
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
File: NyCB99vi7xGkQRvU5q-G8yaYyvo.mft (raw, json)
Hash identifier: 9h9faiCmWVzwb6h/YKhZGFrG3HXqnY8XTutND79Wntw=
Subject key identifier: CF:A9:14:27:A3:EE:83:B4:73:1C:CE:93:31:B6:B9:9A:09:91:FC:13
Authority key identifier: 37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA
Certificate issuer: /CN=A9191E19/serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
Manifest number: 01A0
Signing time: Thu 23 Jul 2026 05:41:16 +0000
Manifest this update: Thu 23 Jul 2026 05:41:16 +0000
Manifest next update: Thu 30 Jul 2026 05:41:16 +0000
Files and hashes: 1: NyCB99vi7xGkQRvU5q-G8yaYyvo.crl (hash: 8xwFGiE9M/qYTJ8WEQKT+zPQ6bP04oHiL9cfbhhtHJ8=)
2: 4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa (hash: X9BGtBs1osigY8tUwUmWLsAjtgQ3b+t0twb857Yii5o=)
3: 82748D8A8D3A11F0833AB01AC4F9AE02.roa (hash: r4Ca6TL7G33YNpkOkNbOrzu02s5Gj49drdeKjyxRr/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl
rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E19, serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA
Validity
Not Before: Jul 23 05:41:16 2026 GMT
Not After : Jul 30 05:41:16 2026 GMT
Subject: CN=6a61a97c-9888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:26:80:37:5c:c9:f4:50:92:8d:71:68:92:
74:06:b1:f2:8b:89:58:3d:9b:81:78:d9:67:11:46:
72:0c:50:7e:c7:e1:46:61:68:36:e1:79:dd:d9:13:
78:b3:a6:70:5f:04:a5:5d:bc:aa:e5:75:f0:a1:47:
a3:fe:68:c5:c9:23:77:04:97:69:96:4f:50:6a:50:
89:38:59:b9:6f:cf:52:63:2a:69:a6:58:d4:88:f4:
65:4b:95:a9:48:4b:41:9b:2f:72:14:92:d7:8e:32:
1f:e5:ff:29:50:35:26:00:75:a7:b5:6d:ee:81:fc:
2d:10:98:83:74:ef:0c:52:de:71:38:d9:49:5e:21:
fd:17:15:ab:d0:42:18:9d:46:e6:63:4a:86:85:33:
ea:72:d4:71:db:1f:36:fa:2c:83:5c:ca:12:b3:03:
52:dc:2c:74:84:54:19:03:81:9c:50:f5:fc:3c:68:
43:9e:d5:84:12:db:26:ca:08:e6:e7:c3:fa:5a:24:
9e:13:10:ae:df:0b:67:3c:8d:ff:8d:d7:d4:83:11:
70:cd:12:d7:b1:0e:22:d9:4e:66:df:ee:b5:4c:e4:
34:07:4c:cb:65:ea:b5:c5:e8:a5:49:2b:8f:c1:1d:
21:7b:86:0b:6b:b5:8f:bc:a3:9f:28:49:f9:05:8b:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:14:27:A3:EE:83:B4:73:1C:CE:93:31:B6:B9:9A:09:91:FC:13
X509v3 Authority Key Identifier:
keyid:37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:90:3f:61:f9:99:66:c5:2a:62:a7:72:06:74:bf:5b:37:
5e:97:2c:9e:15:2a:16:f4:57:78:60:f2:01:c1:29:0e:f5:3f:
04:56:df:ac:66:59:cc:af:52:7e:61:86:9b:dc:46:52:88:01:
58:23:57:fb:2b:54:2d:c9:d9:1f:25:d6:37:12:db:05:20:d6:
f1:d8:73:20:9e:6a:25:21:9f:58:34:2e:ba:b7:7d:0d:c4:a3:
4b:40:3e:c6:86:b1:04:ee:24:bb:94:6f:f1:e6:03:c4:24:c4:
3b:78:de:a2:15:ec:31:d1:0d:11:07:aa:18:06:32:04:e1:3b:
4d:36:b0:7a:8e:5b:f9:8b:85:1d:43:c6:b0:49:27:bb:0a:73:
24:0f:32:1a:10:5a:fd:b1:67:20:f7:b7:03:36:0d:d0:d4:8c:
9c:1d:36:e5:39:1c:84:34:5a:05:35:36:f1:ca:f4:a2:ad:8b:
d8:be:35:2a:1b:63:bf:6e:47:cc:ff:e2:bc:1c:94:95:a8:dc:
d8:16:3d:ad:c9:c7:f1:01:c7:85:76:78:6b:1f:ab:f2:fd:83:
ce:4f:88:94:71:7d:e6:ca:4b:62:fe:b3:7b:bc:45:6f:98:a1:
59:df:c8:0f:40:35:e5:c6:ab:18:af:75:d9:0b:8b:16:27:02:
47:2d:2a:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFFMTkxMTAvBgNVBAUTKDM3MjA4MUY3REJFMkVGMTFBNDQxMUJENEU2QUY4NkYz
MjY5OENBRkEwHhcNMjYwNzIzMDU0MTE2WhcNMjYwNzMwMDU0MTE2WjAYMRYwFAYD
VQQDEw02YTYxYTk3Yy05ODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo+cmgDdcyfRQko1xaJJ0BrHyi4lYPZuBeNlnEUZyDFB+x+FGYWg24Xnd2RN4
s6ZwXwSlXbyq5XXwoUej/mjFySN3BJdplk9QalCJOFm5b89SYypppljUiPRlS5Wp
SEtBmy9yFJLXjjIf5f8pUDUmAHWntW3ugfwtEJiDdO8MUt5xONlJXiH9FxWr0EIY
nUbmY0qGhTPqctRx2x82+iyDXMoSswNS3Cx0hFQZA4GcUPX8PGhDntWEEtsmygjm
58P6WiSeExCu3wtnPI3/jdfUgxFwzRLXsQ4i2U5m3+61TOQ0B0zLZeq1xeilSSuP
wR0he4YLa7WPvKOfKEn5BYvcNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+pFCej
7oO0cxzOkzG2uZoJkfwTMB8GA1UdIwQYMBaAFDcggffb4u8RpEEb1OavhvMmmMr6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUxOS8xMEM3RjBBQTE0
MEYxMUVGOEE0QTcwMTZDNEY5QUUwMi9OeUNCOTl2aTd4R2tRUnZVNXEtRzh5YVl5
dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055Q0I5OXZpN3hHa1FSdlU1cS1HOHlhWXl2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUUxOS8xMEM3RjBBQTE0MEYxMUVGOEE0QTcwMTZDNEY5QUUwMi9OeUNCOTl2aTd4
R2tRUnZVNXEtRzh5YVl5dm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAATSQP2H5mWbFKmKncgZ0v1s3XpcsnhUqFvRXeGDyAcEpDvU/BFbfrGZZzK9S
fmGGm9xGUogBWCNX+ytULcnZHyXWNxLbBSDW8dhzIJ5qJSGfWDQuurd9DcSjS0A+
xoaxBO4ku5Rv8eYDxCTEO3jeohXsMdENEQeqGAYyBOE7TTaweo5b+YuFHUPGsEkn
uwpzJA8yGhBa/bFnIPe3AzYN0NSMnB025TkchDRaBTU28cr0oq2L2L41Khtjv25H
zP/ivByUlajc2BY9rcnH8QHHhXZ4ax+r8v2Dzk+IlHF95spLYv6ze7xFb5ihWd/I
D0A15carGK912QuLFicCRy0qUg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:58 2026 by rpki-client