
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json)
Hash identifier: 0EUfBh1CT5WYYGUuPDoCPL0cT+qS1sj/wbGpCDt4PjQ=
Subject key identifier: 62:91:A6:13:5B:3C:B7:B4:DF:CA:29:70:06:37:B6:81:36:C7:24:0F
Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
Manifest number: 01CD
Signing time: Mon 27 Jul 2026 05:53:17 +0000
Manifest this update: Mon 27 Jul 2026 05:53:16 +0000
Manifest next update: Mon 03 Aug 2026 05:53:16 +0000
Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: 2vQr4A3WL2aIZ3quan8XERD7h9nYeKGQRrOO4nzuZuU=)
2: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: N7d2kdSjz/jwSyQEPzpDvWGJTq/1G0TljCkUhHZagrM=)
3: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: xIsuTyZo/KDFH/r02ABu8dMxSJNQpktymxgmNjrBNLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Validity
Not Before: Jul 27 05:53:16 2026 GMT
Not After : Aug 3 05:53:16 2026 GMT
Subject: CN=6a66f24d-d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:71:d7:f9:b9:59:aa:c1:86:0f:ab:c7:3a:
e5:23:ae:a2:f2:ff:a9:88:c5:64:8c:55:23:1d:6e:
05:8e:79:b2:41:70:7c:1c:9d:0d:36:a2:12:29:fb:
98:ab:fd:fa:55:23:9c:98:ef:55:9e:08:06:c5:8a:
3e:30:d6:da:3f:2c:ac:d7:6b:20:3d:3a:70:b3:23:
0b:c1:d2:3d:fe:48:0c:c4:b4:2a:21:11:99:97:97:
45:8c:90:e0:54:69:98:94:54:87:a1:9b:42:35:c5:
43:ea:46:ca:a5:31:da:b1:5f:0e:c5:12:d4:b8:fc:
70:f8:21:21:40:fb:eb:39:58:d8:c2:35:86:e4:74:
9b:70:03:e7:ad:2e:bd:91:c0:2d:c9:12:95:a9:b6:
cf:64:78:b2:29:e3:81:0e:65:e0:48:a6:8b:dd:fb:
1c:27:39:0b:40:50:e6:06:dd:9b:36:ab:26:db:18:
9d:cb:88:09:ae:45:5a:24:15:bd:70:54:57:50:de:
fa:70:07:18:5a:db:02:bf:9d:6f:41:45:e9:45:49:
35:f1:fe:dd:b9:32:bc:8d:6f:3a:af:fb:1c:c7:11:
2d:0e:b5:1d:cd:e0:fd:3c:a0:db:6b:ec:8b:9d:53:
7a:a5:25:a4:f1:9c:11:75:be:25:bf:c8:b7:19:65:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:91:A6:13:5B:3C:B7:B4:DF:CA:29:70:06:37:B6:81:36:C7:24:0F
X509v3 Authority Key Identifier:
keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fc:2c:99:4b:cc:cb:98:0d:2a:f0:76:6c:ba:3c:c2:1f:2f:
1b:ad:eb:38:4e:1f:4e:a7:f8:e1:52:2c:b1:86:e1:77:5d:ee:
6f:9c:2d:13:e3:dd:4f:ba:33:21:63:b0:bb:8d:00:bb:6a:75:
7d:23:b9:44:8e:3f:c0:e8:0b:68:e2:b1:3e:22:4b:1a:59:3d:
2c:c9:5e:8c:77:18:07:6e:ef:de:aa:33:51:ee:58:8b:fb:9a:
47:d1:b8:a7:b1:32:70:e4:95:c9:b9:57:60:b7:72:cb:db:bf:
b1:14:19:93:03:a6:9a:3b:b1:d9:f7:0c:e5:55:b6:39:79:af:
ea:3b:be:4a:34:7f:f1:bb:44:81:4f:15:83:0e:68:56:59:27:
39:9d:29:36:31:48:0e:23:e3:28:f6:98:b7:59:36:b5:99:9d:
3f:8f:a2:13:cb:f1:22:9c:54:54:cc:60:b1:f7:3b:3d:39:2c:
9a:10:f2:6d:2b:00:a2:46:60:98:c1:98:77:0a:0c:16:8a:28:
24:38:e1:e2:21:d5:93:bd:df:7c:67:68:83:fc:47:4b:9c:16:
fd:d7:85:90:e9:6f:83:6c:a1:29:82:e7:01:e1:c6:e7:fc:a6:
a5:79:f0:9c:3a:26:f1:a6:95:c9:be:d1:57:82:c0:5b:d9:76:
ed:8a:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:12:28 2026 by rpki-client