
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json)
Hash identifier: H/VRNdD0A2WC8faP7R/8tRfRl5mTl/dI4fwgVIeG65Y=
Subject key identifier: 17:E5:78:03:9B:02:1F:7F:25:B9:F4:AF:10:20:B0:49:99:75:76:0B
Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Certificate serial: 08AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
Manifest number: 089C
Signing time: Thu 16 Apr 2026 20:26:08 +0000
Manifest this update: Thu 16 Apr 2026 20:26:07 +0000
Manifest next update: Thu 23 Apr 2026 20:26:07 +0000
Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: zODH7d7zOM6lc3aDz2OKoyw+uBYAv9alXDEuMp6xlIk=)
2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: 6N8L0/wOzazXZSPR1fOLRJTlX3kPwlL/sXD3aJXqTts=)
3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: fMBT8TBi/iV+GqMKiOn023vwnmaVeX5X3SPin3cqYSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218 (0x8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Validity
Not Before: Apr 16 20:26:07 2026 GMT
Not After : Apr 23 20:26:07 2026 GMT
Subject: CN=69e145e0-709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:5a:a9:76:32:84:e8:5c:93:a3:d5:44:95:
c7:21:46:48:eb:91:2a:5c:3c:7b:db:e6:af:e7:f9:
78:2d:e7:63:22:a4:ec:67:97:3c:7f:a1:4e:90:82:
00:b0:a3:fb:b6:f0:b7:83:fc:e6:ec:5e:97:9a:f8:
75:8c:0c:34:c0:07:1c:4e:73:d4:2e:f6:5c:00:50:
b4:f5:37:94:a2:ee:23:38:b3:f1:1c:fd:85:2b:f2:
ad:16:09:db:0c:e9:0a:47:50:9f:3a:58:a9:d7:f6:
d4:39:51:fd:39:d3:50:c7:ac:af:e6:a9:e5:6c:c0:
9e:15:56:ca:d7:01:30:aa:5e:e2:ed:5c:44:d1:48:
bb:52:3e:7a:a2:2f:c3:34:30:43:c1:99:f2:50:a8:
4a:01:41:0f:32:d8:71:95:ec:84:a3:52:77:9f:a2:
68:78:71:f3:85:40:a1:6c:42:f0:37:0d:be:98:78:
19:fc:0a:5c:67:2f:9e:af:dc:74:d0:7e:88:d7:8a:
7d:81:b0:fd:94:f3:20:b3:46:07:53:5a:db:d4:61:
6f:30:4c:b9:1f:34:2e:68:50:84:07:47:4f:89:51:
55:a7:97:65:98:5c:e7:fe:78:1f:56:f5:d2:d5:75:
3b:41:9a:52:80:5b:b4:e9:e6:3c:3e:41:81:21:cb:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E5:78:03:9B:02:1F:7F:25:B9:F4:AF:10:20:B0:49:99:75:76:0B
X509v3 Authority Key Identifier:
keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d5:fe:f1:4a:dc:1f:39:c3:d3:fc:dc:8f:ab:23:fd:e4:f7:
95:d2:6d:02:d2:c2:a4:fa:b2:cc:af:c3:7a:d5:df:ab:5b:3b:
d1:3c:a7:d5:e8:5e:5e:8c:a9:39:7b:75:7d:a7:3a:5c:5f:73:
d0:c5:9a:5d:16:41:01:92:5e:6f:8e:17:c1:12:6a:ea:7e:46:
08:7d:e0:64:57:72:ef:fc:ff:dd:68:8c:20:7f:d3:e4:ce:3f:
5a:80:38:7f:50:ef:b3:ca:16:9e:a1:a0:de:2d:aa:ef:14:b3:
d5:d8:43:58:45:ea:fe:47:e7:0f:47:ab:3b:ad:73:0b:dd:b4:
64:96:7c:f1:72:50:7d:da:a5:ec:9c:03:47:16:37:a8:c3:a8:
61:62:0b:8e:24:b5:9c:68:b0:61:bc:04:c4:7d:31:91:db:e6:
1f:0b:71:c9:da:3a:eb:e3:90:7b:3e:da:09:08:70:f6:88:c7:
2e:d8:79:c6:a1:c6:eb:e5:bc:f2:99:5e:49:af:f0:10:28:07:
02:8a:90:3b:2e:87:af:e8:f7:77:a8:27:66:4a:47:51:09:14:
b1:67:89:6e:6b:0a:7d:6c:67:e9:d8:54:01:62:4b:f1:81:a0:
71:f9:18:b6:c0:e9:2d:f0:56:33:ec:b6:65:20:12:86:ea:ac:
45:d1:6b:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB
QzEzRDQ5QjcwHhcNMjYwNDE2MjAyNjA3WhcNMjYwNDIzMjAyNjA3WjAYMRYwFAYD
VQQDEw02OWUxNDVlMC03MDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0BaqXYyhOhck6PVRJXHIUZI65EqXDx72+av5/l4LedjIqTsZ5c8f6FOkIIA
sKP7tvC3g/zm7F6Xmvh1jAw0wAccTnPULvZcAFC09TeUou4jOLPxHP2FK/KtFgnb
DOkKR1CfOlip1/bUOVH9OdNQx6yv5qnlbMCeFVbK1wEwql7i7VxE0Ui7Uj56oi/D
NDBDwZnyUKhKAUEPMthxleyEo1J3n6JoeHHzhUChbELwNw2+mHgZ/ApcZy+er9x0
0H6I14p9gbD9lPMgs0YHU1rb1GFvMEy5HzQuaFCEB0dPiVFVp5dlmFzn/ngfVvXS
1XU7QZpSgFu06eY8PkGBIctaBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfleAOb
Ah9/Jbn0rxAgsEmZdXYLMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz
QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT
YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp
eF85Vkt2dUs5UTJzRTlTYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbdX+8UrcHznD0/zcj6sj/eT3ldJtAtLCpPqyzK/DetXfq1s70Tyn1eheXoyp
OXt1fac6XF9z0MWaXRZBAZJeb44XwRJq6n5GCH3gZFdy7/z/3WiMIH/T5M4/WoA4
f1Dvs8oWnqGg3i2q7xSz1dhDWEXq/kfnD0erO61zC920ZJZ88XJQfdql7JwDRxY3
qMOoYWILjiS1nGiwYbwExH0xkdvmHwtxydo66+OQez7aCQhw9ojHLth5xqHG6+W8
8pleSa/wECgHAoqQOy6Hr+j3d6gnZkpHUQkUsWeJbmsKfWxn6dhUAWJL8YGgcfkY
tsDpLfBWM+y2ZSAShuqsRdFrIA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:12 2026 by rpki-client