
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json)
Hash identifier: jfn26CMLa1DVKjQistL/sa+MfjxenHQwxOhfIuuunlQ=
Subject key identifier: AA:AF:8B:FE:57:6E:97:0C:BB:E6:2B:BF:9E:8C:6D:45:B7:B7:4E:70
Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Certificate serial: 0606
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
Manifest number: 05F0
Signing time: Thu 16 Apr 2026 22:51:55 +0000
Manifest this update: Thu 16 Apr 2026 22:51:54 +0000
Manifest next update: Thu 23 Apr 2026 22:51:54 +0000
Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: uis3/xs+MEegauFytmzpJOa3eMd2oATY6VPv0srlLyE=)
2: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: /QFvUN14R1O1KVpjrV19SJEs/S3B1Q2N0TzOckdFv0Q=)
3: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: hofwfPS1+TvM0/WkparMoyPsYmdvk20TYWiYyP/0qBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1542 (0x606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Validity
Not Before: Apr 16 22:51:54 2026 GMT
Not After : Apr 23 22:51:54 2026 GMT
Subject: CN=69e1680b-2ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ce:e8:d8:22:18:9a:e9:76:2b:0b:88:2c:b8:
b6:b1:05:2e:ac:41:3a:f8:3e:8b:bc:76:12:3e:bb:
04:23:d0:1d:8a:83:26:73:fc:6d:f8:f8:13:90:50:
5c:37:22:85:2c:25:bb:1d:71:68:2a:af:77:ec:8d:
32:8d:bf:95:0e:29:dc:12:6b:de:2c:5c:50:15:6f:
74:46:dd:ba:fe:e2:43:f0:0b:02:31:ad:4e:fe:43:
da:6d:44:dc:6c:0d:a9:47:42:8c:a5:09:fa:0b:77:
79:57:12:13:9e:0f:2b:b2:1e:39:a7:41:a9:b1:32:
46:58:c4:0b:20:84:7f:b4:39:d6:65:81:50:2c:5e:
e6:94:ea:c0:12:11:66:50:b5:d2:3b:a2:85:45:47:
2a:2b:f9:3c:0a:24:07:fe:2f:f0:8a:63:e6:57:a4:
7f:8b:70:af:14:8c:e3:15:87:12:fc:12:5f:41:ba:
3a:2a:2a:b7:3c:9a:44:01:e3:87:7c:4e:b3:2e:09:
71:71:3c:e7:6a:cf:58:53:30:9d:f1:5d:63:1f:e3:
b7:db:6a:d5:da:68:6a:fb:b7:b5:88:f1:6d:81:07:
8a:da:7f:e8:67:80:1f:c0:74:4a:74:1c:1e:f8:5a:
d9:35:62:c5:70:e0:0a:0c:d9:cd:2c:68:64:e0:e9:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:8B:FE:57:6E:97:0C:BB:E6:2B:BF:9E:8C:6D:45:B7:B7:4E:70
X509v3 Authority Key Identifier:
keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ac:13:e0:a8:79:1f:18:80:51:a7:c3:a2:06:fd:aa:c7:f5:
5f:d5:93:b6:e2:b5:b3:22:fc:05:e6:cf:0b:84:a8:4a:81:dd:
c4:9b:d8:28:68:a8:88:06:19:f4:ef:65:87:6e:78:20:9a:fc:
da:a1:21:9a:61:8d:c1:ba:4a:ff:49:54:d3:c2:60:bd:b7:ac:
0c:54:71:a6:cc:c5:c8:be:63:51:ce:59:a5:26:78:0c:4b:91:
7a:75:c1:15:4e:e7:f8:5e:c1:ea:8e:53:28:4c:72:6a:24:fe:
96:3d:77:5f:78:06:00:70:23:91:0b:0e:12:e1:bf:4b:35:05:
48:c3:9b:9c:be:67:f0:bd:13:da:d6:0b:40:a7:f4:ef:f6:06:
6e:5f:09:33:21:92:ac:be:34:24:a2:fc:d6:77:ee:92:cd:31:
88:3b:01:8a:f9:e3:7e:90:13:f6:8f:88:42:30:64:0a:02:1b:
89:4e:41:95:53:b9:e2:f4:69:fb:ca:3d:93:b4:61:ae:ea:04:
e8:81:7f:1d:8a:20:32:01:9b:a0:30:e6:d2:75:e2:60:72:fe:
20:15:68:a3:49:64:4e:ad:db:fb:cd:9a:a5:29:e7:7a:94:0b:
70:b3:da:08:67:f6:dd:5b:aa:41:fb:84:21:bc:ef:6d:0c:4e:
c8:eb:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:34:50 2026 by rpki-client