
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json)
Hash identifier: cG4MoLBxX3XIXYXghqGZIrwFBL2wtNHxNghsZeNdcg0=
Subject key identifier: C5:00:70:F9:2D:91:00:CE:2E:78:0A:BA:62:0F:E2:C4:42:B2:63:1F
Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
Manifest number: 0191
Signing time: Fri 17 Apr 2026 04:25:40 +0000
Manifest this update: Fri 17 Apr 2026 04:25:39 +0000
Manifest next update: Fri 24 Apr 2026 04:25:39 +0000
Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: gF6LWhIByz8B6l7/sy1gj/e8hhWlJWV2zPJtr0MH2uA=)
2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: vWSMncIbSdA4KIGZrugD99DnKmAynQ5wQcd5AMkh+3k=)
3: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: bKR+/9hF1Mbqq8jhYcz+VpME4jxBkcq5w4O21jzKfnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Validity
Not Before: Apr 17 04:25:39 2026 GMT
Not After : Apr 24 04:25:39 2026 GMT
Subject: CN=69e1b644-29fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:40:3c:3a:f9:28:46:9f:e2:db:74:7b:04:
74:be:a3:13:ad:71:5b:b1:7e:0e:31:42:e8:b8:52:
83:aa:60:4f:d8:a3:eb:b9:82:18:80:36:32:cc:ef:
25:3f:85:7f:6b:36:1b:a4:4d:04:2d:ee:0e:43:00:
3c:75:87:55:3b:b6:ea:a5:33:60:90:71:c6:e2:bb:
67:92:28:1e:61:33:d0:94:c8:33:98:5b:c4:e8:80:
42:57:38:bb:68:b6:3c:75:4c:ab:45:20:e8:b1:4a:
fa:13:ab:1f:87:9b:ca:8e:c5:b5:e6:1e:65:fc:3d:
ca:7f:8a:8b:8d:5a:02:f4:bd:cc:89:a5:08:87:ef:
1f:f2:66:8d:d8:13:3d:ee:7c:ed:a9:c2:68:36:26:
1b:3a:97:c1:f6:40:8e:65:be:64:81:4b:f2:34:09:
f6:09:f1:3c:02:e1:3a:7c:f1:8c:24:55:e5:b1:58:
83:74:d4:b7:27:0b:d7:3b:3a:4a:47:65:5a:19:07:
a5:15:a2:6a:18:60:08:07:c0:fc:5c:c2:60:14:19:
56:3b:62:7f:8f:1a:dd:f8:ca:a8:72:1d:5a:87:68:
83:1c:aa:a4:bb:f9:a4:47:b4:92:c7:2f:dd:11:cc:
7a:a1:18:73:1a:fd:c1:d0:36:a8:92:a5:28:fb:13:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:00:70:F9:2D:91:00:CE:2E:78:0A:BA:62:0F:E2:C4:42:B2:63:1F
X509v3 Authority Key Identifier:
keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:53:03:77:68:1b:a5:b6:44:cf:f1:17:c3:75:51:8a:77:7b:
40:54:4a:70:39:6a:d1:d3:f0:1f:13:00:ea:2b:dd:90:6e:8f:
70:ea:7d:7c:a6:e7:3b:b4:42:f9:4c:03:e8:03:da:21:69:22:
27:43:a5:16:bd:b1:ba:71:d2:11:0b:d6:b1:64:15:de:35:60:
c6:3f:78:1c:49:0e:e5:19:05:86:1c:a6:3f:bd:bf:ba:10:a2:
f6:87:5a:ea:7c:7f:c2:f4:e6:3d:fe:7b:8c:d9:44:9b:e0:1a:
11:fb:21:e4:02:f9:d5:7f:6f:ca:0e:44:5f:23:d8:02:32:4f:
00:8d:ad:4c:3a:db:b8:48:5c:da:4a:6a:bd:a2:cf:47:f9:36:
7b:ce:b4:ce:79:40:75:2e:2a:20:ca:15:a8:d3:69:0f:41:ef:
02:88:de:53:e2:46:4d:a8:33:94:0e:be:c7:5f:6d:c5:52:17:
9a:e9:b3:3a:04:cb:8c:98:e2:33:ff:c9:e2:32:58:a9:e2:fa:
c8:fa:c0:c6:ae:12:07:de:37:bb:15:a0:3a:71:f5:43:32:1e:
62:8c:74:b1:0b:d0:be:61:a9:24:5c:f6:4e:e5:8e:b8:63:b8:
b6:f8:46:41:a9:ee:11:e4:bc:83:ac:4c:0a:a5:9a:71:a7:28:
6c:e9:3a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:16 2026 by rpki-client