
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier: Yvo3vcSJ/JyvlANJMWuStQSMSU9LHWxi4Ryk+RoeYFE=
Subject key identifier: BC:67:1A:3C:2B:A0:AA:C3:2F:FD:F8:3D:C3:55:0E:F1:C3:70:81:43
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial: 07CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number: 1B6E
Signing time: Mon 02 Mar 2026 01:39:38 +0000
Manifest this update: Mon 02 Mar 2026 01:39:35 +0000
Manifest next update: Mon 09 Mar 2026 01:39:35 +0000
Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: iFrqPkbf9hM2MmQmvo+WctiMkpd/ZzDwXNCIuby9reE=)
2: C6BB442CE98B11F0A24D3E834F6F56BC.roa (hash: fQvlcrwBQbuojkhr1MzXvqt8o4OCenjdJMRcowohAyw=)
3: C56AF018E98B11F0A24D3E834F6F56BC.roa (hash: MIF4G38mLftqnqeE9T0qy+6BeKMKul+rB3EiPJaG4sA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1994 (0x7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Validity
Not Before: Mar 2 01:39:35 2026 GMT
Not After : Mar 9 01:39:35 2026 GMT
Subject: CN=69a4ea59-4e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:ca:de:c3:2d:23:d8:65:c3:a3:03:0b:aa:
9d:e6:0e:22:b0:ec:41:1b:0d:86:d9:48:93:36:db:
e0:30:33:a5:5e:b2:51:b4:59:d1:8b:7d:69:37:02:
8a:83:5d:b3:22:78:0a:10:a4:f0:4f:cf:44:d2:b5:
2c:b1:0b:06:59:9c:ee:5f:5c:d2:f1:d5:8b:58:57:
77:04:12:9b:db:97:47:05:95:93:63:b6:bb:45:a7:
74:59:ba:cb:8b:b4:a9:e4:eb:d3:18:c4:99:cf:de:
10:38:86:03:6f:4d:12:56:c4:33:52:0b:03:37:5e:
65:97:82:3a:16:c6:a7:f0:86:e0:5d:e7:21:4c:48:
b2:b0:45:bf:d1:a6:59:88:bf:13:80:18:9d:95:de:
fd:fd:36:6d:ce:f4:c0:e2:76:c9:de:79:90:a5:c3:
eb:ea:f2:69:a6:e8:81:05:6f:83:4a:a6:f6:c9:de:
a0:a8:12:25:38:2a:e8:43:d3:bd:54:bc:8e:5a:9f:
a1:54:d0:92:0b:8d:2e:9e:82:97:64:e9:56:4b:22:
65:c6:0c:d7:e3:c7:60:22:d8:6f:71:74:b0:b8:a3:
01:be:ed:e1:76:ac:5f:87:f5:6f:55:bb:e9:51:3a:
eb:98:e2:d9:dc:b1:19:b5:d8:4f:4f:f7:42:0c:72:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:67:1A:3C:2B:A0:AA:C3:2F:FD:F8:3D:C3:55:0E:F1:C3:70:81:43
X509v3 Authority Key Identifier:
keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:ef:f4:d7:f8:67:0e:96:32:c7:bd:d4:1c:2f:b4:45:8a:
0e:a6:4c:10:f7:99:61:62:ba:95:c7:84:98:f3:75:3c:a3:07:
31:3c:8a:37:13:13:c2:da:45:f9:94:dd:65:3b:84:fb:d0:b2:
10:33:1a:f6:61:ef:0b:92:3a:2c:c6:2d:04:c3:fa:77:d4:05:
d6:dd:f5:fd:7a:a6:a6:53:34:73:d6:ed:09:9b:48:6a:65:20:
56:e3:a1:87:1a:41:35:5b:c5:b0:0b:6f:0c:a5:37:cf:2b:6a:
26:29:a1:1e:ed:58:80:86:39:92:9d:9f:22:55:54:1d:e3:09:
89:6a:b2:b2:ce:0e:a4:6d:ec:1c:ce:5a:04:ae:01:00:06:46:
1c:e5:f9:6f:1a:63:a6:49:c5:0b:27:b8:7e:5c:f2:2d:bb:1a:
86:61:86:a9:2d:fe:77:53:8d:d4:80:10:ac:cb:1a:bc:26:f0:
48:bc:29:7f:b7:b1:a3:bc:bb:83:ca:3e:9e:f3:dd:21:7a:c1:
a9:30:a4:65:3f:23:9b:6e:58:5f:97:6e:2e:b6:f8:ae:e5:27:
29:d0:1d:1f:ae:b6:be:ed:5c:fb:1f:c7:5a:b1:1c:94:bf:d6:
21:c3:bb:5e:de:c4:c2:ee:80:ea:6d:04:57:5e:3d:04:ac:a6:
0d:95:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:18 2026 by rpki-client