
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
File: nLbmSsdFgpqjwVQHs-QCsgahrxk.mft (raw, json)
Hash identifier: 1FGRm2Ftt25kgpT0AVVSmUu6cD74+u/2mp5jzMiRjA8=
Subject key identifier: 00:4E:05:DD:AA:32:0C:47:0E:46:DD:E0:E8:EA:4E:FF:17:89:2D:65
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Certificate issuer: /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
Manifest number: 1D
Signing time: Sat 13 Jun 2026 08:58:12 +0000
Manifest this update: Sat 13 Jun 2026 08:58:12 +0000
Manifest next update: Sat 20 Jun 2026 08:58:12 +0000
Files and hashes: 1: nLbmSsdFgpqjwVQHs-QCsgahrxk.crl (hash: P1TdzzXkHDSs0N4DijyHXlNYlavvGNaD072u3MolS/U=)
2: 6B0AC84C3E1711F1A511DF78B0833773.roa (hash: TJJKG9BrNls63ox4QV7qWwE0OnJEumnAFR/LmFcDwfM=)
3: 6A7A4C9A3E1711F1A511DF78B0833773.roa (hash: HR3Bw4cs3A87KRfcRVJWreHgQBXYrEw5cctSabHCe08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Validity
Not Before: Jun 13 08:58:12 2026 GMT
Not After : Jun 20 08:58:12 2026 GMT
Subject: CN=6a2d1ba4-5544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:b1:47:50:be:31:95:c1:17:4e:11:44:1b:
f5:ea:0a:26:5a:4e:5d:16:fe:7f:9a:6a:2f:c2:7a:
08:ce:62:a3:ab:1a:63:ef:83:84:a9:bf:6c:1f:86:
26:71:d4:9c:21:a7:bf:dd:d8:4f:08:ef:37:d3:2e:
59:ab:a1:fd:b4:1a:75:9b:61:6d:a4:23:37:cd:aa:
df:05:0c:4e:ca:ab:ec:4d:83:a2:7a:d4:3a:30:de:
25:9c:a4:22:75:a8:dc:5a:78:be:4d:0f:a0:fd:63:
e8:4d:6d:7a:40:dc:c6:21:cb:c0:61:e4:06:43:a1:
c0:ea:d1:89:d8:99:fc:c5:a7:2d:d1:fc:3d:06:a6:
b4:a2:d8:9c:25:7b:0f:3f:a3:5b:52:d2:c7:ba:e6:
3d:51:6a:14:2f:f7:43:98:16:e0:40:83:6a:8b:5c:
dd:77:f4:87:4f:56:9a:1d:5d:f3:8b:ec:72:fe:76:
59:6c:6d:15:65:ae:64:a9:11:d2:57:89:1e:77:e4:
10:99:40:d2:f0:52:73:62:db:ad:80:ef:4f:71:25:
6f:c6:aa:01:73:58:59:4e:67:79:df:ad:14:d4:73:
8e:d7:d5:7c:39:c9:73:f4:3c:75:92:19:29:e0:8f:
5f:15:73:d8:3a:a0:91:ec:d5:07:00:db:da:0f:46:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4E:05:DD:AA:32:0C:47:0E:46:DD:E0:E8:EA:4E:FF:17:89:2D:65
X509v3 Authority Key Identifier:
keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:12:b7:9c:b1:17:77:f1:76:c5:83:4c:26:8b:0f:d0:79:e0:
19:bb:2a:16:1f:81:a6:c4:6e:c5:8f:3a:4e:a5:f3:98:e7:84:
68:65:60:14:e9:d0:d5:f0:9f:32:b7:c8:8b:b0:c5:3f:9f:8c:
cc:2a:a3:8b:66:ab:83:e7:84:69:ed:29:c8:55:fa:38:56:e6:
b2:f3:f6:94:2e:bb:c1:15:48:91:0f:dd:6c:86:21:fe:68:c1:
c0:da:83:10:63:78:46:dd:f4:c9:c8:f4:c4:72:fd:c4:b4:be:
38:59:35:1a:e3:32:c2:eb:8c:8a:bc:ec:a2:93:e7:4f:1d:f5:
f6:83:b4:b2:f3:43:36:da:30:dc:c4:95:ad:48:13:4e:a0:0e:
ab:92:f3:82:12:79:97:3a:1f:6f:2a:3b:eb:10:f0:34:01:7d:
97:bf:7b:3b:19:0c:5d:11:86:c4:a7:be:f9:85:7b:53:16:84:
28:3a:fe:e5:a5:57:0d:a7:2f:1a:2b:78:cb:a7:b2:a1:17:ba:
b1:04:59:d5:08:6d:39:e2:21:75:0d:9e:0c:c9:7c:79:0f:09:
45:3f:48:b1:46:bb:ad:ed:8b:f1:7d:99:8c:44:eb:50:02:b1:
1f:3c:c0:27:12:6d:54:6f:10:a6:82:b3:de:20:5b:6b:e2:b0:
72:57:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:35:51 2026 by rpki-client