
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
File: NXR5DY34KztVHjtwJXG69VqemWE.mft (raw, json)
Hash identifier: NZ515p2zzF1vsU1oDoabejB/39wz+x45nraXpbbd9zM=
Subject key identifier: 2F:0C:FB:DA:ED:79:18:20:A2:EF:C8:E5:C3:CF:E9:C8:C8:51:50:30
Authority key identifier: 35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
Certificate issuer: /CN=A91CD40B/serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
Manifest number: 0183
Signing time: Mon 21 Sep 2026 04:49:57 +0000
Manifest this update: Mon 21 Sep 2026 04:49:57 +0000
Manifest next update: Mon 28 Sep 2026 04:49:57 +0000
Files and hashes: 1: NXR5DY34KztVHjtwJXG69VqemWE.crl (hash: X5yGPbsgCo0GA0hDNRHdlPSH4D8Y4rSXQjJI6jMEsOk=)
2: DA8D1C7EA72311EFBCEB047EC4F9AE02.roa (hash: KOPGS6LMhund+vJdD6XHT18EgiJR1qKIzzUaEq9CH3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD40B, serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Validity
Not Before: Sep 21 04:49:57 2026 GMT
Not After : Sep 28 04:49:57 2026 GMT
Subject: CN=6ab0b775-f51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:35:ea:5d:cb:25:b4:98:07:5a:53:f1:6e:
0c:57:b6:d1:c1:d8:8a:48:e8:6a:a6:8e:2d:1f:68:
09:12:6b:85:2b:54:32:83:49:8c:8e:81:1e:e8:23:
7e:d0:5d:cb:72:3e:e9:75:f7:d0:25:5d:85:0c:98:
c5:b2:45:83:81:00:26:ab:74:4a:18:d7:8f:2b:af:
32:97:7c:66:53:8a:de:ac:7d:e7:86:01:db:9b:f2:
30:9d:43:83:51:a3:12:d6:26:ce:ad:5e:0c:71:51:
9e:11:df:f9:b6:9b:f7:e5:bb:e4:d5:f8:27:34:cd:
d5:02:27:90:32:de:c1:5b:f1:a4:7e:d0:15:f6:a3:
5e:8e:07:c0:8b:b5:1e:e0:e2:c0:b7:35:a1:13:0f:
1e:3b:33:1c:38:3c:4b:77:3e:19:ff:07:f9:0f:7e:
ba:f3:3c:f9:87:da:1c:15:ca:34:46:47:53:61:44:
c7:35:7c:fe:c2:d9:31:5e:29:e0:d2:a3:9c:91:c1:
b3:d6:fe:a2:04:fc:41:29:08:37:2e:ca:e0:01:68:
94:1d:f7:66:fd:7a:bf:0b:12:7a:6c:62:0b:f5:fe:
12:4d:1a:1c:37:19:31:f8:9f:1e:7f:b0:a9:23:27:
0e:5c:2c:e7:4a:dc:32:7d:f9:89:5f:dc:dc:21:39:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0C:FB:DA:ED:79:18:20:A2:EF:C8:E5:C3:CF:E9:C8:C8:51:50:30
X509v3 Authority Key Identifier:
keyid:35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:2c:22:30:71:17:c2:7d:01:a4:90:6c:5f:a3:02:bb:8d:c1:
87:10:7e:fd:41:0c:c3:68:60:bc:6b:b2:1e:ea:d3:74:ca:43:
0d:7d:51:1e:73:8b:6e:24:cd:14:ab:22:42:d7:a3:11:ad:48:
8c:c2:89:29:53:ad:02:c4:0c:14:8c:f9:47:4a:b0:35:e4:f2:
d2:ad:ff:35:6c:4f:94:03:b2:13:87:f1:ce:67:2f:25:7e:29:
a0:e4:dd:b5:7c:1a:fe:7a:27:a0:f5:4b:96:eb:1f:5f:10:ba:
30:23:83:f6:ec:b2:7d:59:52:08:fb:ed:1c:07:7b:8a:40:1c:
dd:5c:61:e4:4d:1f:db:00:ed:c2:c4:f1:24:48:18:82:97:ec:
9e:5b:b5:1c:13:1b:8e:71:1c:21:da:a9:36:d0:e6:73:c3:6c:
3b:3d:8f:3a:66:ae:c4:2c:85:fb:4a:59:91:6c:9d:f5:0b:1b:
63:67:e3:8d:6e:53:3d:67:74:c7:68:09:e7:b9:43:1c:fc:15:
08:3e:cb:ef:82:c7:5a:2d:0c:c0:01:f8:7d:75:58:98:ba:ec:
09:5d:3a:e1:a8:4b:c1:ce:ca:b5:96:d5:98:33:e1:57:a3:75:
71:ea:fa:0c:6a:d0:a3:90:a0:43:52:5b:02:7e:ca:ec:3b:f3:
1a:30:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:01:33 2026 by rpki-client