
$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json)
Hash identifier: T7JfYeM7slE4oopJTSJTVjYZy1VilDs53/ONdbRm1K0=
Subject key identifier: E5:40:02:E5:67:57:40:86:F2:EC:40:CD:09:EB:DF:40:FE:32:31:01
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 11F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
Manifest number: 1177
Signing time: Wed 22 Jul 2026 17:20:26 +0000
Manifest this update: Wed 22 Jul 2026 17:20:26 +0000
Manifest next update: Wed 29 Jul 2026 17:20:26 +0000
Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: /JxSpIVquQikiiRLntvPyZtfz81MlzhGNTSaV8O7x70=)
2: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: bAw2DJ5Kd887dPCmMIgU3xUTOQCR/psfXJJs57GhqSk=)
3: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: R3UXvxLGuAsLaHQCcYjq4jsLIsHsiVoo5zau0vUpLOo=)
4: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: NHQV92FmnuARgeDDhUDewRl+rTj+thYHcs3GlrXraHk=)
5: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: tCQBUtYFoGYz0mkeelr2MTFt0PRYSbZ9klpLIVmb1oc=)
6: 52685F222E9111E999636910C4F9AE02.roa (hash: 4Ei9jmJLAQOoAToGpIrcLdsdG3+i6HRC8BOB0H1zkBM=)
7: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: lflQBr5KFU0YHST8ZC+CiZu1r2eTacXElo40hp/vo78=)
8: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: 3JBN2jyg46LmYUyUHhEZh4IoQyWfFsojDUHEe85wv/g=)
9: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: aOutH14XqTU7CvFjZF4RAhY9j2C5Nrg3m1MQwiLdC9E=)
10: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: sm0eBXuJHpy/6GBiyFucIa3zwW7MRE4QJ04/eh2HAes=)
11: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: fzVldj66k6KXtgIRLEaGb66ZtwgbJga1awvd7qMV8+I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4599 (0x11f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Validity
Not Before: Jul 22 17:20:26 2026 GMT
Not After : Jul 29 17:20:26 2026 GMT
Subject: CN=6a60fbda-701f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:01:f6:02:46:cd:b7:b4:d3:72:0d:82:75:
e6:5c:74:46:56:86:0b:fc:c7:a2:65:0f:98:ab:e6:
62:10:c1:1a:69:30:66:08:41:c4:80:7d:cc:2d:f3:
5b:20:32:5b:e4:95:0e:c1:a7:91:4b:a5:0c:c4:36:
89:ed:37:31:58:2d:62:34:d9:68:01:80:ff:7c:3e:
65:1c:cc:c4:df:b6:51:50:3b:17:3d:9b:6c:f2:d5:
be:b7:0f:42:29:1a:5f:71:2e:86:e6:07:de:b7:d1:
47:34:a6:bb:0d:f4:cd:f3:23:5b:be:1f:5e:b7:22:
50:c7:08:eb:9c:66:66:ee:c0:20:cf:93:d2:55:37:
19:fe:02:89:61:e2:f8:0e:f3:aa:b1:b9:e3:17:48:
b6:47:1b:af:f6:d8:c4:6d:99:eb:79:38:15:cd:a6:
49:ee:a9:e6:b3:79:8a:c2:2b:92:31:e9:68:7b:89:
1c:b9:26:37:b6:21:99:8e:6f:98:f0:23:b1:03:62:
10:a8:c9:31:7c:e4:b8:7a:a4:4a:74:4d:be:ba:b9:
1c:43:cc:d6:7f:02:b9:e7:3a:c6:c3:64:b1:70:3b:
ed:4e:18:ab:20:a9:a9:41:e1:dc:fc:49:9d:c2:4d:
d6:a0:99:8e:38:a3:e7:f2:ed:39:ca:21:8a:74:f2:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:02:E5:67:57:40:86:F2:EC:40:CD:09:EB:DF:40:FE:32:31:01
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ad:e3:b6:73:73:8e:72:28:76:ef:8d:17:b4:55:8f:6d:f6:
68:c2:fd:65:cd:2a:68:de:95:d1:ba:57:d6:43:a3:78:32:3a:
5f:16:53:c7:59:1b:23:78:7d:dd:1d:fd:cf:fe:02:53:d4:59:
59:2b:bb:53:44:37:54:23:65:cc:12:41:34:84:71:04:f4:a0:
45:62:5a:2c:3b:db:c0:bc:1e:a0:89:63:0e:7c:80:23:ea:e0:
f5:85:f7:3e:11:9f:4d:5b:f0:f1:07:1b:c8:05:df:46:ca:86:
72:ce:97:56:a1:66:48:6d:00:a6:a8:7c:24:01:0f:a9:72:01:
1a:07:1c:fe:81:42:89:1b:2c:ad:70:64:58:b5:1c:c0:66:2e:
11:f4:70:bb:ba:60:63:6f:ac:7b:05:05:01:3b:b6:40:5b:83:
3b:a0:65:b2:0e:68:34:4a:0f:fe:1d:d0:89:1f:43:20:1c:9a:
5a:c2:2a:81:cc:48:5b:46:cd:23:2a:2a:50:37:9e:1b:c2:bd:
d4:7c:af:43:23:86:89:f6:12:e7:e3:5e:ff:51:6d:46:48:ac:
cb:aa:c8:26:ff:ba:35:fb:8c:13:17:23:94:fe:c5:ad:83:03:
9d:3d:0a:61:01:31:ed:46:59:93:89:71:65:be:4b:36:fa:c3:
47:eb:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:31:53 2026 by rpki-client