
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
File: nLbmSsdFgpqjwVQHs-QCsgahrxk.mft (raw, json)
Hash identifier: 5Vc4Mes10qDXUsIA+CHguaaPGnCB9H4KoQgt1rOOzG0=
Subject key identifier: 14:9D:FB:08:5F:8E:CD:A6:84:7E:8C:CB:D8:9A:CC:D7:2C:FC:E6:A8
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Certificate issuer: /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
Manifest number: 32
Signing time: Mon 27 Jul 2026 10:59:13 +0000
Manifest this update: Mon 27 Jul 2026 10:59:12 +0000
Manifest next update: Mon 03 Aug 2026 10:59:12 +0000
Files and hashes: 1: nLbmSsdFgpqjwVQHs-QCsgahrxk.crl (hash: 2hVZIVdlSibmi2s0DXQQrdslNvGNsqTurLiUrbfsuq4=)
2: 6B0AC84C3E1711F1A511DF78B0833773.roa (hash: TJJKG9BrNls63ox4QV7qWwE0OnJEumnAFR/LmFcDwfM=)
3: 6A7A4C9A3E1711F1A511DF78B0833773.roa (hash: HR3Bw4cs3A87KRfcRVJWreHgQBXYrEw5cctSabHCe08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Validity
Not Before: Jul 27 10:59:12 2026 GMT
Not After : Aug 3 10:59:12 2026 GMT
Subject: CN=6a673a01-da25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:4b:1f:e1:29:cd:13:3d:73:11:3b:56:09:
ef:0e:32:0f:27:62:11:58:a2:1b:59:55:02:b4:80:
28:9e:dc:53:37:a3:da:1e:7b:de:24:c4:54:0d:9c:
d2:c0:2a:1d:f4:36:91:86:23:63:c5:42:47:1b:31:
da:09:1f:c2:17:14:61:e9:6a:32:5e:e0:4f:3c:d1:
6d:a8:8d:32:a2:09:f6:1a:f6:ea:44:a7:2f:16:c3:
85:a9:a4:8d:77:ae:e8:ec:3e:7a:32:71:39:d2:84:
0d:db:18:17:ee:c8:56:37:b3:22:a0:36:fe:c4:b9:
17:c2:c8:02:8c:de:bd:da:11:b9:b4:7f:39:5d:04:
b6:9b:d5:01:86:e6:6e:11:dd:dc:cb:e4:a4:33:f9:
7e:92:3a:9a:60:86:b2:0c:ad:ce:06:ed:02:bb:26:
a7:38:a4:1f:a9:65:df:48:b4:73:be:15:f9:f5:3c:
26:f4:5b:c7:87:47:47:ab:f7:7a:35:cd:07:37:78:
65:61:64:06:5f:60:a7:05:21:c5:6c:de:d5:1e:35:
b0:55:b8:15:a9:90:2b:dd:43:e6:09:04:fb:3a:fd:
66:15:7b:de:c5:60:45:82:b3:bf:c1:c3:95:2e:34:
4e:e1:28:96:b6:68:b4:05:41:05:65:dc:17:76:ff:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9D:FB:08:5F:8E:CD:A6:84:7E:8C:CB:D8:9A:CC:D7:2C:FC:E6:A8
X509v3 Authority Key Identifier:
keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:63:55:1e:da:92:01:aa:f2:b5:29:46:b6:8f:1c:4b:67:1f:
74:75:98:ff:b8:6a:07:70:cc:54:37:5e:b2:cd:8d:a3:dd:f2:
d5:b0:65:05:96:bb:9c:af:9d:ae:59:b2:7e:63:6c:0e:3c:a4:
bf:dd:af:5b:b9:2b:c4:67:76:20:c3:fd:c2:b4:2e:f0:e4:a5:
0f:75:0c:f2:e5:ca:b3:e2:4d:21:9a:d0:7d:d2:9b:2d:ab:a1:
44:f6:ad:7c:ec:78:fa:35:8c:a2:d3:9a:fb:5d:69:ff:94:2e:
4c:ea:f8:ce:f7:26:34:4c:35:01:ea:43:89:a3:c2:c2:7d:c7:
bf:60:08:56:da:71:a2:8c:9b:8e:75:a2:c0:1d:c3:e5:70:16:
1f:f5:48:f0:f6:54:fa:ef:66:70:7e:a1:b0:73:21:9b:2a:b5:
7c:6f:c7:34:ce:4d:9b:44:a1:12:db:cf:e8:75:e3:1a:12:b5:
5a:c8:60:e1:b7:52:2d:f4:46:82:4e:e4:5d:a5:10:5e:c0:e6:
b1:25:ae:b0:62:89:81:8a:c2:ce:2e:61:cf:f2:70:32:e8:0a:
88:02:b6:70:da:31:f0:d1:f0:8d:3a:16:18:9e:00:0d:a4:75:
63:3a:1b:d9:97:50:f0:72:07:f5:6d:70:2c:28:ed:04:55:c5:
3b:19:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:43:50 2026 by rpki-client