
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json)
Hash identifier: p+PIRla82gH4AcuKokdTeiHZ7DAaPC8SVnvBLdY9OyA=
Subject key identifier: 10:BC:89:D9:CC:03:E7:27:19:56:45:69:0C:A2:B2:E8:2A:A3:DE:5C
Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Certificate serial: 088E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
Manifest number: 0882
Signing time: Sat 28 Feb 2026 20:54:58 +0000
Manifest this update: Sat 28 Feb 2026 20:54:57 +0000
Manifest next update: Sat 07 Mar 2026 20:54:57 +0000
Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: vyHsuPJHz8lhBMazjbPHpNETY/L5eXMU8iBDfy26I/g=)
2: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: 6lqehcAyCNVs7/NRnq82eztxUGH8XbnYMN7Uvtot0JE=)
3: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: 6X9DRIYN2JCL/kdvqE4XHDfEtLiRnlrwHj3YHZE4kgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190 (0x88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Validity
Not Before: Feb 28 20:54:57 2026 GMT
Not After : Mar 7 20:54:57 2026 GMT
Subject: CN=69a35622-2869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:0b:c9:40:fe:1c:56:3f:55:98:e7:99:ff:
44:50:19:50:76:6c:f3:03:5f:60:1d:d6:58:67:7a:
96:4c:ea:ac:54:41:94:b9:13:63:df:24:f5:e1:8b:
3a:bb:90:ec:fc:26:6b:3a:fc:0f:4f:47:75:3e:f0:
26:7a:30:ee:5c:20:db:9d:ad:18:91:00:64:46:a7:
33:20:7e:e9:21:f7:49:4b:86:dd:aa:44:48:4d:37:
7a:ec:2a:a4:da:5c:c0:cb:0b:40:ef:4f:9a:55:6c:
63:a6:45:1d:3e:ac:10:2f:26:24:e0:7c:27:f9:72:
0f:25:8b:e2:ad:7d:46:07:15:64:0f:de:8d:2f:ce:
0e:98:95:2a:4b:d7:37:36:db:60:94:72:25:9b:74:
67:2b:72:e2:9e:5b:64:74:99:16:ff:79:77:34:af:
97:16:70:c7:48:f7:4e:b8:a3:fe:f8:0a:de:3e:d8:
ed:24:9f:0a:d2:2f:32:55:4b:45:84:92:44:4d:eb:
34:b8:54:1b:97:4a:b2:c2:c0:ab:1e:8c:4a:38:f2:
f2:da:54:65:48:f4:53:37:76:05:2e:ad:b1:03:ff:
17:69:5e:8e:53:62:2e:ad:02:ee:4c:b9:5f:a5:c2:
28:eb:72:c2:6c:5a:19:5f:4f:41:1c:88:71:fc:5f:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BC:89:D9:CC:03:E7:27:19:56:45:69:0C:A2:B2:E8:2A:A3:DE:5C
X509v3 Authority Key Identifier:
keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:64:a1:b8:39:f7:2a:e7:fc:c4:26:ce:aa:f5:b7:e0:9a:4e:
6e:2c:69:4c:4f:37:9c:f7:0a:ee:89:16:59:c6:22:a4:c2:a1:
55:a9:89:d6:b8:c0:eb:24:8e:db:6c:4e:e5:1a:bf:28:eb:ce:
b7:00:75:1f:95:9c:33:ba:27:21:ca:00:f8:7e:f5:65:1e:70:
24:0f:72:d6:c6:4a:eb:32:25:e3:bf:9a:dd:b0:90:7f:fb:b2:
98:17:f2:a5:54:42:96:63:65:78:13:2c:5e:10:7a:42:e2:a2:
6b:75:6c:c8:93:b9:8e:60:c9:1f:b1:c9:4d:17:a8:be:10:aa:
08:7d:99:1e:48:a3:58:9c:da:d5:0d:42:55:81:50:03:3d:f5:
e8:33:c6:0b:c3:96:f4:0a:51:ee:c5:0a:9e:b9:35:0e:3e:a6:
8f:1e:ef:26:01:19:46:44:5c:a9:a9:4d:c1:63:a1:20:cd:3d:
00:49:74:8d:62:6c:f7:a6:d4:81:96:b1:47:8b:c4:85:95:5a:
c3:b6:f1:51:62:35:a9:2a:1d:35:59:48:5b:b5:74:cb:fc:79:
20:8a:96:c9:7e:c5:eb:79:dc:45:1f:a6:3b:41:b8:67:e2:4d:
1b:4c:23:b5:2a:26:37:a3:ab:95:f1:0f:e4:32:f2:6c:34:9f:
21:46:d4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:46 2026 by rpki-client