
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
File: Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft (raw, json)
Hash identifier: Rhh1dDUfgP1Vky6tvr9VdwA+DmAIxrO/Gpf5yn6l0ZE=
Subject key identifier: 46:56:05:83:14:45:2D:2B:04:4B:20:F5:E7:EE:78:93:1C:34:77:B2
Authority key identifier: 36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
Certificate issuer: /CN=A91D1F47/serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
Manifest number: 30
Signing time: Sun 11 Oct 2026 09:21:41 +0000
Manifest this update: Sun 11 Oct 2026 09:21:41 +0000
Manifest next update: Sun 18 Oct 2026 09:21:41 +0000
Files and hashes: 1: Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl (hash: JwTrbEulVIlgjMUGZ2PEHEE79DqDE428U1S0JipOcgQ=)
2: 02DB290681BA11F1AFA7F5BA63A30FBC.roa (hash: 0VxHPVZ4YVNrrIIbimS1zczqvyzHEUrXRQ0L2H6QDOk=)
3: C2C83BE49AA811F19B7965243F11F970.roa (hash: jO08CRGsDF/PdACbK4TpuTZbLUeaa6DXFJLfMy7ydYc=)
4: 03AD58B881BA11F1AFA7F5BA63A30FBC.roa (hash: LQgZVNJXiwnEUGUm2X1GTQRbnRviK3JSG+cSffSy6Fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 09:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Validity
Not Before: Oct 11 09:21:41 2026 GMT
Not After : Oct 18 09:21:41 2026 GMT
Subject: CN=6acb5525-0754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d7:15:aa:08:3f:5c:81:f7:0a:86:e0:6c:d1:
9c:ef:55:a8:fd:12:91:b1:b2:83:db:ba:73:11:c2:
eb:9d:9a:6b:cf:a9:b6:15:27:87:6d:58:35:8c:43:
e0:22:c9:3b:9b:fa:2f:3e:00:5f:e2:4c:ad:bc:f5:
72:86:28:5d:6a:09:e7:66:d1:11:e3:15:e7:e3:3e:
72:3a:56:a1:3c:66:0d:18:ac:63:0c:7d:9c:78:e9:
f3:e5:53:a8:87:99:35:ae:79:8e:02:a1:65:4b:bc:
b7:5d:81:16:45:14:1f:35:57:5b:f6:86:55:84:d7:
cc:34:4c:35:99:c8:b9:60:33:0d:70:02:cd:84:9c:
aa:88:75:db:b4:bb:00:7c:54:f8:29:86:52:75:ee:
a4:7d:b6:c4:44:d4:65:e9:97:ae:b1:ae:e5:98:89:
dc:c5:f6:b0:18:ea:73:20:92:29:17:b2:c8:49:d9:
23:05:6f:7b:28:f1:cb:55:a4:cb:94:6a:23:6c:be:
c8:a6:df:da:73:de:f5:99:0f:d2:ef:33:e0:37:7b:
40:42:af:86:f0:30:48:9f:6d:b7:cf:1f:d0:89:be:
c6:e2:6c:15:0b:2b:1e:3c:bb:1e:4a:56:fb:e5:fa:
e6:a1:ca:a7:ad:b3:49:05:eb:81:cf:c7:9d:a0:01:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:05:83:14:45:2D:2B:04:4B:20:F5:E7:EE:78:93:1C:34:77:B2
X509v3 Authority Key Identifier:
keyid:36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:ba:78:60:56:44:7d:ab:d5:6e:39:43:11:07:d0:5a:98:c8:
93:20:64:32:68:4f:45:54:b2:b4:be:c1:6a:e6:16:f9:0d:9a:
87:27:d6:c9:41:29:c6:74:32:e9:d6:78:23:6e:ad:01:f0:98:
f9:09:d3:e9:2b:50:b0:58:db:2e:6e:0f:75:08:c9:fb:ef:09:
19:75:c6:84:1e:ba:a0:8f:5e:01:0f:01:82:28:ad:2d:64:b4:
e3:a0:96:90:66:ab:c3:c9:34:a6:58:90:c3:e6:bc:e6:8d:1a:
5c:3e:4e:27:84:7f:3f:c0:58:c9:99:79:6e:2f:c2:1e:df:4b:
30:a3:f0:ac:3b:9e:a6:e5:57:f9:f8:15:0f:12:90:a0:52:67:
12:f7:71:92:f2:f7:89:b6:b2:55:67:35:b2:93:67:07:2c:c6:
e2:3a:ca:38:37:a0:6c:00:65:cf:00:cc:16:c8:c7:93:76:1c:
43:d9:a2:56:9e:0e:8a:ef:97:c9:11:fb:fd:a9:1b:48:5a:86:
18:f1:95:b6:50:20:ea:42:56:65:95:59:79:3a:60:72:a8:e6:
3d:5c:23:88:65:ce:db:77:4f:93:f6:43:46:fd:7c:da:c1:36:
c9:58:18:a1:f2:e7:5d:e9:bb:45:74:e0:ee:85:9c:96:4f:52:
2a:ef:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:43:32 2026 by rpki-client