
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json)
Hash identifier: GNz2+hSEVjGF2w/Tokkx3KTzTHcMAIaN4ESaSAyEyrQ=
Subject key identifier: 54:3B:7E:64:DA:00:DE:03:A8:B2:73:03:2D:C6:CE:F4:DA:C5:FC:13
Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74
Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
Certificate serial: 0A8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
Manifest number: 0A7B
Signing time: Tue 28 Jul 2026 19:56:25 +0000
Manifest this update: Tue 28 Jul 2026 19:56:24 +0000
Manifest next update: Tue 04 Aug 2026 19:56:24 +0000
Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: /66cBZE8LvTxM6iBr8oM4qXGtZnMd4hrFECS/EUcKJA=)
2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: rUdJq8ubToO+Jf95JCEVcx4+sMHgtZ/vn08eLBUGR54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl
rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2699 (0xa8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
Validity
Not Before: Jul 28 19:56:24 2026 GMT
Not After : Aug 4 19:56:24 2026 GMT
Subject: CN=6a690969-5252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:48:5a:02:0e:3e:08:51:93:b0:c8:a6:e0:
ad:a7:bd:88:e0:47:c9:06:71:e6:f3:6d:cf:6a:78:
0c:07:bc:21:b2:38:10:1a:19:ec:5a:8e:10:44:9e:
36:50:23:3b:a0:44:6c:8f:d8:e3:fd:ce:28:90:7b:
c5:d8:69:bd:78:51:b2:e1:6b:38:1f:5c:15:b8:1e:
9b:40:79:c0:05:98:d9:1c:6e:4f:2c:18:33:32:fa:
29:ea:fe:31:4b:78:34:c6:d2:a1:41:ea:26:22:05:
d4:27:31:40:12:dd:34:c8:b1:d0:90:d9:0f:80:fb:
66:62:42:18:ae:d8:ae:60:c9:34:3d:c4:1c:37:cc:
e0:f7:6d:a2:f4:6d:d9:a9:b2:c1:0c:4d:bc:38:de:
e2:77:f2:05:cc:3e:ad:28:dd:93:15:03:b1:16:2c:
76:e0:89:75:9b:70:f3:61:78:ae:3b:57:fc:fa:e8:
ec:b3:60:a6:b5:30:00:a0:1e:74:9b:92:93:33:0c:
4d:e3:df:c7:49:31:08:fa:fe:12:55:91:54:42:03:
6f:75:2f:15:79:14:e0:d8:c0:be:43:4f:ac:65:a8:
f9:5f:51:e3:0b:a7:1f:bf:79:44:d2:3a:b9:87:e0:
54:2c:e7:ab:05:b9:af:f6:9e:1e:7e:f7:91:ce:66:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:7E:64:DA:00:DE:03:A8:B2:73:03:2D:C6:CE:F4:DA:C5:FC:13
X509v3 Authority Key Identifier:
keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:85:f7:cf:d4:8a:5e:be:48:90:db:48:79:b1:c2:a5:2a:73:
06:5f:1f:5b:bd:64:50:a3:ba:5e:da:91:4f:f6:2a:ca:65:cd:
bc:fc:e9:65:64:8d:6f:b1:09:e2:f4:6c:68:e6:c1:54:af:14:
21:41:89:47:15:ca:f2:5b:8f:1f:35:47:a8:f1:d9:58:b9:fb:
44:f8:a6:c1:9f:62:e3:b6:80:6a:89:ec:1e:92:99:c0:54:31:
95:85:ce:16:79:1a:b3:f1:5c:f5:ce:d7:ea:23:73:7e:e5:45:
51:41:46:45:43:a6:50:f0:d5:dd:db:e2:ad:5f:59:80:8e:2c:
f0:6b:01:4b:92:05:a1:f9:9b:2a:cd:22:ac:7d:68:f2:37:ba:
9b:22:33:d6:ef:47:06:d6:98:b6:3a:b0:b2:93:63:75:47:42:
6c:78:60:f1:bd:f1:de:02:a0:ab:81:c3:e5:da:4b:e5:fd:96:
74:ac:8a:13:93:a5:96:8e:93:74:b7:9a:91:3c:1f:84:7d:ab:
ae:a9:63:e7:36:8f:1b:3b:60:1f:d6:29:db:42:cc:65:d9:e1:
37:1d:d3:02:e3:0e:e4:c5:6c:99:69:2e:f1:ad:92:bc:11:a3:
b4:19:a3:ea:93:30:0f:65:4a:df:23:8f:ea:14:ab:32:ea:96:
34:ee:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:12 2026 by rpki-client