
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json)
Hash identifier: DGTHF9ICML53UTItBLxGBPknbhcoinPWO82m8BTMCVo=
Subject key identifier: 98:6E:F4:29:03:0B:0F:C1:A3:EF:99:E2:B7:20:99:6D:97:BD:3E:8C
Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
Manifest number: 01AF
Signing time: Fri 09 Oct 2026 04:37:48 +0000
Manifest this update: Fri 09 Oct 2026 04:37:47 +0000
Manifest next update: Fri 16 Oct 2026 04:37:47 +0000
Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: yiTX+trWh6Ss+eiDGq3ARiabVc2hi8vVKL8XvhTczqk=)
2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: rwM85aK7lK+yIuUXlvt+45rHjWLjHKjyCpBV5oJ3MMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Validity
Not Before: Oct 9 04:37:47 2026 GMT
Not After : Oct 16 04:37:47 2026 GMT
Subject: CN=6ac86f9c-fd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:e6:46:e7:bf:7a:cf:18:4b:dd:f0:ff:42:
5e:46:d5:7a:3f:38:78:60:e0:fd:fa:2e:1b:2d:74:
4a:8c:8c:37:00:e8:7c:6e:83:ca:6f:b8:5e:e0:26:
31:13:e5:5b:cb:d2:2f:75:bc:54:fa:a4:f6:1d:1a:
dc:45:70:21:ba:55:4c:36:08:63:a5:42:2d:6c:97:
aa:ea:fe:ae:6d:6c:fa:43:23:3e:24:93:55:05:1c:
49:c1:4e:ca:4e:fd:47:e6:3e:e1:dd:39:d6:ce:d0:
d2:52:06:66:58:84:74:f7:33:f7:21:4b:7f:2c:a8:
51:cf:15:91:2b:75:0a:39:e8:02:8b:47:c4:6b:5a:
97:48:fc:0e:70:8d:63:18:fd:23:0c:88:d5:bf:ea:
78:9d:4f:a2:8e:7f:31:77:75:ff:be:b0:b3:9a:f2:
1b:b4:7d:da:df:8c:a0:b1:86:bc:e4:f3:49:e8:4f:
2e:03:a3:4c:c0:ed:33:0a:c3:3a:aa:94:e9:18:1a:
7c:d9:9e:5e:d9:b3:5b:53:77:69:05:03:de:cc:e7:
d0:30:2b:32:48:d6:0c:f5:6c:71:6d:d4:49:7f:2b:
01:62:3d:36:1e:b0:0b:39:2f:87:8f:f7:dc:30:db:
09:6e:7a:a0:b4:16:0d:c0:9a:94:32:31:1f:cd:a4:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:F4:29:03:0B:0F:C1:A3:EF:99:E2:B7:20:99:6D:97:BD:3E:8C
X509v3 Authority Key Identifier:
keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:29:76:8c:0b:c0:98:81:ad:1e:93:c4:41:77:eb:ca:46:ca:
f4:29:d1:0d:cf:98:ce:b8:ac:45:e3:4b:7c:e7:d9:05:b9:fa:
9b:65:a1:9d:9e:56:f3:f4:05:d8:4d:d7:9d:24:62:70:b8:42:
a1:b1:e7:2e:67:c6:37:2a:f0:c5:fe:e9:ce:8f:6a:df:dd:81:
9b:7f:ad:1c:5f:8e:57:1c:8d:f9:ce:ef:aa:10:1b:e9:24:1d:
83:fb:58:3e:25:3f:60:8c:76:e4:bf:97:2c:0e:ba:b1:da:18:
18:e0:c0:41:e4:97:92:32:20:b6:ca:84:39:5a:41:a5:55:64:
b5:c0:19:69:82:84:a2:15:13:86:0a:78:38:81:6d:4b:ef:bf:
98:33:f9:90:33:69:9b:4b:16:d9:1b:a9:4e:e6:a1:3b:8c:40:
2b:8d:ca:da:98:52:21:27:c6:6e:2d:12:80:72:e0:34:f3:b1:
1b:a2:5f:73:de:92:2f:90:13:4d:cf:df:09:7a:f9:c9:ee:58:
d9:58:d5:7d:02:94:38:a5:e9:7f:47:2c:06:cb:e2:95:14:e9:
b1:09:c5:4d:6b:ef:7e:4d:d3:2b:2b:79:33:4c:55:a4:85:f2:
aa:ea:aa:76:f5:9f:b9:d1:a5:53:d4:69:b3:dc:c3:d9:62:ad:
30:cb:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:27:45 2026 by rpki-client