
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft
File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json)
Hash identifier: S0IBCW4VAy/yJs89VdnrrwWriLZElua/RyJfGiaZqLc=
Subject key identifier: 8F:E0:B3:1B:2F:7D:EF:94:8D:E8:1B:8A:96:2F:FD:C4:5B:DA:85:62
Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85
Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft
Manifest number: A0
Signing time: Sun 19 Apr 2026 06:54:44 +0000
Manifest this update: Sun 19 Apr 2026 06:54:44 +0000
Manifest next update: Sun 26 Apr 2026 06:54:44 +0000
Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: dzf16ZUQV3PsfF1cECKVhQrNUXwALWK1xb7qi3CNMUs=)
2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: 2C2sOivYWsfKN0PHSEL43JM0n0rxZssOB/cieKzKbtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl
rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 06:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385
Validity
Not Before: Apr 19 06:54:44 2026 GMT
Not After : Apr 26 06:54:44 2026 GMT
Subject: CN=69e47c34-dda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:b7:c7:da:85:5a:f8:0e:27:77:9c:7b:47:
43:cf:48:82:3d:a6:32:15:af:49:2a:50:65:e0:41:
16:d6:c1:8d:15:3a:94:91:41:78:00:e0:52:fc:08:
10:40:00:30:2f:c8:12:33:a5:98:6f:62:73:c9:4d:
88:cf:30:61:b5:3d:74:7e:b0:5f:2d:05:06:77:02:
f0:db:d5:ce:eb:44:ac:cb:d9:4a:b2:19:42:0a:80:
e0:97:6f:72:7b:ef:bf:31:ab:8c:2a:28:1d:96:fe:
77:24:37:2d:d6:78:85:ca:76:4d:25:93:4c:81:2c:
64:74:73:3f:b6:2a:9d:1f:8d:93:b1:ec:a7:35:71:
f0:21:4d:8d:30:a5:c9:a2:6e:67:47:e8:9c:50:99:
29:52:a6:bf:93:94:90:22:23:62:d6:92:be:3b:16:
9c:67:90:fe:cf:ad:b7:95:1b:03:c4:c4:04:8e:a5:
20:85:34:12:a1:d1:56:e3:bb:5c:12:93:32:37:aa:
5d:df:df:9f:58:9d:ee:75:24:07:91:4f:31:d9:fc:
32:9e:0a:36:40:21:63:68:84:88:90:c7:0e:09:e8:
ac:15:1d:60:3d:50:76:3c:83:9e:e2:7a:2d:b0:59:
5e:f9:6f:4b:5b:e3:10:98:25:ae:3a:df:fb:b0:85:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E0:B3:1B:2F:7D:EF:94:8D:E8:1B:8A:96:2F:FD:C4:5B:DA:85:62
X509v3 Authority Key Identifier:
keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2b:ab:88:81:8a:0e:cc:be:32:7a:6d:69:c6:5e:ec:6d:c2:
f5:5e:a2:25:ea:4d:ff:10:ad:e4:be:10:12:e3:8a:89:8a:0a:
af:00:c4:11:b1:07:67:0e:55:83:f6:58:b3:87:11:f9:a4:97:
27:75:34:a3:4b:0c:7f:d6:9f:66:2d:bb:b2:66:59:1c:82:f0:
63:f8:b4:91:e2:56:73:04:17:51:6a:5d:6a:58:16:81:8c:99:
f7:be:f4:bf:b3:15:c0:99:ec:eb:83:c5:71:d8:5a:b5:a3:ce:
89:67:15:6d:a6:a3:e1:52:32:4f:6f:56:2d:6e:91:47:56:dc:
88:c6:87:7c:18:0e:23:38:a6:f9:aa:34:93:d2:41:e4:88:87:
7f:a6:fa:2e:be:11:44:c8:12:c4:f7:30:5f:88:fd:b3:c2:9f:
d6:6f:c4:4e:43:d5:7f:9d:e3:10:8c:1b:8d:b2:35:d4:04:ca:
78:1e:d6:59:92:f1:7c:92:dc:9a:26:e1:80:11:24:5a:64:47:
e5:9f:d3:ec:80:31:06:57:d4:f7:ba:c8:76:76:54:33:d6:5c:
98:97:9e:0f:67:a5:0e:03:78:13:7a:90:6d:58:7b:9b:30:bf:
3c:28:08:1f:a6:47:6e:25:7a:be:3a:93:0b:a2:d0:cf:38:1e:
04:d3:eb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:21:07 2026 by rpki-client