
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
File: nNdxObeuQMY2CS0SiGlE3j8a_-I.mft (raw, json)
Hash identifier: L/CQWUeUHTT4kFjluu3u8Y2cSWMcJjPMyuTaXqpaPR8=
Subject key identifier: 02:8A:3B:3F:ED:40:ED:C9:1C:12:25:C2:29:47:1E:D0:CC:B1:AF:BA
Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2
Certificate issuer: /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
Manifest number: 88
Signing time: Sun 20 Sep 2026 18:11:43 +0000
Manifest this update: Sun 20 Sep 2026 18:11:42 +0000
Manifest next update: Sun 27 Sep 2026 18:11:42 +0000
Files and hashes: 1: nNdxObeuQMY2CS0SiGlE3j8a_-I.crl (hash: HdgNKLvKv62f1IlHFK2zoUtTFr2R590fEuQ0TWi6yno=)
2: 0FFE750C1EAF11F195BB007D1D3D8C67.roa (hash: BrK0FrMPMwFevxo3blKFfc/tytf2FzSWadOgigE4AiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl
rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
Validity
Not Before: Sep 20 18:11:42 2026 GMT
Not After : Sep 27 18:11:42 2026 GMT
Subject: CN=6ab021df-88bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:48:68:ef:b0:26:a8:e0:36:35:a5:7d:74:
b8:02:93:4d:6b:f3:a5:ae:0e:b8:c0:82:c6:c8:08:
9d:21:30:01:f5:ae:b8:5a:74:9d:95:37:e8:41:59:
db:4a:05:59:18:c1:5b:fa:da:46:20:2a:55:42:a3:
e1:8b:c8:1a:7e:d5:51:c7:0e:b2:a4:12:6d:66:56:
3b:49:6f:74:f7:be:25:fd:6a:41:1e:a0:0d:a5:90:
d0:96:a7:ff:f0:9d:36:c1:af:03:1e:ae:f2:7b:17:
e3:9d:f9:a1:67:72:22:58:28:78:8f:18:e4:e1:80:
27:5f:04:9b:8e:64:47:0a:74:a0:22:93:04:a9:98:
75:f1:05:ab:18:c0:8c:33:b1:7b:68:1c:c5:1c:e0:
78:a6:a3:70:2d:46:14:6f:19:e9:16:cb:ce:83:21:
03:9c:c6:5f:29:32:d4:dd:b4:ec:ed:2a:d2:e1:55:
b3:96:d1:be:dd:06:4f:7d:c0:6d:b2:46:99:45:ca:
a7:f4:74:a0:96:26:dc:f5:4c:ae:fe:48:6c:4b:41:
c6:40:25:1a:15:a1:bc:a3:ba:62:e5:f1:cc:30:22:
e6:c0:4e:dc:01:49:75:7f:cf:e8:4a:18:aa:d0:fa:
da:d8:46:a3:c4:2e:3c:a5:a1:6a:45:a1:f2:29:4b:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8A:3B:3F:ED:40:ED:C9:1C:12:25:C2:29:47:1E:D0:CC:B1:AF:BA
X509v3 Authority Key Identifier:
keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:75:87:e6:f7:99:68:84:26:85:d5:9d:a0:0d:08:de:ac:1a:
cc:b4:d7:66:6e:1d:fe:41:a9:e0:7b:86:21:57:9b:5e:a8:21:
46:7a:2f:60:db:71:6c:cf:6d:76:cd:3a:8a:05:7e:cc:14:4d:
35:a2:50:28:b4:fb:ce:1e:a3:9f:3f:ae:9b:35:a9:41:be:42:
4d:ad:dc:3b:30:7d:85:72:f0:31:bd:f9:bf:5f:c3:cf:58:05:
c4:d3:0e:38:77:e0:46:98:ee:07:5b:e2:2d:e8:40:f3:36:6d:
51:ee:08:a0:54:66:0b:c9:c8:ff:dc:3f:66:5a:a4:67:72:77:
45:8a:c2:0e:7a:8f:4f:57:e4:7b:92:13:7e:89:da:c4:6e:41:
a4:a4:2a:ac:af:fb:8c:7b:4a:80:43:72:c2:86:80:18:c3:0b:
90:3a:71:66:58:dd:82:07:f1:e8:83:a6:24:63:99:9e:50:8a:
49:6c:80:35:51:c6:aa:1d:95:c7:ee:8e:f0:71:1f:ab:d0:c4:
3b:c3:6f:1f:ba:67:af:94:c3:03:28:ea:56:dc:33:33:ef:b6:
a0:00:2e:24:2b:ab:bb:e0:df:06:e3:5a:2f:e5:0a:ce:99:37:
75:57:ee:3a:40:87:76:f0:3b:a4:2b:a8:df:e2:10:f6:79:d7:
8b:f4:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:57:44 2026 by rpki-client