
$ rpki-client -vvf rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft
File: nqxU6fn1nmg49IRgQhBWMwZtII4.mft (raw, json)
Hash identifier: dOjEtz1KMLFT84dQbKQx0DEKLsmsRWitZSoHAQdBjDo=
Subject key identifier: 0A:72:5F:E0:A9:83:07:98:11:E5:19:72:19:26:56:5D:C8:CA:6C:49
Authority key identifier: 9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E
Certificate issuer: /CN=A91570D9/serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft
Manifest number: 75
Signing time: Wed 25 Mar 2026 07:03:07 +0000
Manifest this update: Wed 25 Mar 2026 07:03:07 +0000
Manifest next update: Wed 01 Apr 2026 07:03:07 +0000
Files and hashes: 1: nqxU6fn1nmg49IRgQhBWMwZtII4.crl (hash: V7FMv8Po084uQ78fWLtjFsTcHFnF7rKf4keb4cqRpZg=)
2: AA3F24B67D8011F083953324C4F9AE02.roa (hash: jpFnK8zVyNjnf/ogEum40gO9rvhMUFJcUISF9Dfv6jM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl
rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91570D9, serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E
Validity
Not Before: Mar 25 07:03:07 2026 GMT
Not After : Apr 1 07:03:07 2026 GMT
Subject: CN=69c388ab-df4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:b9:dd:2c:99:94:b6:ee:7d:f0:7c:92:12:
12:b5:53:69:70:dc:37:29:79:4f:cf:75:28:fd:07:
d1:d6:a9:71:20:21:b7:e6:df:3d:65:4e:af:e7:41:
b3:3e:06:91:9a:83:fd:ea:7c:28:04:9b:7e:c9:bb:
c8:d6:d4:a4:66:4e:1c:72:1f:b2:6e:c7:d6:83:cb:
0a:ec:15:7c:5e:d5:bb:98:9c:e5:68:3e:48:e1:d7:
01:41:71:41:ee:73:b5:b9:3e:83:0b:5f:fe:86:d0:
e4:bd:c2:2b:f6:aa:7d:7b:8e:4e:84:de:93:a5:66:
43:7f:01:e6:ec:a7:ea:2e:48:7b:ea:26:1f:94:72:
8b:13:78:ac:50:d9:81:d5:28:31:a1:9c:36:ea:5d:
53:cb:0d:3c:b2:7d:eb:f3:64:5b:67:b1:87:19:dd:
c2:39:a8:6d:b8:1b:ae:1f:d4:bf:db:c7:1d:ab:c9:
ad:d2:26:13:18:ec:98:8c:d6:99:04:97:1e:a6:2d:
eb:e1:c7:d2:8c:e8:18:44:7d:b6:e2:a3:03:51:d0:
4d:d7:55:9d:40:32:1b:6a:94:9d:ba:49:c7:90:9c:
54:6c:9a:58:1f:53:36:46:9d:7b:24:2a:a7:62:e6:
7c:d8:e5:88:23:1d:cd:63:86:26:c6:1d:f2:85:a3:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:5F:E0:A9:83:07:98:11:E5:19:72:19:26:56:5D:C8:CA:6C:49
X509v3 Authority Key Identifier:
keyid:9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:1b:e6:4c:31:59:7f:71:d2:4f:2c:86:33:7c:47:04:4c:24:
06:1a:a8:54:4f:70:7d:a8:1a:9b:92:8f:18:87:3b:cf:99:a6:
28:b2:96:33:73:f2:8a:16:19:8a:dc:30:d7:57:15:5c:3d:27:
11:6b:af:bb:26:95:c4:68:8e:5b:3c:ab:8a:47:8f:fd:89:f9:
0d:bd:47:70:82:95:75:df:ce:61:37:41:96:40:fb:52:4d:df:
99:69:de:bf:2e:46:55:76:da:0d:b7:2a:e2:13:a3:e0:ee:01:
4a:d0:19:7a:11:41:74:8b:75:cc:64:b9:d3:29:e4:ec:85:cf:
8d:bd:2d:8b:50:98:79:4a:a5:e2:97:77:6f:1d:4a:a4:56:77:
50:f7:30:74:ef:22:43:48:f4:64:5c:e4:c2:ab:82:af:b4:0f:
dd:4f:30:1d:03:0f:d4:04:32:6a:40:28:e5:11:8f:26:e5:15:
aa:1b:01:b2:3d:5f:8e:1c:a0:0f:37:45:43:28:c8:1a:0b:cf:
91:14:50:b7:12:5a:66:d8:af:a5:af:20:63:f3:b1:17:17:32:
7b:3c:20:b8:98:cb:ce:7f:58:6d:1b:87:cd:3e:8c:63:d0:20:
58:2e:d9:8f:74:47:b4:e9:91:b7:2a:28:cf:de:56:d6:01:10:
03:7a:ae:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:27 2026 by rpki-client