
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json)
Hash identifier: /egMqR/lh/cYIYTuD1gvBkfHNEE1zd/zbjiNXnrqxjI=
Subject key identifier: D1:6A:EA:10:E9:9D:56:47:B2:95:9D:DA:2E:33:06:BC:1D:F7:DB:CE
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial: 07BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
Manifest number: 078B
Signing time: Mon 02 Mar 2026 01:52:53 +0000
Manifest this update: Mon 02 Mar 2026 01:52:52 +0000
Manifest next update: Mon 09 Mar 2026 01:52:52 +0000
Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: 9eWReyz6NTVD1stm8+PCka+4Epk723AZaPlqVEzY+bg=)
2: 9E0384D2D4AE11F0B3093770C4F9AE02.roa (hash: cGVQIIdJGt8Aux9qCiehE11VT+N8BiTQk9P5Vr3AceU=)
3: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: c6sai8bqZjrx+i6EcrrhRuiN1WH7+kYam7HKGSsGQWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1981 (0x7bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Validity
Not Before: Mar 2 01:52:52 2026 GMT
Not After : Mar 9 01:52:52 2026 GMT
Subject: CN=69a4ed75-ca12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:ac:0a:bf:c5:97:b7:76:5d:92:33:be:f0:
17:0c:7b:cd:65:04:dd:7e:96:da:03:67:38:e0:0a:
6b:d1:7a:ad:b5:03:be:00:19:dd:b3:8c:a5:aa:8a:
5b:6f:c8:73:a6:d4:85:a1:2f:7a:d5:52:12:d6:68:
d4:dc:e6:97:93:87:5e:91:8d:9b:2b:c2:f4:41:c1:
44:79:39:0d:b3:0b:24:05:f6:fc:f8:57:98:4c:ca:
29:d6:a1:ec:96:20:4c:1e:80:fa:01:a3:2e:fc:22:
3e:01:c4:85:98:88:73:00:94:8c:a5:b6:f5:db:0d:
2c:a6:9b:a7:a2:d5:11:05:9d:fd:01:b4:a3:03:5d:
18:06:3a:81:0d:09:59:a4:a4:e1:85:62:83:32:03:
b6:de:27:a3:32:20:e7:d4:c1:81:97:c6:c5:50:cc:
83:79:3c:64:cb:88:62:b5:3e:27:74:2d:59:0f:99:
48:c0:2e:7e:a0:c8:50:e7:93:24:6b:4d:0e:07:f5:
1f:26:a7:53:7b:07:56:65:de:51:44:57:5a:43:0f:
69:c4:f2:a7:ef:59:27:02:dc:73:fa:e9:d0:10:2c:
aa:df:5d:17:21:ff:5f:af:44:02:d0:16:4c:07:ef:
a6:f6:8a:14:37:4f:ec:94:99:b2:79:68:d9:31:a7:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6A:EA:10:E9:9D:56:47:B2:95:9D:DA:2E:33:06:BC:1D:F7:DB:CE
X509v3 Authority Key Identifier:
keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:d5:4d:d4:4f:f4:4f:fd:25:27:a4:c6:96:06:2f:05:14:61:
f2:ab:55:ef:69:c0:21:87:84:6e:e7:08:e0:44:ec:d8:5b:c0:
80:13:4b:d0:66:f7:9a:26:3e:15:5a:94:71:97:ef:35:a8:6f:
eb:25:94:bb:80:de:65:97:d4:5f:40:03:07:f4:17:f4:47:1a:
56:90:c0:c7:7c:8e:d0:97:91:da:36:e5:ac:81:c1:fc:b1:93:
89:6c:e0:a2:f6:15:49:9f:df:84:34:e3:0f:6d:a4:30:39:7e:
ad:14:54:fa:3c:38:96:f2:b3:06:6c:8f:99:fe:d3:2b:33:23:
eb:6b:a2:99:0b:d9:83:17:c1:38:ad:62:c4:9a:2d:ae:89:9b:
53:c6:04:1f:16:2e:6c:2f:77:a8:51:1d:05:b8:4f:4b:51:d0:
5c:52:df:6e:8e:64:0b:74:2f:cd:79:1b:0c:7b:a1:27:e4:79:
5f:a7:a1:de:bc:9c:67:e8:ff:11:13:b2:04:0f:7f:90:64:88:
fc:97:75:05:b4:2f:d4:42:53:91:d3:9b:94:3d:8f:80:57:db:
61:6b:db:59:56:0e:fd:da:ab:35:09:e4:0a:81:dc:fb:ea:b1:
6e:d3:10:38:c3:72:53:31:10:7b:8a:42:48:44:b2:69:f4:25:
b2:87:25:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:08 2026 by rpki-client