
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
File: npzIDlqYTBof1BodMUaSYKIS2t8.mft (raw, json)
Hash identifier: RJWiwL6aWsepLzlCo9QottRYNDlvm6K6lb2DarwW93g=
Subject key identifier: B5:30:A0:E6:22:52:E2:7C:B3:F4:59:5C:96:08:18:4C:6A:64:72:3E
Authority key identifier: 9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF
Certificate issuer: /CN=A91CFBA9/serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
Manifest number: 65
Signing time: Fri 17 Apr 2026 07:41:13 +0000
Manifest this update: Fri 17 Apr 2026 07:41:12 +0000
Manifest next update: Fri 24 Apr 2026 07:41:12 +0000
Files and hashes: 1: npzIDlqYTBof1BodMUaSYKIS2t8.crl (hash: r8fgUM6+XtXtBqur2V5aLZ4g+jEjlZBHcefLU9pjUyk=)
2: 8966E266A77811F092FD731BC4F9AE02.roa (hash: IjXlQYKLRCjmgswoL3z/dJCGoj+WqZm8SD6r7cCJOG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl
rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFBA9, serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF
Validity
Not Before: Apr 17 07:41:12 2026 GMT
Not After : Apr 24 07:41:12 2026 GMT
Subject: CN=69e1e419-452a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7e:3f:6c:b2:00:c0:13:fb:b6:b2:d3:67:ca:
c9:bb:bf:25:de:4a:a2:22:1f:2c:df:f5:f4:23:d1:
99:77:f4:88:33:da:c0:38:28:f5:3a:18:ba:90:30:
49:88:e3:87:9c:58:d9:ef:aa:2a:c9:40:e2:2f:1b:
49:91:d2:0f:4e:76:37:a5:5b:ce:0c:8c:89:e2:4e:
0d:85:d7:26:e9:c0:f2:8e:f9:ed:a4:86:be:87:7a:
f3:d2:de:ab:ea:77:61:22:dd:90:ba:ec:bf:89:fa:
0f:22:e5:08:27:a1:2d:eb:17:56:0d:8e:13:19:a6:
e6:5f:24:c6:16:06:0c:b8:91:97:0f:d9:d0:2d:8f:
0f:d5:37:d2:76:52:72:37:1e:7e:50:70:f7:8b:2e:
28:be:be:ce:58:f1:09:f6:bc:d0:00:e6:21:7f:48:
61:5b:71:ba:93:77:04:dc:38:9f:9f:79:f0:c3:ad:
69:4a:92:17:b3:fc:4e:17:ba:ea:6f:5d:ca:63:f7:
d0:17:87:b6:23:56:17:bb:f0:61:fb:59:ba:92:c0:
21:6c:c4:43:25:3d:e2:40:27:45:7b:f8:be:33:21:
2c:ea:cb:e9:ba:fd:33:56:8a:12:98:bf:37:96:d7:
fd:67:c7:2e:8a:92:b6:92:55:ec:1b:94:b8:29:78:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:30:A0:E6:22:52:E2:7C:B3:F4:59:5C:96:08:18:4C:6A:64:72:3E
X509v3 Authority Key Identifier:
keyid:9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:27:f1:44:08:c1:76:96:5b:d2:a5:0a:c6:da:71:d4:53:68:
3d:d0:fa:c3:6d:da:73:34:41:76:62:ba:0c:3d:85:35:19:d0:
35:6c:c2:e6:b7:9e:b4:dc:53:a3:ef:90:44:42:fc:33:89:22:
d2:ec:0d:a7:77:96:e1:16:c9:2f:74:38:1c:e9:03:2c:a8:29:
db:ad:8f:4e:0c:9f:7f:f0:e5:1b:fc:dd:20:9d:b6:f1:7a:d7:
b6:de:2c:b2:2c:26:38:f8:42:5e:ed:29:e0:32:74:63:ac:1d:
f6:c4:9d:43:2a:91:fd:0d:6f:46:0c:49:dd:da:1a:eb:25:af:
dc:6d:2a:f0:93:99:77:4b:86:23:22:c4:f7:f7:a1:5f:c9:d0:
c2:8e:2f:d0:1f:a8:f2:67:97:92:0e:6e:f0:8d:7c:be:fd:ea:
9a:43:1b:53:f4:7c:a8:4a:86:35:66:d4:ea:30:93:87:50:a3:
df:e2:ea:4a:34:e1:44:f0:1f:98:f9:7f:44:fa:48:e3:30:f7:
aa:f0:c2:51:ab:1e:a5:36:82:8c:29:1f:c0:21:5c:c0:d6:fa:
f5:33:cb:9e:f0:91:10:eb:44:61:ce:fb:7c:ce:66:d4:73:b4:
8f:f6:99:f5:7b:d7:ef:ca:0d:2b:fe:59:9d:34:68:cb:98:8d:
72:05:cb:b3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RkJBOTExMC8GA1UEBRMoOUU5Q0M4MEU1QTk4NEMxQTFGRDQxQTFEMzE0NjkyNjBB
MjEyREFERjAeFw0yNjA0MTcwNzQxMTJaFw0yNjA0MjQwNzQxMTJaMBgxFjAUBgNV
BAMTDTY5ZTFlNDE5LTQ1MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDyfj9ssgDAE/u2stNnysm7vyXeSqIiHyzf9fQj0Zl39Igz2sA4KPU6GLqQMEmI
44ecWNnvqirJQOIvG0mR0g9OdjelW84MjIniTg2F1ybpwPKO+e2khr6HevPS3qvq
d2Ei3ZC67L+J+g8i5QgnoS3rF1YNjhMZpuZfJMYWBgy4kZcP2dAtjw/VN9J2UnI3
Hn5QcPeLLii+vs5Y8Qn2vNAA5iF/SGFbcbqTdwTcOJ+fefDDrWlKkhez/E4Xuupv
Xcpj99AXh7YjVhe78GH7WbqSwCFsxEMlPeJAJ0V7+L4zISzqy+m6/TNWihKYvzeW
1/1nxy6KkraSVewblLgpeMc1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtTCg5iJS
4nyz9FlclggYTGpkcj4wHwYDVR0jBBgwFoAUnpzIDlqYTBof1BodMUaSYKIS2t8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkE5LzYyMDk3RTg0QTc3
NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJvZjFCb2RNVWFTWUtJUzJ0
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbnB6SURscVlUQm9mMUJvZE1VYVNZS0lTMnQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG
QkE5LzYyMDk3RTg0QTc3NTExRjA5NERFQkYyREM0RjlBRTAyL25weklEbHFZVEJv
ZjFCb2RNVWFTWUtJUzJ0OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB7J/FECMF2llvSpQrG2nHUU2g90PrDbdpzNEF2YroMPYU1GdA1bMLmt5603FOj
75BEQvwziSLS7A2nd5bhFskvdDgc6QMsqCnbrY9ODJ9/8OUb/N0gnbbxete23iyy
LCY4+EJe7SngMnRjrB32xJ1DKpH9DW9GDEnd2hrrJa/cbSrwk5l3S4YjIsT396Ff
ydDCji/QH6jyZ5eSDm7wjXy+/eqaQxtT9HyoSoY1ZtTqMJOHUKPf4upKNOFE8B+Y
+X9E+kjjMPeq8MJRqx6lNoKMKR/AIVzA1vr1M8ue8JEQ60Rhzvt8zmbUc7SP9pn1
e9fvyg0r/lmdNGjLmI1yBcuz
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:29 2026 by rpki-client