
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json)
Hash identifier: G2SiVq+XlKM/uY5ccbYZmwu8Av09qyMUiw3Mrf/SCRU=
Subject key identifier: D9:13:E6:F3:99:AC:5A:E2:25:FB:B1:CE:97:68:B8:E5:F7:A9:2E:88
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 11C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
Manifest number: 1151
Signing time: Tue 12 May 2026 17:15:16 +0000
Manifest this update: Tue 12 May 2026 17:15:15 +0000
Manifest next update: Tue 19 May 2026 17:15:15 +0000
Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: r8NE7HGSzZORDYKKDBpj1WpkdKf9L65sbEL2LjybPwk=)
2: 52685F222E9111E999636910C4F9AE02.roa (hash: uaKA9Y3McJzmCeyJEJWsLKksi3AYaWdl6qS4vvefPN8=)
3: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: M9wrLdqCvf9Rebn1AxQjUYPshDSgwl/PTCAmwfRJfkY=)
4: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: 0AlAm/UllNu6nV+KmAJcUogCEbfOQbf6eO/9wodLVx0=)
5: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: Wg9nJcL+7yCwCNF5i9jX3GavDbjDIX0HONcfmVfocb4=)
6: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: JuUJ4DOSBW01nrRIUTLHPfkliifJ+rq2zxYO36hJWcU=)
7: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: IMj8qtFSd6hi4gKqRA7H36habWRd5bqBb8+O4kZejZ4=)
8: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: r6j10YEzxAuJPnFHDmBq1me6EKjgZrwXuEyyfhL/DdQ=)
9: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: Pd6I10yKRgl85ZBaIcYKM4tnRuesswuVsiUCUOGCVbM=)
10: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: 2tzoshkXR7/Luip7F+Asz7LyTGRXnuS+/JojvXSRlyc=)
11: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: n9mHkt6czHPPUD5zY90UjJ7UAf6byhyKwZP1Ve452FA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4551 (0x11c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Validity
Not Before: May 12 17:15:15 2026 GMT
Not After : May 19 17:15:15 2026 GMT
Subject: CN=6a036024-2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:5d:ff:29:cc:a8:c5:a4:53:93:3c:da:c5:
1d:39:ba:1f:b9:5e:51:80:a3:43:da:e2:53:f2:a2:
63:11:c2:53:d9:f1:80:05:74:44:31:59:9c:d8:e5:
d5:77:d4:fc:c7:b9:49:48:9b:de:de:65:e6:03:42:
49:65:77:7d:25:63:47:db:dc:f1:1d:44:09:8a:be:
43:fa:1b:70:68:1c:32:e6:8d:85:97:9f:a8:0f:20:
36:40:b2:04:f1:2c:59:85:d5:d4:aa:cd:33:5e:ba:
93:26:cd:ad:bf:2b:65:22:92:6d:a0:e3:ff:14:84:
9e:cf:c9:d2:ce:f4:08:33:96:a0:c1:8c:d0:8b:00:
ff:12:7e:cd:58:2a:8d:b1:b4:c3:3a:f0:38:56:c0:
be:4a:2e:a1:b3:95:c3:11:ed:7c:8f:5d:67:38:2b:
9c:b9:e1:0a:08:cf:2b:a4:96:e9:ab:9d:81:7b:39:
62:e8:1c:33:6a:25:f6:d6:9d:7f:f7:21:14:52:39:
54:27:8f:ab:09:87:f5:20:a4:be:d6:d3:bb:09:31:
17:35:d3:94:6d:63:7f:1d:c1:4b:bd:db:1f:40:d6:
9c:c7:36:02:70:2c:c6:e6:c5:68:50:ba:79:b0:58:
4a:80:cb:91:32:e1:00:59:3d:f7:46:9a:28:c2:44:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:13:E6:F3:99:AC:5A:E2:25:FB:B1:CE:97:68:B8:E5:F7:A9:2E:88
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d2:a2:f3:4b:67:7e:66:ca:6f:16:e9:5a:e1:47:69:9b:ea:
90:f5:f5:66:a1:ba:8f:39:0c:e0:b8:d0:7f:6f:bc:79:45:3b:
5f:20:3e:05:6e:52:da:a8:56:c1:33:93:ca:4e:1b:fe:a4:de:
d2:db:6f:15:06:c3:43:fc:eb:d9:b0:5e:38:cd:5a:56:fb:65:
0c:00:a5:1d:f6:c9:fc:3f:04:d2:dd:d5:28:84:16:f7:e6:95:
41:45:15:e6:16:1b:18:e7:03:7a:01:08:98:8f:7d:8e:28:5d:
51:47:f3:f6:b2:66:98:4a:b0:27:7e:7c:86:02:6d:52:c5:b6:
14:a9:22:bd:5e:44:38:46:b1:77:08:0e:46:7a:09:f9:08:ac:
97:dd:77:7d:43:eb:59:bc:01:34:69:df:00:54:d7:1e:3f:5f:
7f:0c:57:b9:67:a3:5c:98:e1:55:b1:d3:b7:47:08:e8:81:96:
31:85:7f:4e:19:12:53:c6:a3:92:76:1a:5a:a4:ab:bd:47:0f:
62:c6:a1:24:74:05:a9:80:82:56:78:2f:21:9e:a9:75:b7:ae:
a2:97:a8:72:ba:c4:66:d6:1d:d5:22:db:a2:c0:41:7e:e1:70:
9d:97:dc:4c:08:19:4e:65:a1:9b:49:60:e5:5b:e6:36:4e:f0:
dd:d2:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:18:17 2026 by rpki-client