
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json)
Hash identifier: 1IUjAHLdDCjhcw8fReTRbPYsqACtYfwW+CBhZRaNloU=
Subject key identifier: DD:8C:42:10:8A:13:05:D1:04:CF:D5:1F:28:01:87:DF:5F:93:E5:EA
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial: 07F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
Manifest number: 07C3
Signing time: Fri 12 Jun 2026 21:34:50 +0000
Manifest this update: Fri 12 Jun 2026 21:34:49 +0000
Manifest next update: Fri 19 Jun 2026 21:34:49 +0000
Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: +L75rHw0tjS1nuBat6W/JzbG62POzVnrPfUE39A5th4=)
2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Validity
Not Before: Jun 12 21:34:49 2026 GMT
Not After : Jun 19 21:34:49 2026 GMT
Subject: CN=6a2c7b79-257b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:16:08:36:47:86:1e:f3:46:ec:fe:a5:0b:
6b:b8:98:d2:5f:f5:ba:54:88:23:55:00:e2:a1:ac:
5d:6d:b6:d7:ef:ba:52:78:58:4c:fb:78:11:77:b7:
7e:cc:a2:8e:f7:18:08:2e:8c:a0:2c:64:f8:f9:c6:
1c:29:04:42:bc:91:12:19:46:0e:b2:cc:c0:8d:68:
e4:52:d4:ac:68:40:08:f1:99:41:ca:6f:e4:4c:1a:
3f:47:f3:ff:12:64:65:03:73:4d:e4:0b:23:f1:9d:
9f:7c:17:e6:ac:53:05:2c:19:00:9e:ca:57:e6:27:
c6:2e:ad:bd:e9:c9:52:5f:81:f8:b6:18:ad:47:69:
db:c8:31:db:6e:93:71:38:60:8d:49:c7:ba:0a:88:
0f:86:94:e9:cf:98:2b:95:f9:6c:a8:47:de:e9:35:
49:42:9e:8a:1c:dd:52:5f:0c:c0:7b:ef:84:3c:19:
2d:49:8f:79:cc:71:d5:06:86:9d:b4:3e:8f:93:99:
63:14:7d:02:3f:cd:2f:85:b8:fc:34:e0:c5:4d:6b:
5c:f7:2e:ab:da:34:2f:b2:b6:9f:5c:f1:cd:76:d7:
26:52:28:2a:d3:b5:9e:98:c0:7f:4a:7d:af:4f:e3:
5c:f2:c1:f2:d2:7f:36:89:5b:85:64:99:9e:fa:ec:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:42:10:8A:13:05:D1:04:CF:D5:1F:28:01:87:DF:5F:93:E5:EA
X509v3 Authority Key Identifier:
keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:7f:f7:58:8e:c4:b6:70:e1:3d:b1:9f:76:43:ee:2b:cc:6e:
fe:06:cd:cd:5d:28:46:3b:a7:19:5d:48:ef:2a:49:4a:62:86:
e2:d0:bc:82:28:c9:6c:fc:31:e1:ba:82:53:1b:26:8d:e0:1a:
f5:4d:58:1f:76:ea:56:67:0d:ff:1e:c8:8d:4e:9c:79:39:32:
4e:e8:bb:98:f4:3e:bc:99:9b:d2:8d:ac:f6:81:1b:b5:4a:93:
fd:2a:83:eb:f9:55:f8:f8:c0:35:96:76:56:38:d8:67:c5:89:
2a:3a:a1:29:84:1f:78:1e:45:ab:c1:e0:da:dd:07:b2:4c:b7:
d1:c7:80:06:21:97:ba:37:2c:fd:5f:57:d1:a7:29:9c:25:43:
3a:99:7f:69:c9:79:dd:6f:69:9d:91:53:ce:69:33:bf:1a:56:
98:e3:72:3d:61:08:5d:88:b8:bf:0b:87:bb:61:d4:d1:73:cd:
34:e1:44:b0:de:22:d8:c2:9b:43:f8:cf:05:35:15:ef:61:05:
72:ab:cb:4d:dc:be:1b:ab:fc:7f:b3:b1:1f:4c:e8:e5:cd:4e:
34:ab:bf:9f:97:30:94:fc:8d:b0:e4:95:8f:5d:da:cd:aa:6d:
23:a0:47:65:40:c2:8f:f9:a1:81:4f:7e:72:a7:25:97:79:c9:
f6:59:72:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1
NTkxRjJEREEwHhcNMjYwNjEyMjEzNDQ5WhcNMjYwNjE5MjEzNDQ5WjAYMRYwFAYD
VQQDEw02YTJjN2I3OS0yNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZUWCDZHhh7zRuz+pQtruJjSX/W6VIgjVQDioaxdbbbX77pSeFhM+3gRd7d+
zKKO9xgILoygLGT4+cYcKQRCvJESGUYOsszAjWjkUtSsaEAI8ZlBym/kTBo/R/P/
EmRlA3NN5Asj8Z2ffBfmrFMFLBkAnspX5ifGLq296clSX4H4thitR2nbyDHbbpNx
OGCNSce6CogPhpTpz5grlflsqEfe6TVJQp6KHN1SXwzAe++EPBktSY95zHHVBoad
tD6Pk5ljFH0CP80vhbj8NODFTWtc9y6r2jQvsrafXPHNdtcmUigq07WemMB/Sn2v
T+Nc8sHy0n82iVuFZJme+uyedQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2MQhCK
EwXRBM/VHygBh99fk+XqMB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5
NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM
ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTlCNC81REU1OTY5NjU5NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJC
cXZLTkRzakd4bFpWa2ZMZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGH/3WI7EtnDhPbGfdkPuK8xu/gbNzV0oRjunGV1I7ypJSmKG4tC8gijJbPwx
4bqCUxsmjeAa9U1YH3bqVmcN/x7IjU6ceTkyTui7mPQ+vJmb0o2s9oEbtUqT/SqD
6/lV+PjANZZ2VjjYZ8WJKjqhKYQfeB5Fq8Hg2t0Hsky30ceABiGXujcs/V9X0acp
nCVDOpl/acl53W9pnZFTzmkzvxpWmONyPWEIXYi4vwuHu2HU0XPNNOFEsN4i2MKb
Q/jPBTUV72EFcqvLTdy+G6v8f7OxH0zo5c1ONKu/n5cwlPyNsOSVj13azaptI6BH
ZUDCj/mhgU9+cqcll3nJ9llyhw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:41:42 2026 by rpki-client