
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File: nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier: MRQcDVZT3mDzKN67iVNFzMy2VXRSUd/qfpniAxLXnso=
Subject key identifier: 01:F6:AB:76:FB:8C:04:48:B8:AE:3F:35:4A:C8:D9:99:56:AE:CA:17
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer: /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number: 010E
Signing time: Fri 17 Apr 2026 05:41:02 +0000
Manifest this update: Fri 17 Apr 2026 05:41:01 +0000
Manifest next update: Fri 24 Apr 2026 05:41:01 +0000
Files and hashes: 1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: wdkQzoc60qdQfVXL6BeX4Ah8uFB8YvMWLPBRGtHLsto=)
2: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: 6sYXn011K9g2scrf7jey3FtY3PeEY3hVRse65pK5m0Y=)
3: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: TSc9nhEhWmbGRApAQE13+JucrQxfGC8N0706Bmj46MQ=)
4: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: LHp91fXfeBiyI0BufwwluadyAI7a4YTkgVgUF+ihiuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Validity
Not Before: Apr 17 05:41:01 2026 GMT
Not After : Apr 24 05:41:01 2026 GMT
Subject: CN=69e1c7ed-a876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:f1:d0:ee:73:2f:ff:b7:d0:f3:db:70:6a:
1e:e6:90:7a:98:8a:2f:0e:de:0c:06:fe:ed:a5:37:
62:2a:0c:bf:b4:9a:a1:da:12:28:25:d8:cf:21:1d:
05:cf:0a:93:de:3b:33:10:6a:f9:36:97:2b:e4:fe:
05:cd:ed:86:94:18:b7:dc:a3:2d:74:c2:8c:6c:12:
b5:cd:46:44:6a:95:76:15:88:12:13:0b:6c:28:4c:
e9:cc:87:df:19:b2:78:ac:aa:d4:0c:43:4e:ef:72:
27:ad:5b:60:65:e4:ee:22:3b:fb:2e:47:43:fe:17:
88:6e:07:ff:76:a8:bd:88:ba:ec:fc:ca:8a:31:66:
7a:9b:6e:e4:c3:58:c4:1b:5a:81:4a:8e:69:23:f6:
eb:60:0c:7f:82:7b:6b:da:59:d6:c4:10:28:bb:03:
2a:12:26:31:53:51:ee:63:d3:e1:6b:6f:df:69:50:
1c:d1:dc:a5:41:69:ea:5e:2b:4b:38:a8:53:a1:b2:
ff:1b:e8:01:64:1d:f5:1a:e1:96:d6:e4:16:62:6b:
0a:3a:8e:65:ff:38:a8:84:57:3f:87:da:a8:fe:2b:
ae:89:50:43:9e:49:ab:a3:6f:89:52:a0:67:b2:f4:
0f:ce:91:7c:7d:ef:d1:e3:8d:f4:2f:ae:3c:cf:8e:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F6:AB:76:FB:8C:04:48:B8:AE:3F:35:4A:C8:D9:99:56:AE:CA:17
X509v3 Authority Key Identifier:
keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:72:7f:a8:13:d5:03:1f:b5:a9:06:87:7e:8a:4d:a3:7f:e0:
6e:87:f9:72:8b:11:d8:0e:c3:41:05:b2:40:c5:f5:68:9c:d1:
f8:ef:1a:d0:d9:ee:df:29:8f:f0:42:23:59:3a:86:67:b8:9d:
2e:6b:b6:74:e7:24:24:97:34:5a:d8:e8:bf:18:56:54:f2:8c:
5b:96:6d:4f:54:c0:4f:32:a0:ca:ca:f4:3c:88:8c:8f:d0:e7:
2b:c3:4f:1e:d7:2c:eb:59:65:fc:98:42:69:c8:04:63:93:33:
a1:56:be:61:d4:f6:ae:79:a4:6e:5a:c5:c8:8c:30:0e:9c:77:
f3:50:20:5b:8c:e1:e7:3d:b9:3a:43:d2:39:47:9e:78:bc:20:
ca:5d:65:f0:77:39:26:ee:e1:82:2d:43:88:4b:50:7a:dc:1c:
a2:7e:35:35:c3:40:c2:a0:fa:dd:e3:c6:e1:b6:22:d2:5c:90:
d4:41:fa:3c:e4:ab:7f:4b:6c:7d:02:65:1b:0c:fa:da:42:3f:
91:2c:45:3a:b1:4a:7c:ce:91:ce:53:a8:ac:ba:34:95:a9:55:
9d:8e:aa:8f:6a:35:6c:58:5d:19:27:57:6a:83:5e:b6:d7:da:
36:85:08:4b:09:93:97:ad:ff:57:dc:08:5d:dd:fb:2e:c4:e5:
6b:7e:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:22 2026 by rpki-client