
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json)
Hash identifier: eC5yYLc2Bwi2+nONVE6z9EQGT880PhiErE2p02RYwuM=
Subject key identifier: 63:3B:53:2F:99:F7:D8:85:B1:E4:ED:65:54:0B:47:B6:9F:8C:BF:EE
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1FD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
Manifest number: 1EE9
Signing time: Fri 12 Jun 2026 16:03:16 +0000
Manifest this update: Fri 12 Jun 2026 16:03:16 +0000
Manifest next update: Fri 19 Jun 2026 16:03:16 +0000
Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: pxdOLI5OF9S4T7WPPbZEsh9+lnwYpLrxjtJHAaeDvDU=)
2: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: WqpExzPxROe/gg2lhd3nPsvBRgnONfUMf1SNNkrCRwg=)
3: B6D9896CD51111F0AE06421FC4F9AE02.roa (hash: WHxcaULN9Ht//+q/uqSA9HqAeVbgvVuD0sa6vgTe7C4=)
4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: 1f+H0b+UV2WzVxLJDYx2e6yIlM5tna/gOxI28K3ajEA=)
5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: 9gHnkQpVuVjgh/19/P0O5xQq1RyKtz9sAjQNdfQWEbU=)
6: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: 9LCP0XK17s7on70+9Q+k6wX5exKsDHgO/FsKmRG7g9I=)
7: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: E8KCulpW5x2sAiN2CA+1RrMgxss5nyN9/hSLHOWwHsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8150 (0x1fd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Jun 12 16:03:16 2026 GMT
Not After : Jun 19 16:03:16 2026 GMT
Subject: CN=6a2c2dc4-24a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:a2:16:1a:16:4e:0a:6e:17:eb:49:15:c8:
d5:bc:a4:7d:4b:79:96:b4:a9:05:ed:19:60:97:c6:
e7:b4:9e:f6:6d:61:16:e8:8f:6d:eb:ad:0e:d4:64:
99:3b:5c:e2:32:52:77:d7:71:60:f6:a7:d2:57:0f:
11:ba:e2:05:a9:41:8a:f6:5f:1a:c9:5f:a3:1e:2b:
3d:97:83:7d:04:f5:82:09:68:7c:32:a5:dd:d5:89:
a1:31:2e:ba:ab:a6:02:4d:ae:b4:b8:ab:bc:2f:d4:
f1:6b:2f:ad:55:c1:01:00:7b:74:8a:bc:a7:76:5b:
db:22:63:0e:09:ee:59:46:49:26:8b:d7:5f:d1:d2:
46:5d:b9:ce:e6:e5:65:18:93:db:11:82:e7:ba:6b:
ee:b6:f2:c9:96:67:61:8f:df:06:db:f1:82:eb:07:
25:d7:d9:40:a9:92:fe:a5:37:90:bf:fb:d1:c1:e6:
15:b3:d1:9c:3c:1f:ec:ed:36:84:95:06:61:8c:6f:
ca:7d:5e:d4:a0:63:e7:45:65:9d:da:f4:fd:3d:9e:
ec:12:23:0f:ef:bd:60:7e:91:0d:95:70:36:54:ea:
9a:dd:35:88:b5:7a:70:f3:2f:2a:d9:e4:ce:cc:62:
a5:d8:62:2c:b2:26:b4:2c:d7:db:59:fe:03:ab:17:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:53:2F:99:F7:D8:85:B1:E4:ED:65:54:0B:47:B6:9F:8C:BF:EE
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:68:4c:aa:49:c5:24:45:8a:9b:29:26:9a:7c:69:b6:a7:63:
d7:a4:40:a4:06:78:92:fe:df:f3:a9:fc:2b:c8:3f:74:7c:8f:
3c:df:64:bf:83:80:07:91:ee:5b:c3:f0:c5:da:d4:4b:e0:ad:
67:c2:3f:f2:ef:97:97:bf:74:2b:e7:99:9c:a8:fb:96:53:00:
f5:2d:69:72:47:2c:5b:d2:a7:3e:2a:e4:87:19:7e:96:e1:e6:
63:e1:20:f2:c0:b2:b0:02:87:b1:ff:d8:00:21:1f:cc:ba:58:
38:02:c5:18:6b:db:f1:b4:69:93:16:7c:25:be:e0:bb:7f:f2:
0d:f1:ff:15:c4:b4:6c:2d:00:d1:16:13:b6:68:a6:90:4c:d5:
18:e7:67:ea:23:c1:38:d5:99:8c:d4:e4:e1:7c:e5:16:95:d4:
17:0e:c4:86:98:e2:e6:d5:2c:1a:b4:37:6a:1d:7e:95:b4:95:
91:de:bc:c2:00:d3:52:90:de:a6:b1:87:56:14:bb:64:3b:67:
20:33:d5:2c:ee:15:35:30:bd:b7:49:06:3e:b3:b6:43:a3:49:
34:d7:aa:27:f2:3f:c1:ee:2b:69:83:c6:5b:0d:a4:ee:5c:b8:
1b:db:63:7f:76:17:d0:ff:d3:5d:4d:13:7a:6d:cd:dd:1f:69:
c7:5b:b2:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG
QkNCQkQ4QkQwHhcNMjYwNjEyMTYwMzE2WhcNMjYwNjE5MTYwMzE2WjAYMRYwFAYD
VQQDEw02YTJjMmRjNC0yNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAteeiFhoWTgpuF+tJFcjVvKR9S3mWtKkF7Rlgl8bntJ72bWEW6I9t660O1GSZ
O1ziMlJ313Fg9qfSVw8RuuIFqUGK9l8ayV+jHis9l4N9BPWCCWh8MqXd1YmhMS66
q6YCTa60uKu8L9Txay+tVcEBAHt0iryndlvbImMOCe5ZRkkmi9df0dJGXbnO5uVl
GJPbEYLnumvutvLJlmdhj98G2/GC6wcl19lAqZL+pTeQv/vRweYVs9GcPB/s7TaE
lQZhjG/KfV7UoGPnRWWd2vT9PZ7sEiMP771gfpENlXA2VOqa3TWItXpw8y8q2eTO
zGKl2GIssia0LNfbWf4DqxfB4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGM7Uy+Z
99iFseTtZVQLR7afjL/uMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC
QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy
TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx
T0p0b3pfa29hZ2o3eTcyTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT2hMqknFJEWKmykmmnxptqdj16RApAZ4kv7f86n8K8g/dHyPPN9kv4OAB5Hu
W8PwxdrUS+CtZ8I/8u+Xl790K+eZnKj7llMA9S1pckcsW9KnPirkhxl+luHmY+Eg
8sCysAKHsf/YACEfzLpYOALFGGvb8bRpkxZ8Jb7gu3/yDfH/FcS0bC0A0RYTtmim
kEzVGOdn6iPBONWZjNTk4XzlFpXUFw7Ehpji5tUsGrQ3ah1+lbSVkd68wgDTUpDe
prGHVhS7ZDtnIDPVLO4VNTC9t0kGPrO2Q6NJNNeqJ/I/we4raYPGWw2k7ly4G9tj
f3YX0P/TXU0Tem3N3R9px1uywA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:08:26 2026 by rpki-client