
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json)
Hash identifier: uDLfs71QCCHfwl2AY6Or9lB0pfA3hJJQYem9B5Gn9Sg=
Subject key identifier: BF:65:E1:E6:64:8A:1E:85:A3:24:B8:15:30:4D:9A:D8:7F:59:10:53
Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23
Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123
Certificate serial: 03FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
Manifest number: 03F8
Signing time: Mon 21 Sep 2026 00:15:02 +0000
Manifest this update: Mon 21 Sep 2026 00:15:02 +0000
Manifest next update: Mon 28 Sep 2026 00:15:02 +0000
Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: ZqyvkY1R/Yyg8L6KTfgvxJEfusC5R3sLXx6y9YTKp44=)
2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: G58s+WAEg4C4LutKoAsZWg3Gtc1DpCuEN4PtWpnwCRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl
rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022 (0x3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123
Validity
Not Before: Sep 21 00:15:02 2026 GMT
Not After : Sep 28 00:15:02 2026 GMT
Subject: CN=6ab07706-5d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:a8:a9:5f:f4:9a:b8:1a:ba:45:b8:6f:5f:
d2:55:d4:51:4b:a3:19:2f:7a:79:d5:b1:01:6d:ec:
a0:a1:9b:e9:6a:77:8b:03:db:74:22:b5:cb:19:c5:
b5:a2:fa:67:02:bf:ae:c5:2f:4d:1e:5a:70:60:e7:
36:78:47:91:7c:5a:19:76:55:61:d6:d8:c9:1c:c9:
ee:f9:b9:f0:9f:8a:44:a8:11:76:b2:a6:8a:74:14:
03:b0:d0:1c:be:32:2a:d9:fe:ed:1e:84:cd:29:df:
de:15:e3:70:32:5f:82:1c:6d:b5:fa:0f:af:27:c7:
75:d0:c2:6e:5e:c5:9a:db:fc:7c:b5:38:82:c0:09:
58:ec:db:e3:98:1d:c2:ed:b1:44:b0:0a:77:43:54:
66:1e:4f:d5:36:4a:bb:97:6f:0a:8b:0c:90:95:fd:
7d:a9:80:2f:01:e2:8d:30:d4:d6:81:0c:54:45:07:
65:d2:f1:26:9e:ee:b8:96:33:a0:96:22:cd:13:f5:
17:f3:52:b6:5d:1e:9b:a3:c4:77:ae:18:88:66:8e:
2c:a3:aa:c1:a4:cb:30:35:57:e5:d6:62:66:f7:25:
88:f1:16:b2:7d:be:46:ab:44:a1:0b:00:13:26:0c:
ab:ff:e6:00:93:69:56:14:00:b8:ce:d3:f7:5f:a1:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:65:E1:E6:64:8A:1E:85:A3:24:B8:15:30:4D:9A:D8:7F:59:10:53
X509v3 Authority Key Identifier:
keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:d8:bd:2f:9d:2a:11:ca:0e:5b:f4:81:fc:d8:40:e3:a8:9b:
4a:fe:44:64:8d:bf:60:1d:32:44:ea:31:64:b1:b4:dd:e2:8b:
0a:48:3e:2b:02:be:0e:6d:01:03:ae:75:76:2e:fb:64:fa:9e:
04:4f:61:cc:4f:dc:3c:74:0f:d6:84:a0:d1:f0:b9:b5:c5:5a:
4e:34:da:1e:b4:68:df:45:f5:60:9f:40:1a:9c:0f:59:d3:49:
64:a1:08:cd:b4:b3:96:77:7e:cf:a5:24:09:47:c1:43:05:23:
6a:30:c6:6e:76:df:c1:e4:83:5a:d6:6e:f5:9c:4a:82:a7:4c:
0b:45:53:5a:00:46:3d:f5:fe:0c:96:c0:13:b5:55:8e:4c:1c:
5b:c4:a6:55:3d:94:b9:2f:b7:f7:2f:c5:6c:b0:10:06:06:05:
04:3f:73:f3:a8:a3:87:ef:82:6a:2d:ac:b8:0d:20:5a:4f:96:
91:2f:13:f0:7d:82:b2:78:27:2b:36:84:5d:3b:d4:76:30:f6:
24:20:8d:78:15:52:a7:6a:2a:c2:73:95:d2:bf:75:6f:81:1f:
d5:d5:6f:9e:21:1e:09:8a:0f:71:70:ec:b4:ae:b7:81:5c:28:
aa:7b:e2:d7:fb:bb:46:51:58:7a:09:05:99:9f:55:43:28:e0:
04:01:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:31:45 2026 by rpki-client