
$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json)
Hash identifier: T/I9YD2Cop9vqUl2NxHkW3Xjh+XYw4rtaPi5CcmU914=
Subject key identifier: B9:A6:2A:A9:5A:9C:25:EC:49:E2:E4:34:37:DF:41:9C:54:E5:2C:E9
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
Manifest number: 0203
Signing time: Thu 23 Jul 2026 04:27:37 +0000
Manifest this update: Thu 23 Jul 2026 04:27:36 +0000
Manifest next update: Thu 30 Jul 2026 04:27:36 +0000
Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: /YizJUYtZ7R/MXUncZvYqcCYi0/AzwFsRdBJD5twOVY=)
2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Validity
Not Before: Jul 23 04:27:36 2026 GMT
Not After : Jul 30 04:27:36 2026 GMT
Subject: CN=6a619839-5a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ce:8d:43:2a:d7:c7:31:ed:90:f0:05:2d:fa:
ce:0b:5a:52:1b:f4:97:a2:98:1e:0a:80:4b:81:18:
5a:f4:cf:08:d6:f2:1f:7f:e6:9b:cf:a2:66:11:2a:
e0:e1:61:e0:08:21:35:8b:50:23:86:45:2d:a0:3d:
ee:44:20:84:b7:94:3d:2c:b3:f8:bf:cb:fe:20:e8:
e9:4f:a1:38:87:23:6b:1b:7f:29:6c:82:a5:ce:c2:
7b:9b:9c:12:91:32:24:ab:54:94:16:af:d0:fb:c1:
9b:7a:7a:4b:26:6e:47:a8:b0:f6:41:98:37:ff:58:
24:46:20:a2:c3:78:e9:83:27:ac:35:a4:01:0b:49:
3a:7c:b0:1e:94:5c:d0:74:ec:dc:27:b8:ec:b4:45:
82:af:91:9e:d9:f6:10:63:ac:98:20:88:18:aa:fb:
7c:b3:7a:e3:fb:32:ee:03:18:af:15:cb:36:e4:50:
0a:e0:4a:5f:21:17:be:08:02:84:d1:b4:14:c6:81:
c6:86:f4:a1:a1:8f:b4:2a:cb:cb:97:9a:fa:93:54:
1d:a3:fd:99:74:33:a7:ae:96:0a:f5:40:e4:be:62:
c2:78:38:1f:98:c2:ef:38:ab:63:e0:a1:b9:ab:2e:
ae:62:02:de:85:08:79:c1:53:7f:0e:1e:52:18:54:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A6:2A:A9:5A:9C:25:EC:49:E2:E4:34:37:DF:41:9C:54:E5:2C:E9
X509v3 Authority Key Identifier:
keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f0:c5:2d:f3:f8:20:36:ff:92:91:9f:de:0c:d9:e1:58:5f:
cc:a4:3f:e3:2f:fc:52:90:f2:44:07:36:49:54:9f:f4:13:1a:
e9:8d:48:83:4b:65:8c:65:a3:39:74:0c:5b:74:b1:b1:a4:57:
91:72:19:cc:ae:8f:9b:37:20:76:71:5a:82:9a:16:e1:67:bd:
55:58:35:87:6d:34:39:f7:4b:24:17:5f:26:d0:3f:23:fd:d2:
c8:fe:77:42:f6:4a:e3:bc:a3:c6:62:e0:88:58:6f:23:ac:38:
43:e6:3c:0a:c5:dd:ea:9f:91:90:15:96:97:db:7d:a0:12:b3:
3e:cd:e8:b2:64:79:cb:2b:89:d2:ca:5c:6f:ce:62:5e:2b:ec:
30:fc:c3:0b:9e:c8:a4:52:06:61:08:c6:71:3d:a4:77:32:f4:
81:ef:ad:8a:58:10:59:1c:86:76:ec:dd:57:67:01:54:41:b4:
0a:64:c2:b6:29:10:fa:67:b9:92:cd:13:8e:02:3b:62:66:1d:
cc:70:67:c7:84:1d:78:6f:72:d3:eb:de:09:6c:7e:18:9c:59:
2f:de:63:29:bb:46:46:37:e4:bd:a3:d6:22:e7:5d:0e:64:cb:
2e:1e:b2:31:59:bc:c2:df:23:dd:97:29:27:d0:dd:aa:d9:bf:
ae:db:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:21 2026 by rpki-client