
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json)
Hash identifier: nas1T+Z9Y2e0YqOhWGgTUVdqLnh2muBP+wWFu63RzgI=
Subject key identifier: C4:2D:5A:FD:D8:B3:16:81:31:9F:25:4B:03:B1:BA:66:38:0D:7A:B7
Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Certificate serial: 0765
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
Manifest number: 075D
Signing time: Mon 12 Oct 2026 21:55:20 +0000
Manifest this update: Mon 12 Oct 2026 21:55:19 +0000
Manifest next update: Mon 19 Oct 2026 21:55:19 +0000
Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: cnseXT794HS9nRCx+iSx0SII+HY3CDgwsEgpa1MRRoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl
rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 21:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1893 (0x765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Validity
Not Before: Oct 12 21:55:19 2026 GMT
Not After : Oct 19 21:55:19 2026 GMT
Subject: CN=6acd5748-9c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:6c:c1:45:cc:19:73:19:eb:b9:42:7f:32:
a7:92:fd:a8:9f:66:06:16:f0:c3:dc:ee:83:75:6a:
da:ec:19:d8:38:58:69:46:23:7f:c9:14:90:cc:a2:
cd:bd:fd:45:11:f1:67:b6:8a:04:29:4c:c0:06:bf:
88:c8:cc:b9:96:f1:f5:e3:e1:c1:86:63:ff:52:d2:
dc:94:dc:7a:97:ff:63:7d:22:48:85:52:ac:c0:9b:
ed:5a:ce:52:2e:ab:53:f1:3c:9b:a7:fd:c7:3b:01:
d8:ac:88:a9:fd:77:dd:f4:42:45:fb:93:a7:26:e0:
c1:e2:fe:cd:d0:5f:a1:99:d0:87:96:08:b1:79:8a:
91:0d:26:d6:26:2f:50:0d:bc:ba:d5:1b:9d:bd:33:
1d:a8:23:ec:56:92:24:8c:0d:a7:f2:8e:88:f5:fa:
c8:b4:8a:7b:b6:3b:53:b0:20:22:4e:23:c0:5b:17:
aa:c7:5c:99:35:39:6a:04:12:4c:e3:ed:9f:f0:8d:
ba:dd:26:a2:c4:06:78:f3:7d:5c:06:1f:1f:e6:90:
d3:1a:f5:c9:8b:07:ac:3c:74:46:d8:c9:a6:9c:76:
d7:31:a1:e9:c5:0b:1f:45:e2:2b:c9:24:01:84:d0:
c4:ba:ec:f5:7e:32:93:7b:c0:20:bf:35:b9:d4:e1:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:5A:FD:D8:B3:16:81:31:9F:25:4B:03:B1:BA:66:38:0D:7A:B7
X509v3 Authority Key Identifier:
keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:27:72:20:7a:84:9f:99:5f:93:db:e3:81:7f:66:17:13:bd:
4f:47:7d:2a:80:cb:7b:da:66:0d:77:8d:76:7c:43:42:99:d5:
78:2f:cf:2e:c1:1c:6d:9d:98:e6:eb:65:56:7d:60:f3:33:11:
36:6d:07:e9:2b:78:99:76:a2:dc:26:a4:3b:2a:60:e9:19:62:
4f:0b:61:34:47:06:88:e3:23:fb:d5:d4:10:eb:3e:bf:32:56:
d4:69:34:95:e3:25:d5:f3:09:ba:17:9a:65:ba:e6:38:0b:a0:
fd:21:e3:52:21:d1:df:ab:b6:cb:a2:55:4c:fb:11:0d:6a:b2:
ca:60:87:63:b5:e3:12:67:6e:bd:67:b5:4f:9a:d7:dd:6d:50:
3a:a5:a2:23:30:3a:d8:41:43:ec:7d:b0:af:77:ef:c7:f6:59:
4c:b6:d0:ab:c2:7d:f5:18:a7:34:5a:4e:c8:71:90:91:b9:0e:
82:b3:fc:ba:2a:5b:04:af:53:0f:bc:c9:37:83:35:b4:3c:a3:
ea:8f:58:3e:a1:89:c4:bd:19:f6:29:b4:63:9f:a5:d1:1a:cd:
1f:ea:af:54:f6:1b:32:bd:d6:7a:64:cd:37:e6:46:8a:e0:29:
f5:9d:39:91:78:00:85:d0:5a:64:70:d9:34:ff:4c:24:5d:94:
30:72:0b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:32:06 2026 by rpki-client