
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
File: NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json)
Hash identifier: YZRnfY5EF2pNfLN7/vjHaXQssjI7oDagoFwyKplFKeI=
Subject key identifier: 41:D2:01:33:AC:99:31:AF:2C:85:41:FB:CF:A3:04:DB:C2:7A:F3:E4
Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
Certificate issuer: /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
Manifest number: 8E
Signing time: Sun 01 Mar 2026 08:54:38 +0000
Manifest this update: Sun 01 Mar 2026 08:54:36 +0000
Manifest next update: Sun 08 Mar 2026 08:54:36 +0000
Files and hashes: 1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: ZU6q39mryYC0yTEKq6koqQNdEpnoAOjDnL1b9wGbrh0=)
2: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: FsNpTkM6+3f8KZot7Stoju/dwRXl0OyRylfjVSJP04M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:54:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Validity
Not Before: Mar 1 08:54:36 2026 GMT
Not After : Mar 8 08:54:36 2026 GMT
Subject: CN=69a3fecd-0768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:a5:7a:91:51:2c:03:42:c1:7f:c8:ef:53:
20:ec:ce:20:60:75:6c:e5:45:bc:0d:31:0d:a3:3b:
b9:28:1e:62:74:6c:f7:a2:86:cc:5e:a7:ef:47:23:
70:7c:af:0e:fe:dd:13:18:2b:b8:27:68:10:82:13:
cf:90:80:69:30:af:e8:d1:c2:69:36:e9:4f:bf:39:
aa:79:d5:35:79:97:76:1f:fe:11:a0:14:98:8f:53:
7e:24:be:f0:fb:b8:8a:39:97:f2:9a:fc:ef:d9:31:
26:d5:92:c7:29:ff:97:bd:1e:6f:d0:09:a1:33:2e:
c3:37:3e:3e:3f:35:a2:15:f7:6b:bb:d5:7d:92:ea:
d8:16:16:13:e1:e1:e9:a6:ee:f9:d0:40:be:51:dd:
f6:37:a2:17:fe:1f:65:6c:18:4b:7e:85:04:2a:2b:
ac:a1:59:c1:88:ff:9a:a5:45:31:22:6b:12:c7:23:
6a:ce:01:4f:59:8b:85:b0:86:0f:1a:a0:81:57:a1:
30:10:e1:fe:09:0f:31:20:52:da:20:a2:c2:f4:e9:
d9:2c:c4:07:d1:0f:00:36:60:2b:d8:34:96:47:95:
e1:3e:46:68:df:4f:e1:bf:4d:73:b9:33:64:98:66:
02:3c:25:16:52:87:e1:c0:ea:c3:76:6d:78:51:ef:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:01:33:AC:99:31:AF:2C:85:41:FB:CF:A3:04:DB:C2:7A:F3:E4
X509v3 Authority Key Identifier:
keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c9:15:c1:5d:63:8c:91:f3:88:57:55:fb:1a:ea:4c:a0:5f:
0e:08:12:d5:95:1a:a6:75:4e:b5:85:25:7e:9e:9b:0e:85:90:
73:7c:84:13:33:e1:e2:0f:9c:7f:cd:b5:66:35:78:ab:4e:32:
c8:2e:c7:ec:8a:34:55:6d:f1:5c:5d:4d:86:5a:8d:ed:f5:53:
16:b2:7f:47:26:26:2d:15:62:71:0e:6a:ee:7d:92:37:a5:9c:
73:ec:5d:ef:60:97:fa:7e:53:18:1f:cd:34:6e:8c:af:44:0f:
b0:3f:83:65:04:66:f9:12:32:43:e2:82:94:a8:28:0f:a3:fc:
88:3c:c0:11:31:50:8c:bc:af:38:68:d3:ac:02:83:3b:fc:3a:
d8:2f:33:ff:bc:9f:82:a4:0d:ce:9e:7c:8d:5b:6b:3d:0e:2d:
fa:69:c0:86:7c:c9:e0:f1:70:93:1c:17:af:e2:10:fa:8b:43:
e9:90:f0:09:3c:34:36:05:68:9e:b5:61:67:f7:19:32:04:d7:
68:a2:02:55:64:e0:c6:0d:3c:da:f4:02:32:e1:6a:07:35:b0:
99:56:d3:96:08:8c:0f:ec:e0:4e:9d:26:f5:0a:43:c9:b5:9f:
c8:16:0f:e2:0d:bb:e2:7f:d6:6b:a4:f3:98:fe:d8:5b:ec:8e:
2c:29:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:30 2026 by rpki-client