
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File: nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier: ZAPwpP/6wesduIaTTDlo+biCIVW0ghRP4YHhuMdweyc=
Subject key identifier: 7D:08:11:3B:53:2C:1A:EF:49:1C:52:1D:05:96:75:1C:9F:68:7A:7D
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer: /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number: 0129
Signing time: Thu 11 Jun 2026 07:56:40 +0000
Manifest this update: Thu 11 Jun 2026 07:56:40 +0000
Manifest next update: Thu 18 Jun 2026 07:56:40 +0000
Files and hashes: 1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: 6b3P+y+fziDh/6fJ9An/5IKpaW/acxZkV6AcbVvbLxk=)
2: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: TSc9nhEhWmbGRApAQE13+JucrQxfGC8N0706Bmj46MQ=)
3: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: 6sYXn011K9g2scrf7jey3FtY3PeEY3hVRse65pK5m0Y=)
4: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: LHp91fXfeBiyI0BufwwluadyAI7a4YTkgVgUF+ihiuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 07:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Validity
Not Before: Jun 11 07:56:40 2026 GMT
Not After : Jun 18 07:56:40 2026 GMT
Subject: CN=6a2a6a38-3b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:3f:21:bb:92:5d:18:c1:bb:e8:65:3a:7f:
1e:8d:82:76:2c:a3:2e:b1:e7:29:a7:7e:9a:ff:34:
f6:be:21:8e:92:00:1a:50:3c:1f:91:84:2f:d5:5a:
40:88:a3:a6:1c:4f:3d:ea:38:42:97:1e:cc:d4:1e:
a3:97:34:53:a1:8a:62:ad:87:27:da:89:4b:11:ba:
dc:a4:de:16:47:5c:37:00:51:af:be:70:48:ec:0b:
1a:ef:5b:2e:7e:80:f9:ce:70:3b:4d:b0:2e:30:c1:
2d:fa:5a:b1:fa:6b:d8:41:18:a7:39:7f:81:3f:b8:
23:39:29:4d:76:12:c6:9a:c2:eb:7e:25:6b:13:89:
e9:c9:f8:d5:5c:35:51:e5:2e:80:e1:b5:23:a2:51:
22:54:ac:c7:ef:63:b0:7f:89:1d:6b:cd:3a:93:2c:
a1:97:59:2f:8a:55:01:85:66:cc:14:fa:8d:cf:fe:
5e:cb:24:77:aa:27:96:d7:26:ae:71:75:23:6b:84:
b6:8d:42:aa:6e:2f:52:79:ef:4e:6c:c8:9f:54:8d:
e5:3a:f4:cf:e3:1c:9b:67:18:a2:77:52:11:11:f4:
04:e9:1d:ca:2c:b6:c5:5a:78:5c:ac:b8:85:8f:a4:
06:3e:70:5f:8e:1b:63:6d:0d:7d:3f:ef:3b:ec:b9:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:08:11:3B:53:2C:1A:EF:49:1C:52:1D:05:96:75:1C:9F:68:7A:7D
X509v3 Authority Key Identifier:
keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:85:08:b1:e9:ce:0e:8a:77:ed:70:30:de:78:bb:b5:2f:60:
ed:2d:a1:ab:2a:2e:0e:ed:0c:fc:a8:e8:49:1d:b1:8a:8f:e8:
08:bf:92:5f:1f:df:18:b1:30:f9:04:ad:cb:ba:34:51:8a:05:
ea:67:20:e6:fb:b5:ea:d8:57:61:de:df:cd:0c:ec:c8:ea:74:
90:56:32:7a:ea:d5:00:47:91:ab:c2:de:01:94:86:80:58:69:
f2:b4:7a:b6:9a:9c:dd:4e:51:2f:a6:85:e3:69:34:f5:3e:f9:
7f:53:ca:ee:10:3c:ba:42:75:ee:ce:59:54:8a:9f:31:7f:5b:
d6:26:e3:0e:da:2f:54:7f:00:1d:e7:1d:c5:c1:ae:c1:61:6e:
a8:02:c1:e9:f4:1e:1f:35:85:c7:6d:6d:bd:e8:5f:56:8b:5c:
3f:13:e0:c7:24:3e:5b:bf:ea:e7:39:60:62:7b:a5:8a:c4:70:
55:d4:06:10:7a:99:6c:f6:69:e9:c0:9d:98:d4:cf:24:3d:71:
7c:af:a1:09:f7:10:12:6d:63:4c:ff:5c:c4:65:b2:a2:ca:a7:
96:c4:a5:f3:9a:73:f0:35:6e:7d:21:57:fa:57:67:58:8e:24:
a0:c6:5a:be:69:bd:9d:d5:d5:de:47:a0:d0:06:04:91:af:61:
6c:4c:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:54 2026 by rpki-client