
$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json)
Hash identifier: q6448180YosRTNbSrATemkKasYY4dymM9FhO5jBouoA=
Subject key identifier: 93:63:C9:BE:FD:E8:D3:B2:D9:38:E5:A1:24:37:24:5A:40:F8:B1:2C
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
Manifest number: 01CC
Signing time: Wed 25 Mar 2026 03:03:23 +0000
Manifest this update: Wed 25 Mar 2026 03:03:23 +0000
Manifest next update: Wed 01 Apr 2026 03:03:23 +0000
Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: hmj3+mEBj+YIU7sPs6Ua+O608dF6cGG3QBkZJT9VQvU=)
2: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: 4mOEHeBhGChXkeLtaY3MjKqXMs560mEi/SBozflvvQE=)
3: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Validity
Not Before: Mar 25 03:03:23 2026 GMT
Not After : Apr 1 03:03:23 2026 GMT
Subject: CN=69c3507b-bb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:ae:73:a9:e2:0f:46:89:22:5b:88:26:e8:
05:2e:4d:4d:ef:65:ff:ef:1b:c2:f5:b1:f7:05:32:
05:4f:c1:98:47:f6:e0:f2:d4:b4:47:73:76:3e:7e:
00:23:e9:84:fb:47:05:0b:1c:ec:06:8a:92:93:39:
03:be:38:ba:75:32:d0:4f:61:6c:f1:61:eb:98:e2:
94:99:bd:0f:d1:39:47:3d:e8:c2:a9:f7:3b:a4:5e:
32:6f:d1:e6:b1:ad:0b:1d:44:6b:cf:71:7e:24:d1:
8d:26:46:6c:8d:24:76:49:6e:6a:79:c0:f4:d6:96:
19:81:79:bf:07:26:72:a3:99:11:b8:90:4c:8b:e0:
1c:cc:ec:4f:52:cc:c5:c9:cf:8f:e1:c1:56:fd:1e:
b2:63:d4:6c:1d:b3:b6:08:be:49:88:d9:c2:ef:5f:
86:4a:c4:01:51:ad:07:4b:26:2f:97:b8:1e:b0:22:
26:a7:4a:48:b8:a6:f6:ae:2e:0d:24:79:76:7a:5d:
07:00:7c:38:12:21:0b:f5:b5:e8:aa:f8:f8:14:b8:
ce:ec:55:9a:79:ac:52:55:48:bc:f5:5d:a0:df:45:
75:d4:2b:d5:92:03:dc:7b:56:8f:61:12:b4:e0:21:
38:a0:52:b7:34:07:84:c4:53:8a:79:3a:d4:d2:44:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:63:C9:BE:FD:E8:D3:B2:D9:38:E5:A1:24:37:24:5A:40:F8:B1:2C
X509v3 Authority Key Identifier:
keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3f:ab:04:6d:dd:28:35:af:a2:86:5e:c3:db:76:cd:7c:5d:
52:f2:45:34:65:3d:2d:f8:af:e6:d8:35:ba:2a:57:87:e1:c9:
80:e5:82:ae:67:5e:6a:bb:78:c9:0c:d3:89:96:14:7f:c5:14:
57:a9:11:03:9b:45:cf:74:6e:67:ff:00:4e:50:35:36:56:7b:
ee:72:27:d1:65:6e:52:0e:02:65:81:02:7f:0a:b6:e5:a9:a6:
26:df:7f:72:6d:58:ff:51:28:cf:ab:96:46:6c:5f:09:93:88:
4f:f1:a0:a3:58:51:5e:2b:5e:b4:e8:03:af:e9:ca:86:36:a9:
f1:c6:30:b7:b5:22:04:78:7c:03:77:9e:b9:f2:77:1b:c0:2f:
11:70:5d:2b:22:9c:b3:a7:a2:d6:b4:01:45:93:ef:f5:95:ee:
aa:a1:b3:fd:25:47:da:42:61:f6:57:dd:06:24:4f:a6:dc:b7:
3c:29:ec:5c:9a:c7:b9:2a:07:a7:61:74:6f:7d:7b:e9:f7:68:
a2:9c:f3:1d:76:47:31:d4:0f:76:9b:f1:76:eb:ce:3c:4a:89:
82:cd:e8:c4:6c:8f:6b:09:d5:c9:a3:dc:0a:38:f3:bb:48:70:
66:e2:e6:b2:98:b3:37:69:86:cc:a4:2b:07:42:12:9d:98:01:
ec:f6:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:30 2026 by rpki-client