
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json)
Hash identifier: 7wGJR8iVjAyoQLrCUfacRtKTW0G7tK/ojlRVWWrtzmo=
Subject key identifier: A5:BD:7E:DA:82:AC:02:12:72:2A:EA:AA:04:32:13:40:3B:B1:DC:B7
Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Certificate serial: 3510
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
Manifest number: 3510
Signing time: Sat 28 Feb 2026 15:01:37 +0000
Manifest this update: Sat 28 Feb 2026 15:01:36 +0000
Manifest next update: Sat 07 Mar 2026 15:01:36 +0000
Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: 7uDZf7+VI1WPT8iJyW9W/LJPwv6D6ktC22MBx+5wVGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13584 (0x3510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966
Validity
Not Before: Feb 28 15:01:36 2026 GMT
Not After : Mar 7 15:01:36 2026 GMT
Subject: CN=69a30350-8d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:b5:5b:81:d8:30:4d:eb:64:a9:82:dc:ac:
ae:61:50:bf:0e:d8:00:06:f7:b6:81:50:36:05:db:
8a:9d:bf:7e:90:02:44:80:6b:a7:4f:ec:79:35:8a:
ca:1d:95:25:c3:44:a2:aa:75:86:a3:ad:26:4a:d6:
ea:b4:a1:59:4d:9d:4d:cc:bd:be:12:63:e6:7f:c0:
fd:76:76:f9:37:c2:42:47:88:0b:54:07:1e:0c:a3:
b1:fc:3d:51:f3:4a:9a:e1:af:03:d0:42:0a:d2:22:
ff:3b:67:4f:ea:58:f8:c6:a0:2c:ad:14:c7:88:bc:
52:0c:66:2c:24:e9:f1:7b:a5:62:a5:26:5f:1b:b8:
63:a1:ee:a8:06:8a:50:50:a9:39:b3:30:57:44:a7:
9c:2e:f5:ef:e8:34:e2:17:69:98:55:76:09:c4:69:
e8:f3:32:1d:4d:c8:9a:c5:3c:ec:d9:f3:c4:8a:c9:
89:17:57:cf:ed:b0:db:19:d2:01:32:27:8c:44:19:
5d:ad:bf:0a:68:96:8b:e8:04:c1:72:63:56:66:77:
a7:e4:84:0f:98:06:90:6a:04:6e:bf:b7:c8:21:ca:
b9:2c:0f:f8:5a:a4:ad:a4:0e:64:ee:fc:ce:ab:51:
78:6f:b3:69:09:5f:eb:73:1b:35:53:5e:a3:46:ac:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BD:7E:DA:82:AC:02:12:72:2A:EA:AA:04:32:13:40:3B:B1:DC:B7
X509v3 Authority Key Identifier:
keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:aa:42:90:f6:8c:e7:6d:38:04:75:50:d8:37:53:50:99:60:
2f:04:5c:eb:38:0d:5f:e4:80:6c:cc:7c:0b:81:59:5b:77:1e:
4d:53:d2:41:2c:80:c1:72:55:cd:97:d1:13:da:9f:1d:ad:a7:
6b:74:bb:4e:ba:77:70:c7:85:08:4f:60:2c:d0:a2:19:d0:4c:
20:7e:bd:92:53:78:0f:47:14:57:08:e0:5e:6b:eb:96:83:d3:
3e:5a:5e:9f:0a:6b:28:9a:37:55:ec:09:46:57:5e:bf:bf:7a:
96:48:de:3f:f0:92:be:7f:d5:2b:a4:e3:59:ef:42:1b:42:39:
1a:bf:df:15:64:7f:a4:67:4e:8d:2c:69:a9:58:d0:f4:8a:f0:
53:81:bf:44:26:0a:89:a3:a9:54:f4:82:51:7b:d7:49:d1:46:
89:d7:e4:07:83:35:da:f0:c1:33:25:6e:e3:8a:fe:ea:45:5e:
21:db:99:c5:a0:f2:a4:04:60:37:80:13:c8:39:82:9c:d7:19:
65:89:ac:16:af:ef:a4:7c:05:ce:bb:2a:d7:99:7a:bc:db:3e:
e0:22:64:1d:56:1b:6c:18:d4:45:57:49:7c:28:13:36:3c:d1:
a0:50:02:10:58:4a:90:4b:1d:5f:b2:6f:e7:3f:c3:18:21:36:
9c:49:6e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:47 2026 by rpki-client