
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
File: nLbmSsdFgpqjwVQHs-QCsgahrxk.mft (raw, json)
Hash identifier: 3FYfUYzoirrbPOJeCjYzCHlyEX7Ho3qmZeLKOsXmrJs=
Subject key identifier: 26:67:D8:B3:92:5F:97:A6:DC:DC:69:61:E1:1B:83:B4:B2:55:42:4F
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Certificate issuer: /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
Manifest number: 5B
Signing time: Sun 11 Oct 2026 08:46:48 +0000
Manifest this update: Sun 11 Oct 2026 08:46:47 +0000
Manifest next update: Sun 18 Oct 2026 08:46:47 +0000
Files and hashes: 1: nLbmSsdFgpqjwVQHs-QCsgahrxk.crl (hash: Qce8gOs+xN0pW+AcRIX1JeSNwm8MW8gBXn84fsLWwYg=)
2: 6B0AC84C3E1711F1A511DF78B0833773.roa (hash: V9OAtWmcfm4Nuv1e1Q4YP0cUaxGAb0f/aKkaOZRJSDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Validity
Not Before: Oct 11 08:46:47 2026 GMT
Not After : Oct 18 08:46:47 2026 GMT
Subject: CN=6acb4cf8-b1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:76:47:53:f1:25:70:42:83:2e:11:32:4c:
ce:c5:3e:8c:6f:7b:dc:45:3e:b9:d3:50:51:8e:09:
57:16:a6:14:50:1e:c5:ac:c3:f2:35:21:bc:18:fc:
cb:6b:ae:77:ae:9a:b1:d1:e7:19:a1:28:7a:81:57:
bd:95:a9:66:25:3b:9e:3e:e4:63:be:d6:96:07:49:
33:f3:b3:ae:b0:17:85:56:51:55:24:5b:a3:e7:74:
d2:03:35:5f:2f:eb:b3:32:85:e4:14:5d:b5:34:5c:
b0:3e:75:3c:18:ca:7c:bd:98:37:93:b2:7b:ea:51:
aa:cd:0e:86:55:e8:d0:f0:15:06:05:71:0a:9e:00:
62:93:97:ec:90:07:74:bf:c6:1f:3a:21:15:b6:56:
c8:2d:f1:5a:ca:f1:d1:fc:3e:42:fa:b7:80:8a:05:
ae:b2:08:03:20:d8:19:ee:d0:15:54:38:62:be:3e:
6a:38:f3:99:a3:af:aa:55:60:b8:fc:bc:8a:8d:23:
ff:af:dd:cb:02:3a:0f:e8:2f:0e:fa:d8:a5:4d:10:
d0:12:69:54:63:01:c5:ff:b9:b7:1d:a3:60:26:80:
20:e3:c9:a2:aa:5f:02:ef:1c:9e:fe:11:72:92:e2:
40:e6:58:23:94:d2:3a:af:6c:a2:d0:90:c1:c7:13:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:67:D8:B3:92:5F:97:A6:DC:DC:69:61:E1:1B:83:B4:B2:55:42:4F
X509v3 Authority Key Identifier:
keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ff:06:50:d6:d0:ee:53:bc:e7:b6:3a:b0:95:23:d1:3a:68:
03:e2:64:ad:98:d7:e3:5f:81:7a:d8:a3:d0:ef:71:af:92:d3:
08:94:38:f5:fa:d5:3b:c8:e1:ac:57:87:22:d2:20:00:9a:25:
41:ad:ff:d6:ae:5c:63:bb:9c:62:a3:95:e7:11:72:ed:dd:30:
a7:73:0d:da:53:85:7b:20:30:4a:c0:fc:32:ee:35:24:ae:7b:
26:b3:2a:79:7b:12:43:39:02:e3:04:28:e5:b8:e1:bd:80:1a:
51:11:4e:b0:f5:a0:45:60:fc:41:0a:68:18:0c:f3:c8:94:98:
13:bd:6e:88:d8:34:a1:c2:2d:27:9f:40:3e:b5:fc:f6:87:41:
be:55:a6:e1:44:af:91:af:33:87:f2:0a:e6:b9:6b:c1:b2:b2:
f4:1a:94:eb:4f:6f:f1:73:4f:16:a4:fb:46:71:fc:36:a9:17:
f2:34:d3:75:4d:c9:b8:82:d7:34:5c:7b:c8:b4:9f:97:84:0e:
5d:50:89:6d:2c:68:1e:e4:9f:7a:e8:c2:32:0c:84:b8:06:1d:
a5:fb:f0:88:18:a5:29:c9:2f:37:98:da:e6:9e:58:dd:e4:26:
c7:27:ab:07:c5:aa:be:2b:3a:dd:81:72:d0:84:b9:dc:33:19:
d1:03:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:24:37 2026 by rpki-client