
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
File: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json)
Hash identifier: DPLuf3qzyI0hEJppFK1dDockuaKIeoCsuWdpY8XEdGs=
Subject key identifier: 1D:E1:7B:5E:C0:51:DE:05:83:A9:D3:82:BE:91:F1:EE:2A:16:DD:75
Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
Certificate issuer: /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
Manifest number: 43
Signing time: Mon 11 May 2026 08:36:15 +0000
Manifest this update: Mon 11 May 2026 08:36:14 +0000
Manifest next update: Mon 18 May 2026 08:36:14 +0000
Files and hashes: 1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: 42A65ha4DwO45m58UaMzfXc8Sm71ITnR0BNCNeLirUc=)
2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Validity
Not Before: May 11 08:36:14 2026 GMT
Not After : May 18 08:36:14 2026 GMT
Subject: CN=6a0194ff-6206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:04:08:fe:f9:c3:d6:b8:c9:a2:48:6d:51:
2f:9b:a4:6d:99:65:6d:72:29:65:65:43:d8:a7:52:
aa:7a:a5:a2:85:f7:3c:13:d8:a4:83:6d:16:c8:a0:
42:d9:83:3d:8d:c9:49:d7:f1:4f:64:eb:a2:82:d5:
81:c4:49:c1:96:18:05:dd:18:22:80:27:62:13:08:
f0:30:1e:b6:91:56:a9:57:79:51:0d:82:f1:0d:5b:
62:c8:14:53:31:6a:49:ed:6f:d2:db:78:14:50:ad:
69:3c:ca:fd:7e:40:c2:b4:9d:56:7b:eb:10:6e:3f:
66:91:23:de:c7:90:eb:1b:4a:80:ee:8b:b2:16:64:
05:7e:98:7c:43:85:69:65:94:a0:f9:30:30:f2:c8:
8a:95:ad:24:f6:2a:a7:b7:88:eb:98:58:88:50:a3:
eb:df:5f:00:17:f3:ca:61:98:1e:c5:cd:07:9c:24:
d1:43:58:72:e7:ca:62:9d:d5:c9:a1:bd:03:39:bb:
98:67:48:3a:71:5c:60:17:74:ab:6e:ea:24:a5:45:
3b:89:c6:26:74:e6:c1:b0:05:10:e6:8d:d9:dd:bf:
d3:d6:8c:e4:41:99:af:6c:09:3e:db:a5:4a:6f:e0:
b1:53:72:dc:14:a2:95:d1:83:65:9b:f7:a6:10:15:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E1:7B:5E:C0:51:DE:05:83:A9:D3:82:BE:91:F1:EE:2A:16:DD:75
X509v3 Authority Key Identifier:
keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:bd:1b:9e:38:94:e3:4f:15:b8:3f:53:ce:6a:2d:a6:0e:62:
be:0e:b6:ee:d3:8e:e6:08:64:d8:72:48:fd:5d:47:3c:39:9d:
93:51:4c:d5:0f:77:cf:e5:92:29:a6:da:4b:0e:df:9f:a8:22:
a6:c9:b7:a1:4c:32:d9:63:3a:37:3e:20:4f:c4:54:90:5b:b4:
a3:74:f6:f3:f9:07:11:7d:8f:3e:e3:b8:e4:c4:e2:95:c9:6c:
b2:c8:e3:c3:f2:50:92:9b:04:a6:56:27:1b:47:9d:9f:38:8f:
00:f0:f2:6e:dd:d8:8b:02:e8:84:d3:f1:f5:0a:39:1e:be:4e:
c2:04:c0:28:35:d2:f8:c4:6f:46:ff:75:16:7f:03:06:f4:21:
5c:56:ba:66:6a:1f:91:00:2d:84:c5:71:66:50:23:fe:44:fc:
fb:ef:5f:7d:45:cc:09:13:29:eb:b1:33:41:c2:55:06:51:47:
6b:5b:ff:48:43:0e:d5:48:06:30:66:ae:71:39:9e:30:a1:67:
15:2f:11:44:60:e3:92:1c:a0:9d:92:9a:97:44:bd:3b:0e:ce:
9b:07:2b:d8:db:3b:94:47:0d:55:25:43:69:7f:42:90:3a:1c:
42:59:72:a7:b4:79:f4:9f:ae:3d:93:7a:8b:4d:74:f9:99:85:
02:7c:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:24 2026 by rpki-client