
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json)
Hash identifier: Z2Hi2pNCri1A+blG8Zq8o6clVlKiUobl0L63vT1puc0=
Subject key identifier: 94:69:12:2F:0E:5B:F8:0F:DC:54:02:AF:08:A6:D9:B1:FD:E6:23:84
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 123E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
Manifest number: 10AF
Signing time: Wed 22 Jul 2026 17:40:59 +0000
Manifest this update: Wed 22 Jul 2026 17:40:59 +0000
Manifest next update: Wed 29 Jul 2026 17:40:59 +0000
Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: 6UkyTJzWk5NQu6bLR3sf6/A+cezylw24N1gUQG29q/4=)
2: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: KmEu0JXVBtwzMz7EetZKwa8KqrgE2kj5+Y9cCaXraFo=)
3: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: wW2NNDoiiggQLts6yoRWeEta8EfkfmkpuQXd4IRvuj4=)
4: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: Yra/cySrBt0zcZ3P5GOXeK6swd+KmGvdWYxnM5VydGA=)
5: C2356A948FE811E98B967A66C4F9AE02.roa (hash: Spu6ueKiAix7Vx1bbz3QuH8zuY42SfhsOYEFzJ/3W4o=)
6: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: J+oM/GM4p3/6d6pclXs1NjnCH5p34XNUGcl5IM3ZZ78=)
7: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: SwqLx1ykNlWfnGxIgnnplctUN2Uh69BTnr1sDfxJRlM=)
8: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: jAhN4tezvJPwZDVpGZejWw4TU5H1Av+GZW6zZMmb67I=)
9: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: k1IfgBcHOoF2DvAmPhMFiueaAUbhFvWp7b5AsEN0aGA=)
10: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: RdnFjFlQSbXhKdwY5kMqtzBzkUycrU7RuwuLidB948U=)
11: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: VlAWA5/d+uBjOMZi4UPagGvqPim5oPM3SxEdySpg39I=)
12: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: t0lrWYbEsDKRavSA+NYxahXVuuhYWwqHsIgE48/DyB8=)
13: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: 0xacdRxIlt6XlMYC4ytgm5Wnpkb/XtvJrzfDYrQNkow=)
14: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: m9D73VL27f9lVIbOReJ6AOP2zRgFJFj+KEXEimjyt7I=)
15: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: Dy3vf2brgO7ffq8geCJNrRWY4aeeqFaFWyK7H7SMUrk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4670 (0x123e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Jul 22 17:40:59 2026 GMT
Not After : Jul 29 17:40:59 2026 GMT
Subject: CN=6a6100ab-c9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:5c:b0:e3:21:8f:20:bd:b8:e6:d4:c4:40:
21:26:05:15:3f:ac:9e:1e:e0:76:8c:48:e9:e7:ce:
82:18:53:d0:b3:96:7c:88:ae:b3:4c:d9:4c:f8:e8:
5f:35:a1:e0:b9:86:65:fc:4b:d4:d9:d8:63:1f:c8:
33:84:fd:0f:91:e8:6c:ed:a7:b0:81:85:b1:e4:7b:
c3:dc:0b:9d:1f:ae:47:34:97:e5:7b:a3:6e:02:ca:
77:20:72:d4:77:b8:25:07:52:6b:83:a1:52:ab:e3:
9a:cd:bc:36:26:05:e8:24:83:a1:85:57:c3:c0:76:
68:cb:01:1c:15:d0:d9:01:5b:17:bd:68:71:8d:b4:
5f:17:ec:98:4e:13:d7:67:4c:2d:b9:92:bd:de:ff:
6a:e2:18:5c:e0:de:2f:9c:e5:52:27:a6:92:52:b1:
45:ea:19:f3:7e:e7:d0:f4:74:5d:b7:b2:20:d1:b5:
b2:29:0f:e6:02:98:f7:0a:0f:01:6e:b7:56:01:35:
ce:76:2a:af:86:ce:5d:0f:3d:12:63:46:35:cc:cd:
47:d5:a7:79:6d:6b:67:70:7b:13:6a:85:ca:10:d1:
88:1e:2d:34:0c:ab:88:f4:62:aa:db:6c:13:a7:3a:
a4:f3:39:61:78:0f:5b:da:77:10:76:0d:16:0a:f4:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:69:12:2F:0E:5B:F8:0F:DC:54:02:AF:08:A6:D9:B1:FD:E6:23:84
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:ab:7c:3a:4f:fc:a6:8d:70:7e:4e:93:7e:63:8f:98:76:e1:
a8:8e:ab:45:2b:8b:fc:5e:a6:27:7b:5b:b4:7b:5f:fb:3c:19:
b4:14:a6:7b:6d:83:f9:90:5f:84:db:be:ed:ff:8d:3c:5c:96:
27:69:49:76:e1:25:1f:71:06:7f:ca:00:da:1a:61:e7:33:f5:
87:34:38:e4:48:77:c5:78:62:b5:f4:f0:5f:66:7b:b1:ab:1b:
33:fe:63:97:65:32:3d:55:69:24:ff:b1:1e:fc:4d:60:0a:5f:
ef:97:b3:85:0e:a0:e4:e0:70:27:98:f3:c4:15:13:24:48:2a:
00:fb:79:f5:6b:ac:d6:c9:55:c9:19:24:86:4d:65:e9:e5:49:
e4:d4:e1:77:77:ac:1c:bb:dd:d3:a8:a1:f1:d7:a3:4e:20:f2:
5b:e1:3f:04:d3:cc:4a:70:1c:00:3a:48:63:17:24:7b:7f:c0:
95:f2:bb:11:1b:81:3a:da:ad:a0:4e:c8:b9:4c:ab:10:f8:e9:
48:94:c5:a1:d0:5f:3c:60:76:fd:c1:f2:37:92:29:fb:c9:d0:
7f:3a:71:fe:53:14:ce:2f:0a:64:28:e4:5f:63:a0:40:09:94:
80:ee:28:01:6c:8b:ce:f3:e3:1a:7c:95:70:c9:98:bf:3f:22:
96:aa:40:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:47 2026 by rpki-client