:7C:2E:B4:8D
X509v3 Authority Key Identifier:
keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:98:80:8a:e3:23:83:38:09:a5:99:f7:53:95:f3:63:28:82:
01:e1:ca:77:37:6f:22:71:db:37:87:04:93:9a:57:29:a6:d9:
f6:a1:31:b0:92:30:c6:e3:04:3b:a4:b4:d9:78:7c:ba:5a:66:
ea:fd:3a:8c:05:14:49:28:15:a5:af:6f:7d:e3:7b:da:60:5a:
5f:76:01:2d:50:3b:65:e4:3b:37:32:f6:e9:f5:47:ca:ab:5f:
e7:c9:4c:e8:61:36:54:c1:87:22:73:d9:5d:52:d3:c5:66:d8:
f2:6e:03:a4:eb:34:33:d0:19:3e:c0:2e:60:53:db:96:5c:bd:
89:38:45:33:1d:ca:49:4c:67:a4:f0:81:4a:f8:8e:63:a8:90:
3c:db:20:75:6d:97:cc:af:04:07:72:b8:02:04:9e:4c:13:d2:
4f:bf:4f:ed:a2:c1:69:27:12:dc:81:e7:38:ec:12:fd:d2:1f:
25:b8:e1:90:86:30:05:2e:36:db:5d:23:c2:2e:ef:27:b3:45:
2e:99:85:65:bb:af:8b:98:c1:e4:21:21:a2:32:36:d6:6b:57:
5f:20:23:91:ea:08:fa:01:69:6f:66:b0:c7:ae:76:3a:e0:a9:
65:28:98:99:8b:6b:e1:bf:57:d6:0e:ba:a5:78:99:3e:bb:b1:
98:76:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:23 2026 by rpki-client