
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json)
Hash identifier: JeC23nCgR/YQUOtVzgsY/yBnWZtfZgwCPrTWK7FZ6Ac=
Subject key identifier: 4D:09:0B:08:F9:AA:E5:95:A7:6A:21:61:DC:4A:E9:41:4A:7D:1A:B4
Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Certificate serial: 0454
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
Manifest number: 044C
Signing time: Thu 05 Nov 2026 00:27:29 +0000
Manifest this update: Thu 05 Nov 2026 00:27:29 +0000
Manifest next update: Thu 12 Nov 2026 00:27:29 +0000
Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: xzKjxpBzVxjbsxyPy/9W7e3mv2OA5ZCD/cA4565QfS4=)
2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: OhAzKBerxXTp038deHSgx6f20NkMAUKF1iAsoKTjbdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 00:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1108 (0x454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Validity
Not Before: Nov 5 00:27:29 2026 GMT
Not After : Nov 12 00:27:29 2026 GMT
Subject: CN=6aebcd71-23e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:bd:4c:bb:1e:65:61:8b:f0:99:0c:3b:af:
13:5d:07:ee:21:a0:38:42:4c:30:e9:99:15:0a:f9:
81:2f:0d:d0:70:dd:fc:14:ae:ea:94:4b:b4:05:7e:
d6:38:f8:cd:95:ae:5f:3c:e1:ce:17:1b:54:c9:71:
c6:5d:69:ff:d8:b2:0f:4b:eb:43:86:26:5c:ba:b9:
c2:d4:ee:8c:d0:9e:37:0e:a8:d6:7b:56:75:b3:4c:
4f:85:75:71:65:0d:9b:9e:c3:a8:9d:cf:34:b8:11:
0e:8f:67:e3:10:e4:07:de:9b:61:59:e7:01:18:c3:
ff:8a:7e:c2:0c:1e:2a:f4:22:e9:bc:ad:55:b4:b7:
54:fc:0a:3a:2d:3a:3e:1b:02:78:6c:fb:c6:da:e0:
a8:74:02:d9:c4:77:83:aa:00:68:3e:ff:55:cf:0e:
30:05:59:33:65:73:fa:61:b3:09:d8:11:b7:ce:5d:
01:44:26:81:e5:88:80:19:34:80:85:8a:46:3d:4d:
20:f5:01:86:59:52:79:7c:70:8c:ec:30:6a:8b:89:
41:fc:8a:6c:d2:a7:4e:45:61:c9:0f:37:f1:66:ae:
03:a2:32:d3:10:87:a6:68:5c:ac:f7:98:f4:1c:9e:
44:fe:21:a3:8c:e4:a2:65:70:d9:05:16:31:c1:8b:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:0B:08:F9:AA:E5:95:A7:6A:21:61:DC:4A:E9:41:4A:7D:1A:B4
X509v3 Authority Key Identifier:
keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fa:ca:f2:cf:6b:6d:a7:d7:bf:d3:3f:e5:38:0a:99:0d:bd:
33:81:6f:a3:83:36:2e:23:78:2a:87:44:ab:ef:f6:4b:7f:91:
25:c2:9c:8a:4d:5f:57:8a:55:45:84:d7:37:cf:db:aa:c3:8a:
49:4a:ec:2b:8c:af:53:84:f8:2e:87:35:c2:c6:40:70:c0:b1:
b6:a1:fe:c3:88:b8:4a:f6:51:34:ea:35:32:ae:6e:88:b0:98:
61:75:af:24:9b:f9:5b:bf:dd:ad:e8:e0:2e:0e:a4:9a:20:9c:
b8:7a:bb:15:e3:fe:5a:6e:c3:77:d1:61:6c:4d:e3:1a:74:4f:
37:68:32:42:09:b1:a6:56:e5:d6:61:73:9c:55:f5:7c:09:b6:
c7:a7:51:f3:2b:29:4c:e7:df:15:f2:47:11:7b:1d:c8:25:8f:
74:7d:79:21:f6:c3:77:2c:58:15:37:97:b4:42:a9:f3:91:c4:
0a:63:2d:db:36:7c:6c:27:2a:6e:9f:d9:bf:b8:c8:e9:a1:3e:
7b:f8:0b:e9:3a:6f:5d:55:ef:58:f0:1c:46:d0:be:47:b1:9f:
89:7f:58:ae:35:64:a3:8a:e9:18:e1:39:ac:58:b5:15:87:d0:
ee:5b:a7:18:f3:9f:36:01:50:57:9d:73:2d:37:88:48:b7:a9:
30:b2:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:51:18 2026 by rpki-client