
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
File: NtWtbhJs1bGOwUW8dy9JAPlMprw.mft (raw, json)
Hash identifier: revrhSOPN29QTVlGOFkU0m3EVkgo91ikr2qBSEdgRUY=
Subject key identifier: 6B:B3:B7:0C:E7:19:D1:07:9B:A8:59:A1:12:24:09:C1:FA:74:1E:78
Authority key identifier: 36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC
Certificate issuer: /CN=A91FD4E2/serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
Manifest number: 8F
Signing time: Mon 27 Jul 2026 09:38:19 +0000
Manifest this update: Mon 27 Jul 2026 09:38:19 +0000
Manifest next update: Mon 03 Aug 2026 09:38:19 +0000
Files and hashes: 1: NtWtbhJs1bGOwUW8dy9JAPlMprw.crl (hash: E7YWP3w8YKE40WBPmLcwQtz9UCR7jaL992Z3dNIbHgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl
rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4E2, serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC
Validity
Not Before: Jul 27 09:38:19 2026 GMT
Not After : Aug 3 09:38:19 2026 GMT
Subject: CN=6a67270b-8e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:f8:80:cb:4b:40:bb:97:ac:b0:0c:f5:ea:
df:0c:a4:2e:ba:da:a9:1b:4e:8b:39:0f:88:ec:cc:
92:5c:98:7d:6d:87:47:b0:29:f3:74:34:9d:11:da:
c6:5e:87:2f:53:6b:c2:bc:fc:db:06:dd:1a:44:84:
de:a8:65:09:e3:75:0b:40:77:f5:30:20:f6:24:f5:
d0:bd:fa:1b:3d:5e:cc:5f:7c:af:07:0e:f5:58:5a:
cb:02:e3:63:83:8d:de:f8:9b:02:9b:09:9d:62:69:
5e:8a:0c:84:1c:66:f2:ea:74:fe:dd:b0:ff:29:40:
21:a3:c4:e0:04:a8:52:89:0b:40:10:73:dd:31:1f:
25:c2:72:51:ab:20:f0:6e:87:5d:56:25:bb:8f:8f:
e3:ee:bb:72:08:0b:66:30:37:e7:b4:31:fd:b9:8f:
71:60:be:64:7c:39:6c:dc:9d:19:ac:d1:10:94:a3:
ba:3e:3a:a9:f0:50:a7:ab:12:42:58:ee:15:6d:a0:
f0:98:cc:42:cb:25:74:a5:f4:19:45:4a:8f:0a:56:
73:63:64:ac:4d:6b:74:55:a3:97:1f:33:1a:d4:6e:
c2:59:44:ae:c9:ce:d0:7c:a3:0d:20:f5:80:8c:62:
f7:4d:1b:71:26:27:e4:07:91:be:1a:df:27:e0:47:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B3:B7:0C:E7:19:D1:07:9B:A8:59:A1:12:24:09:C1:FA:74:1E:78
X509v3 Authority Key Identifier:
keyid:36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ce:51:01:da:bb:ff:7b:9f:dd:65:0a:4f:bf:c3:19:45:6f:
d2:af:70:06:09:67:78:e5:0f:e4:9f:fe:c2:73:6e:1f:bc:b1:
60:1c:d8:a9:67:48:ba:0c:9b:17:32:e5:2f:78:f7:87:ac:a1:
d9:84:8f:fa:e5:ee:51:29:cb:8c:0f:fb:2c:34:1f:98:20:b4:
c8:b4:7a:65:f7:a6:29:a9:14:d1:4a:f5:ad:1d:a8:c8:19:f3:
ca:dc:15:e7:55:c3:cf:09:d7:f0:1a:8a:4c:48:4a:cb:f5:ed:
69:aa:88:33:71:84:fb:eb:79:b8:f4:04:1b:3e:94:a1:da:e1:
03:bc:85:b6:1e:96:8c:da:bc:ea:f4:2e:25:c5:a4:34:ab:89:
e1:62:77:1e:77:58:6e:7a:82:84:a7:91:ca:8c:46:1b:8b:b5:
86:61:f5:05:cf:92:c6:ef:c0:9b:ec:87:77:25:5f:a2:1b:cf:
c2:8d:ca:f7:b0:86:5d:28:42:af:0a:c0:f1:27:b5:de:c5:42:
5a:2b:2b:81:1e:a4:00:8d:c2:6a:bb:68:10:3f:bf:a4:c4:cc:
42:a1:f6:7b:7d:55:5b:a3:2e:3d:f3:d4:68:ff:29:3a:a8:1c:
a7:87:47:eb:b9:61:97:66:40:06:6b:cf:54:d0:71:b4:eb:99:
38:ef:7f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:18 2026 by rpki-client