
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
File: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft (raw, json)
Hash identifier: ndOVPuJg3yjacC2h8+AITDaQPAgGe6L2qBNBh6YZBXQ=
Subject key identifier: 91:39:A1:78:1D:76:0C:2C:7E:36:10:20:06:53:78:44:E8:D7:53:57
Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54
Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54
Certificate serial: 1EC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
Manifest number: 1E83
Signing time: Mon 02 Mar 2026 01:36:38 +0000
Manifest this update: Mon 02 Mar 2026 01:36:37 +0000
Manifest next update: Mon 09 Mar 2026 01:36:37 +0000
Files and hashes: 1: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl (hash: NFaw4DcCosvBiwl6ED7cDAEsArvDYoCOssF6Q3snCvY=)
2: 527AA5C69F4F11EAA7970484C4F9AE02.roa (hash: ZRJ8RRTx82c/T4AayJfx0hjTY8b/3YGVP7pz26JY7DE=)
3: BD6571EEC0AC11EF8F832C34C4F9AE02.roa (hash: YwlYvcPK0LjbipBMcrV/Pp8E9LDWoYgfElzOVuCO5L0=)
4: C86831A80CB311EDB2750F60C4F9AE02.roa (hash: 5PsEYVqdLKSNHZI9sLRX1Oc9lcQCYnBoqVdi/mE1UTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl
rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7875 (0x1ec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54
Validity
Not Before: Mar 2 01:36:37 2026 GMT
Not After : Mar 9 01:36:37 2026 GMT
Subject: CN=69a4e9a6-8f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:37:95:eb:bd:6b:43:ec:df:0f:bf:c7:fa:
57:93:44:c1:59:87:14:5d:75:2c:81:26:9f:8e:e2:
11:d0:31:21:0b:f0:01:27:d0:9d:91:d9:52:27:78:
95:77:cb:b0:ae:ce:91:a5:6f:ae:cb:0b:12:db:57:
cd:90:08:a4:75:93:c5:29:bd:85:20:95:1d:b5:a1:
9c:c8:cd:40:45:16:5a:84:95:61:02:f8:90:2b:ce:
34:39:4f:49:3f:2b:ce:1a:64:ed:24:e2:46:68:db:
61:c3:93:8b:56:18:42:36:90:f6:7c:85:40:2e:2e:
a2:eb:ee:7c:a2:00:0e:72:31:82:49:e5:d8:10:64:
bd:33:72:db:87:65:44:4a:41:be:3a:67:82:ef:9f:
e5:e0:cd:e7:70:64:a1:a1:53:58:bb:86:e8:55:e0:
63:ff:86:e6:29:17:13:8e:cd:ea:0d:14:ff:d3:be:
8e:a4:e6:bb:cf:40:26:8e:3a:0d:a1:77:83:18:3b:
92:91:90:b0:db:94:e7:07:a1:45:94:6f:3b:67:db:
e8:aa:0a:91:47:50:f5:98:a0:f9:97:ac:f1:18:35:
13:c6:41:78:14:6d:14:74:e1:75:07:e4:7b:16:de:
9f:1c:42:64:d5:b5:96:2c:2b:a3:4c:ad:07:df:e0:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:39:A1:78:1D:76:0C:2C:7E:36:10:20:06:53:78:44:E8:D7:53:57
X509v3 Authority Key Identifier:
keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:22:6f:37:db:f2:c1:a4:66:d5:36:27:bf:21:fd:44:86:e5:
1a:b7:e9:13:3b:d3:5a:ee:4a:37:fc:2a:93:18:30:6a:ce:3a:
3f:ce:f2:6c:7f:53:3f:a4:86:2a:63:3d:80:67:4a:6d:8e:35:
30:e9:9e:f1:ff:80:cc:68:6a:31:9f:6b:23:aa:57:1b:5e:37:
64:f6:b9:ee:40:ba:ab:27:91:52:3e:1c:49:56:ff:31:8d:1b:
76:d3:97:72:03:08:bc:e3:3c:aa:20:f8:55:81:64:23:96:0f:
6d:6e:c0:6d:07:a2:1d:6b:1e:9c:f5:26:4c:e2:0e:17:5e:70:
44:b7:56:57:dc:e6:ab:09:6d:e2:f0:1b:f1:a5:36:9f:7a:58:
73:1a:64:18:24:b6:94:01:40:2d:1c:47:c3:97:8b:61:bf:f1:
57:55:92:79:50:78:34:cd:a8:2b:92:4b:bf:44:9c:2f:fa:fe:
34:a7:a3:44:c2:80:13:c0:16:d1:f3:84:ae:f0:28:9c:a4:86:
f6:19:ef:7e:02:2a:da:c0:cf:eb:b3:cd:62:fc:c3:28:ad:4a:
82:8e:bc:b1:0b:3c:db:ba:91:50:85:ab:9f:5e:42:1b:eb:26:
30:5b:77:85:da:24:60:95:86:23:b2:90:f4:32:e3:1d:b5:6c:
69:e5:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:31 2026 by rpki-client