
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File: nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier: AE0VP7Uk8jPcSZdfepaDVTr5bCwshMHINEvKD0jf2kE=
Subject key identifier: 87:7C:F8:AA:5A:4B:49:5D:7C:33:45:98:46:29:4A:6C:4A:10:51:47
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial: 09BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number: 098E
Signing time: Wed 22 Jul 2026 20:28:48 +0000
Manifest this update: Wed 22 Jul 2026 20:28:48 +0000
Manifest next update: Wed 29 Jul 2026 20:28:48 +0000
Files and hashes: 1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: N9AQumGrcG44abPP0FfJFuxaDk3vYZF1E8apbQ3jc2g=)
2: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: jmiRcmGtCSPQ80tETmfEOVJ+GurX16ZfdMdpnSOQ5WA=)
3: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: 7BcXlcd3LJPGSVAJ0cpsMaAQmbsNPhOb+ijpOwrVFzQ=)
4: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: iXUcdsv3ddU69YIhWzDFLhl35LQs6AD3EeqPaisI2Hw=)
5: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: mdaUyLNP5ILBUXwjj5qxgg+9hrAAfPyxuDqIwoe7rWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2494 (0x9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Validity
Not Before: Jul 22 20:28:48 2026 GMT
Not After : Jul 29 20:28:48 2026 GMT
Subject: CN=6a612800-60a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:e8:ca:e0:da:26:38:12:71:7a:3e:d3:0a:
88:e3:77:be:b5:06:d0:26:eb:45:51:86:f0:d5:dc:
95:70:83:14:ea:a2:d0:59:43:00:ce:9d:39:e7:a7:
ff:b0:93:b6:4d:79:27:a9:e1:fe:88:2a:91:34:38:
4a:66:f3:45:f0:9f:ad:c4:13:ef:8f:e1:99:c0:ca:
62:05:aa:e4:bc:76:8f:09:0e:5c:2f:8f:35:71:85:
06:2c:a0:45:82:43:06:86:fe:d4:46:df:0e:21:80:
52:5a:57:d3:c5:67:56:f6:8b:a6:51:5a:3d:e8:3b:
36:da:53:8f:73:72:8b:5b:4e:f1:e9:b2:04:88:e2:
83:dc:73:28:d0:cb:d3:e9:d5:a2:d4:75:77:cf:de:
a4:35:be:18:bb:7d:dd:1a:75:33:13:97:c5:3d:e8:
0b:bc:bd:13:e3:df:b6:a4:dd:ce:73:d0:df:24:60:
72:fc:cc:40:17:f7:d6:72:77:f3:eb:87:12:1d:34:
3a:23:34:17:00:5b:a5:a0:82:91:2b:49:14:23:1a:
49:18:a7:f4:94:42:74:aa:fb:58:6d:69:f6:9a:b8:
55:42:0a:70:38:ff:b5:e6:38:88:8e:d7:a4:c6:4f:
a2:65:46:2d:04:5a:7e:a9:f6:4b:2d:97:f7:82:d9:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:F8:AA:5A:4B:49:5D:7C:33:45:98:46:29:4A:6C:4A:10:51:47
X509v3 Authority Key Identifier:
keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:b8:ae:ef:58:5a:46:a9:cb:ee:85:fb:99:a1:91:6d:70:d6:
00:e0:fc:22:15:0b:d3:d8:19:20:59:cc:4e:52:e5:f3:56:e7:
53:8a:4d:2c:6c:9f:ba:ce:66:2b:aa:d4:69:16:72:ee:ea:cd:
fa:3e:1d:ed:da:79:ff:bb:23:a5:d7:7d:6a:c6:05:87:9e:05:
98:86:c9:dd:a3:af:d9:65:8c:c9:2a:d7:0a:5b:c1:5d:d1:4b:
92:c7:ba:91:d4:16:87:62:4f:7f:5a:e8:64:43:2a:04:84:f2:
97:b7:58:81:21:88:28:7c:18:02:11:cd:55:23:01:a4:c7:7e:
69:01:11:79:2e:77:70:7d:0f:4b:36:8d:5d:fe:94:6c:35:95:
fd:f9:18:07:b6:e2:94:4d:43:0d:c1:98:96:b1:56:0a:a5:39:
60:7f:24:f9:13:15:80:32:93:7d:fe:8e:8e:08:12:81:e8:b8:
fc:57:3c:97:40:90:61:e9:1b:ef:1d:47:f5:88:01:78:4d:18:
e3:f2:4b:09:8d:4c:f7:1f:06:a1:47:14:a1:4d:f2:d3:b5:06:
ad:7a:2f:54:f3:54:66:00:00:3a:5c:8c:ce:08:34:81:fb:2a:
9f:a9:ed:1d:2e:ea:d1:60:7b:b4:f9:08:25:b1:c5:02:6f:50:
52:a2:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:51:24 2026 by rpki-client