
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json)
Hash identifier: diWcucbn0Y8Vyr37Wlbkt3kyuSZ/glWhBQ3BmV1F0GQ=
Subject key identifier: C9:FF:67:84:B9:2A:BD:0E:90:86:AA:11:92:6E:61:69:EC:FF:A5:F4
Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1
Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
Manifest number: 01C5
Signing time: Sun 19 Apr 2026 03:30:41 +0000
Manifest this update: Sun 19 Apr 2026 03:30:40 +0000
Manifest next update: Sun 26 Apr 2026 03:30:40 +0000
Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: bQFnsGTUcPAfaXREa/dsnpGjzUqlF6o+eFYkpNbqukg=)
2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: yviocZTIT/QN9ZH5Z7jImoFYZZ1ZtuGiFiBRlnTY9io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl
rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 03:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
Validity
Not Before: Apr 19 03:30:40 2026 GMT
Not After : Apr 26 03:30:40 2026 GMT
Subject: CN=69e44c61-f9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:aa:fe:d9:29:05:de:16:c6:3d:fb:a0:5b:
d4:e9:51:ff:37:4e:0e:70:7f:64:0b:95:c0:53:77:
85:09:6c:ab:a8:eb:07:c9:d0:5e:eb:f4:a7:37:12:
03:ca:af:64:06:86:72:c0:bc:0f:cc:1e:bb:a8:8f:
d5:18:fb:a4:17:bb:57:67:ec:c8:85:e3:ba:0e:8a:
ee:60:9c:de:7d:1f:67:da:4b:79:80:da:7c:87:70:
d2:1f:bf:69:c6:92:c0:9b:01:b6:bf:90:e8:13:23:
33:58:f2:37:96:50:b7:15:d6:ff:b7:60:40:87:2e:
66:4c:64:45:34:63:fb:d8:f8:70:ec:d0:36:84:e9:
0b:e2:eb:54:62:2b:b0:74:00:fa:9b:65:ff:9a:67:
6a:a1:0a:e6:1b:96:1e:26:18:fa:1e:ec:18:45:e6:
5c:b9:de:ea:8f:c9:5d:40:5d:1d:11:6c:fc:62:6f:
66:02:4e:f3:da:a7:6f:65:de:a9:f8:5a:e1:c1:c7:
01:84:25:f6:3e:50:d0:cd:b9:f9:98:9a:f0:14:d8:
c8:a5:5b:c1:b8:84:cb:6b:cd:3f:77:97:c9:59:57:
1c:b8:07:79:34:4f:a2:91:51:ea:87:3a:48:59:1e:
99:b1:e5:a6:26:ec:9c:1c:0c:af:6e:be:c1:1c:1b:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:67:84:B9:2A:BD:0E:90:86:AA:11:92:6E:61:69:EC:FF:A5:F4
X509v3 Authority Key Identifier:
keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:79:b7:af:2e:81:09:33:b9:34:5b:a6:e1:11:7c:6a:d7:9d:
3b:25:bb:2e:3c:b3:63:e0:73:8e:35:40:ea:31:83:0f:5a:c7:
f7:31:67:da:7e:3f:3a:e5:d6:7a:c4:ba:2e:9c:42:c1:b9:b1:
4e:5a:fe:8c:a6:31:a5:7e:64:4f:b6:64:44:dd:56:c9:66:1e:
4a:b3:b6:b6:82:d8:cf:bf:c9:93:17:9f:d6:cf:0e:3d:8a:1b:
51:0a:58:57:bd:8e:f7:61:2e:7b:fd:dc:0d:77:be:69:24:f5:
b1:4c:fc:8e:1f:a0:f2:d7:e7:b0:f4:ee:44:ee:8a:9e:c0:6d:
9c:da:ed:8f:c2:1b:d8:d0:1d:65:0a:ca:9b:a0:74:8a:50:f2:
ec:16:80:95:07:a4:11:76:5f:a0:2d:c9:76:c4:bf:7f:75:14:
c3:65:2e:71:44:81:bf:2d:c5:17:69:c3:71:54:b0:c2:8b:34:
d1:d2:c4:8e:47:9c:cc:73:9c:c1:ba:f4:e8:e0:06:a8:fb:d1:
d4:06:17:3a:ee:d8:5c:a4:ce:34:19:c4:91:ba:4e:c6:c0:5b:
e5:a2:6e:06:72:80:5b:37:42:99:9b:fe:dc:44:e8:e5:62:69:
ad:f4:b7:d2:63:96:5c:35:5a:af:c3:01:20:63:3b:bb:06:b8:
93:61:78:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI4QzgxMTAvBgNVBAUTKDM2OUIzRTlCN0I2NkU4RjVCQjk3OUE2RTJGMkU3QUFD
RjUwMEQzRjEwHhcNMjYwNDE5MDMzMDQwWhcNMjYwNDI2MDMzMDQwWjAYMRYwFAYD
VQQDEw02OWU0NGM2MS1mOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzm6q/tkpBd4Wxj37oFvU6VH/N04OcH9kC5XAU3eFCWyrqOsHydBe6/SnNxID
yq9kBoZywLwPzB67qI/VGPukF7tXZ+zIheO6DoruYJzefR9n2kt5gNp8h3DSH79p
xpLAmwG2v5DoEyMzWPI3llC3Fdb/t2BAhy5mTGRFNGP72Phw7NA2hOkL4utUYiuw
dAD6m2X/mmdqoQrmG5YeJhj6HuwYReZcud7qj8ldQF0dEWz8Ym9mAk7z2qdvZd6p
+FrhwccBhCX2PlDQzbn5mJrwFNjIpVvBuITLa80/d5fJWVccuAd5NE+ikVHqhzpI
WR6ZseWmJuycHAyvbr7BHBshwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMn/Z4S5
Kr0OkIaqEZJuYWns/6X0MB8GA1UdIwQYMBaAFDabPpt7Zuj1u5eabi8ueqz1ANPx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOC9DNDRDMDQ1MjhF
QzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQVzdsNXB1THk1NnJQVUEw
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjhDOC9DNDRDMDQ1MjhFQzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQ
VzdsNXB1THk1NnJQVUEwX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjXm3ry6BCTO5NFum4RF8atedOyW7LjyzY+BzjjVA6jGDD1rH9zFn2n4/OuXW
esS6LpxCwbmxTlr+jKYxpX5kT7ZkRN1WyWYeSrO2toLYz7/Jkxef1s8OPYobUQpY
V72O92Eue/3cDXe+aST1sUz8jh+g8tfnsPTuRO6KnsBtnNrtj8Ib2NAdZQrKm6B0
ilDy7BaAlQekEXZfoC3JdsS/f3UUw2UucUSBvy3FF2nDcVSwwos00dLEjkeczHOc
wbr06OAGqPvR1AYXOu7YXKTONBnEkbpOxsBb5aJuBnKAWzdCmZv+3ETo5WJprfS3
0mOWXDVar8MBIGM7uwa4k2F4ZA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:07 2026 by rpki-client