
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier: rY6BRnYZNbqhes4O/AH7Hvkg0fytglRPyTw1Ge14eYE=
Subject key identifier: 5E:99:F6:D1:3B:A6:D3:10:67:FD:34:8A:72:A9:4C:BE:E4:1E:0D:3F
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 05EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number: 05BB
Signing time: Thu 23 Jul 2026 00:01:07 +0000
Manifest this update: Thu 23 Jul 2026 00:01:07 +0000
Manifest next update: Thu 30 Jul 2026 00:01:07 +0000
Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: q8GLlrsel5rJY2Cu1PfdtB1MBIYkv+AhK2ik7jjkE3s=)
2: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: xb+uRHoHsQjZ3bcCgpJzZNIAPd4nFn7kpkaspAVlz/c=)
3: 10F4AD9C81DC11F1A817832770A30FBC.roa (hash: tcEDniWE2GiqOhyoj757p7krVg5bHwf1EmxkpQBck08=)
4: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: Q6qYKHjV9NmhmzxqH8ayk30H8rtTg6j37bugDkJvn/Q=)
5: FBBECF1A694111F08D368069C4F9AE02.roa (hash: HO1DGtNQx+OH3SloGIt02Rz1EoCoy8/3rF9m0kcImEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Jul 23 00:01:07 2026 GMT
Not After : Jul 30 00:01:07 2026 GMT
Subject: CN=6a6159c3-7ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:4c:0f:d1:25:c7:29:1a:b6:ef:69:9c:84:
45:c9:76:cd:85:ca:58:81:42:a7:b6:bd:e9:22:2e:
a8:6c:85:4b:40:81:b7:bc:48:8e:6e:6a:19:04:60:
f1:33:de:dd:68:71:a0:cc:23:af:22:81:5e:d6:2a:
99:1e:f6:e6:f3:b7:47:21:d6:79:ac:7d:ca:c6:f0:
a4:2a:43:89:cf:b0:24:94:00:f0:33:14:71:22:02:
5a:9f:ed:1e:bf:68:c4:23:c8:b3:6a:55:c6:33:42:
28:b7:2d:57:da:27:11:d2:24:16:84:a5:e2:aa:55:
35:b6:e2:69:29:63:41:cc:36:40:89:ff:7a:91:d2:
2f:d0:9d:47:ec:ab:b5:23:ae:61:5b:a3:92:07:c4:
0b:d4:25:7d:b2:f9:c5:1d:c4:04:e9:d4:65:4d:37:
91:6b:a8:1a:72:89:f2:01:47:b3:b6:9c:10:c0:37:
1d:7d:c2:5d:0d:31:26:4b:f1:68:b3:8a:2f:7b:49:
b4:22:d8:33:53:f3:7b:0e:29:2f:79:84:55:0e:53:
a3:2a:c2:67:bb:cf:5b:cf:b9:db:31:d7:e1:c4:5d:
96:66:d6:b6:ba:38:ab:21:c3:89:b3:51:15:9c:f8:
7d:ff:1b:79:95:03:43:56:04:d3:62:7d:fa:c6:ec:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:99:F6:D1:3B:A6:D3:10:67:FD:34:8A:72:A9:4C:BE:E4:1E:0D:3F
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:e2:73:98:c9:31:bd:ee:5b:4e:cb:e9:0b:90:77:6e:72:a8:
88:23:47:db:94:d1:8a:c3:0b:3c:38:a1:1e:df:50:67:d1:22:
42:55:bb:14:8b:96:ed:20:2a:5f:d2:14:a8:ed:22:42:3d:8c:
65:be:7e:03:88:1e:33:02:e6:bc:c5:fd:cd:99:13:80:9f:77:
b3:d2:b1:37:31:a2:fa:58:12:c2:07:dd:9f:77:82:7e:22:57:
19:d9:82:7c:2b:26:4d:11:67:28:d4:3c:82:cf:08:49:93:ed:
7a:b8:d1:29:f2:fd:37:a7:72:98:fa:2c:a1:96:88:93:49:b4:
30:03:0c:c0:3d:3a:32:6e:dc:7e:13:73:15:1b:a7:bf:3b:56:
67:73:e0:b1:30:e4:49:82:80:6e:33:31:a2:fe:94:f7:16:21:
f7:85:b8:d3:99:95:57:47:57:98:14:56:d5:85:a4:8e:01:a8:
14:1b:b1:df:b6:c3:b2:ea:e4:c3:ab:47:9b:cf:8f:31:28:4f:
c9:0b:b8:1b:a1:56:39:94:7a:58:8d:19:a1:ae:65:89:d2:e6:
73:b1:e1:79:69:70:05:96:e8:42:1c:2a:c5:2e:f4:88:9c:c8:
20:0a:b3:51:27:7a:bd:41:09:67:04:2a:46:23:e3:d6:2b:15:
d0:e0:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:28 2026 by rpki-client