
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier: bxXaraMbMvcmvRVLcc/Bg5E4z1F1ZHXHvDUl2zfmZ7Y=
Subject key identifier: 16:23:25:E0:71:BD:B6:CE:8B:9B:5E:D8:71:A8:06:12:AC:9A:0B:CF
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer: /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number: 018D
Signing time: Fri 17 Apr 2026 04:11:10 +0000
Manifest this update: Fri 17 Apr 2026 04:11:09 +0000
Manifest next update: Fri 24 Apr 2026 04:11:09 +0000
Files and hashes: 1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: 9BNFm4CHAgnxTJT4BQmVDshB4eK/G8hqxtIA9TGOwi4=)
2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: iI90c0kPDEFqDSBJB4+1vqswCDOFhWHQNpb/y5cuaW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Validity
Not Before: Apr 17 04:11:09 2026 GMT
Not After : Apr 24 04:11:09 2026 GMT
Subject: CN=69e1b2dd-ff47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:ec:48:34:35:c0:3a:88:28:c0:0d:81:b2:
44:07:b0:3d:bc:c6:8c:26:26:ff:dc:e2:27:74:cd:
17:d0:47:79:80:58:38:fd:08:2a:46:6e:92:4b:40:
a8:bf:c9:fa:54:19:e1:35:6c:6b:e9:c5:d9:e7:c2:
e8:fc:d4:ec:a6:50:15:62:66:66:19:eb:6d:32:ae:
a7:05:a4:21:e8:f2:1e:13:34:69:a6:d2:7f:66:a8:
6a:99:00:01:1e:e5:19:ba:81:cb:d4:6a:73:41:27:
f2:27:89:9b:dd:c6:49:45:0f:a4:d9:40:57:9f:bf:
3b:f9:c1:66:28:3b:b5:1e:9b:bd:e4:e3:cb:be:ae:
ce:f2:5b:87:64:0c:02:a0:d4:58:a0:32:0f:84:55:
37:3e:12:07:27:75:cb:c9:71:d6:8c:cd:27:23:06:
99:c7:70:a4:bd:b2:5d:4b:86:27:e3:ef:5e:95:87:
42:eb:22:a1:3b:d8:74:c1:50:84:c7:54:7e:ee:1e:
48:f9:b6:2e:62:82:bb:ea:e4:8f:db:dd:cb:5a:6f:
c9:e2:9c:cd:69:90:29:03:67:8e:9b:96:7a:1a:01:
36:d8:8a:1b:70:92:38:cf:52:4f:43:6e:ad:a0:30:
31:d6:95:28:c5:20:f3:84:9a:64:5a:d9:4f:68:c5:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:23:25:E0:71:BD:B6:CE:8B:9B:5E:D8:71:A8:06:12:AC:9A:0B:CF
X509v3 Authority Key Identifier:
keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:ef:b3:4f:65:c3:f5:d0:6f:e5:10:f6:4d:0b:8c:20:7f:78:
08:ac:b8:e2:12:41:8e:f7:58:32:06:40:25:17:2d:6c:74:91:
e9:00:ff:ce:1b:74:ea:0e:de:02:c1:be:b2:a5:a0:4b:81:f3:
9b:6a:03:5f:4a:98:d0:1b:b4:a3:6b:cf:de:ab:ca:7f:fe:44:
8c:10:93:43:b4:70:03:b2:e5:d2:bc:57:09:8d:76:62:9c:08:
fd:52:77:08:a4:a2:77:33:ae:49:da:9f:be:78:90:d4:36:45:
92:6f:ec:ab:30:4f:14:5c:42:89:10:2d:14:25:86:ce:3a:55:
a3:2a:93:5d:ea:f6:86:de:24:7f:a2:4c:e2:7c:fa:77:94:c4:
b2:46:7a:b9:4e:27:7c:4c:f0:72:ff:ee:4b:87:42:2d:f4:41:
4d:99:6f:62:d7:fd:02:f5:ed:98:7f:d9:e2:25:ce:a2:c1:d5:
94:c9:a2:63:30:e7:32:82:6b:ee:e9:1a:84:34:a2:9a:fe:20:
00:69:2a:b8:67:89:9b:74:1d:8e:1e:4a:57:0e:4a:31:11:1f:
2e:ff:89:5c:fe:e6:21:3a:a2:a5:6b:8b:1c:6f:88:11:29:84:
f1:33:71:09:b1:12:9a:91:b0:2a:26:cd:95:61:90:d4:b3:d9:
e5:ae:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:42 2026 by rpki-client