
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
File: Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json)
Hash identifier: XJdXvJ8NWKvHMJwN+QxLaJv/fKgmt9JRM3mlmawGOFc=
Subject key identifier: E9:A1:33:1E:76:28:D6:9D:7B:1E:76:84:D3:86:56:85:72:21:3F:15
Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
Manifest number: EB
Signing time: Fri 17 Apr 2026 06:12:20 +0000
Manifest this update: Fri 17 Apr 2026 06:12:19 +0000
Manifest next update: Fri 24 Apr 2026 06:12:19 +0000
Files and hashes: 1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: S8iUmV5EMQ9CC24BZLDAWqyYXHucowi/M2ox2xUCWMs=)
2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: Nuy8wkTfNQsDA+tWgvTQcyjhbo91R+mIegI98+xjZxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Validity
Not Before: Apr 17 06:12:19 2026 GMT
Not After : Apr 24 06:12:19 2026 GMT
Subject: CN=69e1cf44-e6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:05:00:45:78:9a:26:a8:a6:de:4f:9e:5b:
b3:51:6b:c3:2c:c4:73:27:12:1e:70:bd:d5:1c:c6:
61:35:f7:60:20:41:3d:8d:66:58:f2:d3:18:23:95:
6e:32:79:16:56:d7:50:eb:18:f4:39:5b:4e:c6:94:
50:80:82:a6:f4:45:ee:62:2b:28:fa:4d:4b:e9:4c:
4e:9f:73:73:f2:b9:04:fb:1e:f6:f5:06:cb:42:76:
72:1c:a1:55:8f:3b:5a:b2:9a:88:14:d8:61:b2:d7:
9e:98:45:d4:ef:44:51:5e:66:ac:e0:de:8e:60:22:
93:56:84:59:2e:1c:37:5d:ac:3e:9a:9a:f6:59:ef:
db:64:7e:7b:72:f8:69:19:20:c5:06:c6:e6:95:13:
93:f5:d6:9f:32:30:9d:48:be:d9:d8:91:ba:45:35:
f2:fa:87:c6:1b:50:af:40:84:c4:f1:7b:90:9b:e6:
f4:95:44:ea:0c:34:36:b7:a2:bb:8e:b3:dd:72:e2:
95:25:01:7b:ea:3b:0a:f8:30:d7:97:00:f4:f9:be:
33:ce:d4:f9:ee:ca:9e:af:cd:0a:1e:a7:52:02:ac:
4e:aa:31:85:26:13:d9:3c:a2:8b:77:f9:0d:73:45:
df:b2:da:84:bc:d7:f7:dc:55:55:44:3f:49:30:fa:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A1:33:1E:76:28:D6:9D:7B:1E:76:84:D3:86:56:85:72:21:3F:15
X509v3 Authority Key Identifier:
keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:93:f9:a3:cf:92:0a:b0:91:c3:c6:7c:10:5d:ca:10:5f:04:
e5:1c:10:dd:b2:0e:04:f9:05:48:a4:4a:b6:db:8c:6f:17:23:
32:22:12:a4:c1:7f:3a:bd:f6:93:be:01:c2:c0:1e:fe:80:2c:
c2:7c:8a:92:6b:48:8b:02:96:e9:c3:7e:91:31:76:dd:ee:01:
05:4e:1b:9a:2a:d9:dd:37:22:b5:62:82:54:a2:2a:b8:2b:21:
ff:9a:d8:e8:5b:e8:37:78:fa:03:48:cf:5e:fa:8a:4f:37:92:
ec:16:d6:b1:ba:c9:22:a0:65:5e:ba:29:be:3e:2c:4b:d9:8c:
03:31:cc:d8:24:4c:a9:d7:a4:84:bb:5b:d2:84:af:95:53:29:
87:ed:04:67:0a:e0:01:83:0a:b2:ef:f5:f2:56:55:c3:0e:5e:
91:d5:1f:15:4e:f3:1f:2b:62:71:e4:62:fa:0b:01:35:bd:d4:
75:00:4b:05:b6:d0:a4:28:f9:71:01:ab:1e:9d:d8:66:69:da:
0f:a4:98:38:7e:af:8f:e6:ce:97:9d:bb:b5:77:8f:a4:22:91:
76:9a:66:12:11:25:a6:1e:41:97:5f:b8:35:91:99:0f:06:bf:
45:07:e0:5b:1a:c7:c2:80:ce:e8:27:64:87:c3:7b:ad:1b:3b:
f0:4b:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:08 2026 by rpki-client