
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json)
Hash identifier: sHg6eW4MdDzGavGreFkBkRLAgXSpcmWYfY9UGwOIJSc=
Subject key identifier: 9D:D6:C0:B8:2F:F9:27:3C:3C:90:C0:70:24:0C:AA:9C:B5:2C:44:46
Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
Manifest number: 0157
Signing time: Fri 17 Apr 2026 04:44:39 +0000
Manifest this update: Fri 17 Apr 2026 04:44:38 +0000
Manifest next update: Fri 24 Apr 2026 04:44:38 +0000
Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: x7j3jIppO9HJCdFKgBKdf1048iYyw1ksdHQH48Q29dg=)
2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: rwM85aK7lK+yIuUXlvt+45rHjWLjHKjyCpBV5oJ3MMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Validity
Not Before: Apr 17 04:44:38 2026 GMT
Not After : Apr 24 04:44:38 2026 GMT
Subject: CN=69e1bab7-5e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:95:ae:69:4e:99:54:a9:17:ad:4a:89:74:
ef:8e:e1:63:e8:d1:3e:8a:69:de:c5:d9:15:ca:be:
d4:8c:38:fb:be:e0:49:4d:c0:0f:e0:fa:24:a1:53:
5a:7f:f4:ec:54:28:a1:96:61:26:0d:9b:e2:77:48:
72:25:00:b7:b4:1a:f3:10:f5:0e:9c:48:e3:8a:21:
72:85:be:0a:02:c5:3b:f2:4e:d1:4c:7d:21:be:5c:
26:a1:c2:bb:1f:b7:72:8d:c2:93:1c:6e:b9:a8:c6:
6f:d2:dc:0d:21:7a:e2:2a:ed:d6:dc:54:d8:51:81:
d6:3c:6f:79:88:56:29:f3:81:e8:91:30:a8:50:85:
53:f1:8b:8c:d7:17:48:b1:db:c2:fc:2f:5f:6e:f9:
7a:cb:6d:46:66:51:12:94:ed:df:ee:17:a9:23:c0:
a2:e1:ad:e6:5c:50:78:5c:8d:a6:a5:bf:a6:a6:ae:
a4:e5:7a:cc:1e:cb:41:40:fe:69:86:49:8f:7d:50:
f6:59:86:7a:02:98:c8:94:54:7f:4b:37:42:cf:d7:
08:83:4f:d2:dc:be:05:e1:62:9d:af:4a:8c:0f:43:
9f:e5:1f:1f:3a:4e:62:69:a1:2a:ac:ab:d8:fb:8a:
9d:56:d4:e6:95:65:d9:21:12:88:31:e1:fe:42:eb:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D6:C0:B8:2F:F9:27:3C:3C:90:C0:70:24:0C:AA:9C:B5:2C:44:46
X509v3 Authority Key Identifier:
keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:e6:b3:37:32:a2:21:ce:f3:c1:fd:62:a6:f7:c6:c5:d7:a3:
59:b0:b1:bd:5b:aa:f4:32:43:72:f6:ec:73:59:1b:b2:2f:72:
19:eb:fc:85:9b:c0:42:6d:25:57:7a:4c:0f:c5:b9:43:40:08:
24:b0:5c:2d:a7:10:5a:30:dc:71:27:af:0a:17:6a:f9:e5:c1:
54:84:bf:99:af:b8:8a:89:69:53:cf:91:81:15:28:92:9c:c1:
6e:be:66:74:12:92:ba:ac:76:9b:52:f9:4e:28:c3:2d:71:c5:
c6:ea:a3:02:32:39:ba:99:95:ed:77:95:df:ca:aa:92:86:6d:
24:2d:92:ed:c7:d1:58:a8:c6:8e:a8:ca:cd:70:ef:e7:75:85:
29:d4:e4:03:78:fc:5e:7f:41:3d:06:d3:99:54:09:77:b7:87:
29:54:3f:19:b5:88:0f:ea:f2:3e:b2:4d:42:cb:27:79:55:5e:
4b:24:89:43:50:53:f9:92:c9:54:cf:f1:a3:db:3a:7d:6f:3c:
7c:d1:65:74:89:44:44:00:06:3f:1b:2c:99:07:13:c5:15:98:
15:e1:d8:3c:98:b2:e9:d1:d9:4a:02:be:ed:3f:6b:0c:0c:d7:
f2:d8:0d:c7:97:cf:e1:03:2a:e5:4e:a1:cb:a7:d8:c7:f7:bb:
11:f3:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:58 2026 by rpki-client