
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json)
Hash identifier: v8i1uGEwSvsP5IEh06D8z3hQ558htY5rhak1ZtqVigw=
Subject key identifier: 94:81:8C:07:A2:1A:BC:CC:61:34:32:BD:48:5B:CD:FE:C4:CB:66:B8
Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Certificate serial: 355D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
Manifest number: 355D
Signing time: Tue 28 Jul 2026 15:03:34 +0000
Manifest this update: Tue 28 Jul 2026 15:03:33 +0000
Manifest next update: Tue 04 Aug 2026 15:03:33 +0000
Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: rvUfcNdwRvW7SwNPyvM/PnBB/kB5svsMC43syTJMrFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13661 (0x355d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Validity
Not Before: Jul 28 15:03:33 2026 GMT
Not After : Aug 4 15:03:33 2026 GMT
Subject: CN=6a68c4c6-b82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:54:99:fd:82:b4:20:1b:c1:1c:3d:bf:a9:
00:70:48:be:e1:33:60:d1:d9:e7:9b:ef:eb:e0:c1:
59:73:36:ca:b6:59:a4:41:00:1e:1b:0e:c7:cd:65:
07:b1:43:a1:75:a0:1d:25:64:3f:da:68:f7:09:bc:
0e:48:25:11:cf:48:cb:d1:5f:fd:bc:09:8b:a7:e9:
4d:18:23:48:5c:c3:f3:31:7f:20:14:81:9f:97:87:
0c:7b:6b:b8:70:b5:62:1e:b0:b6:bc:22:5e:31:04:
04:45:6e:e5:c9:91:2c:97:88:6b:d9:b5:ee:bd:54:
85:9f:e3:01:51:d9:a0:dc:15:21:50:55:c2:de:00:
89:d7:e6:39:50:c6:3a:a1:7d:db:c2:a6:19:d1:f3:
50:ea:ad:24:3e:ca:37:d8:2e:c1:a6:b0:21:8b:b6:
f9:82:86:8d:4e:c2:e9:0c:1d:25:bd:52:dd:78:68:
86:a6:bb:33:72:06:c9:ea:29:fd:04:ee:96:74:a2:
70:c5:9a:f1:00:30:72:9b:f2:84:03:db:20:c1:09:
87:93:40:55:c1:60:f9:0f:21:e4:b9:75:4c:3b:fc:
72:f3:a3:f6:52:c5:4e:b4:9f:34:36:5a:09:1b:26:
95:fe:55:0b:22:e5:20:49:67:8d:be:b2:5a:3a:8b:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:8C:07:A2:1A:BC:CC:61:34:32:BD:48:5B:CD:FE:C4:CB:66:B8
X509v3 Authority Key Identifier:
keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:d9:4a:2a:b2:25:d8:86:5a:de:cd:f3:68:c4:89:2a:8a:6d:
82:9a:f5:83:ae:80:bc:e4:b2:62:69:3a:12:77:53:f2:20:2d:
78:38:68:89:e1:4c:bf:36:fe:75:08:85:06:7d:cb:91:87:f9:
8a:90:57:34:c3:1e:e9:04:62:7d:b5:42:9b:17:58:70:91:67:
0e:27:d9:1a:27:45:cd:5c:9d:61:14:4d:6f:88:98:35:99:c0:
76:47:05:86:db:75:38:20:73:b3:27:a8:20:50:f1:ba:6a:5f:
70:d7:67:94:a5:82:b9:25:95:af:fc:51:d0:d6:b0:20:be:7c:
d5:26:b3:60:26:ae:1a:46:82:5f:a7:99:cb:55:12:27:94:a8:
42:40:71:86:cc:c3:3c:5f:68:db:62:7a:27:16:51:0a:b2:6f:
51:14:11:a7:39:5e:db:4c:26:0f:2b:b1:67:a7:c8:3c:28:81:
08:0d:0b:e0:ad:27:ea:45:76:35:2d:11:58:aa:24:d5:4f:89:
dc:0f:0e:67:ff:91:72:59:c3:25:f6:14:42:0e:be:92:50:57:
dc:2d:b9:c6:30:02:aa:e1:ee:50:11:e6:73:2a:87:b3:ed:1f:
c4:f9:3f:b5:12:06:1c:50:f4:8c:2e:37:3f:67:65:52:fa:d0:
bf:88:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:04:46 2026 by rpki-client