
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
File: NpBAbdMULvZPdhZKfyJsCMwwG1M.mft (raw, json)
Hash identifier: 8EHubE0MRa88osXNXTCXC0FPeb76vv4FIf4OaTLEXgE=
Subject key identifier: 86:D8:9E:6D:04:FA:40:B1:D3:E9:CC:82:9D:FF:E8:6E:EC:52:7E:17
Authority key identifier: 36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53
Certificate issuer: /CN=A91A0807/serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
Manifest number: 3E
Signing time: Wed 25 Mar 2026 07:40:36 +0000
Manifest this update: Wed 25 Mar 2026 07:40:35 +0000
Manifest next update: Wed 01 Apr 2026 07:40:35 +0000
Files and hashes: 1: NpBAbdMULvZPdhZKfyJsCMwwG1M.crl (hash: KKm8aTAczUMFGz10HmIAaU8eYtJ44/xpVWl+6huB68E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl
rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0807, serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53
Validity
Not Before: Mar 25 07:40:35 2026 GMT
Not After : Apr 1 07:40:35 2026 GMT
Subject: CN=69c39173-c55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:be:69:4e:60:44:84:82:95:06:8d:99:53:
e3:c6:29:ee:5d:1e:77:e0:c2:e3:2b:50:77:37:05:
5b:52:52:3f:d2:dd:32:db:0e:90:df:80:ae:ec:f7:
70:ba:fe:37:37:a3:3e:c9:c9:78:f2:1d:95:25:93:
8d:b3:e8:f7:2f:94:dc:1c:90:8b:da:43:51:90:71:
b0:32:3a:fa:fd:95:31:ae:9e:26:b1:67:93:ea:c6:
cc:b1:0b:31:65:0a:9a:c2:bf:a4:fa:3c:0b:ba:59:
87:ca:1b:b7:85:ed:2c:31:b5:28:17:c1:c5:92:ca:
52:6e:d1:57:3d:6d:c8:fc:5c:12:61:1b:7a:70:35:
ac:ac:cb:8e:57:6d:6d:9b:1d:78:4a:17:a6:5e:82:
b0:00:4f:c5:e4:9c:ca:27:c2:f0:7e:1f:cb:a9:d0:
50:f9:21:42:23:f3:14:1f:ea:af:3b:a3:9d:7d:45:
e4:c5:6f:00:38:6d:93:55:61:10:eb:19:b2:41:25:
e4:96:66:b8:a1:69:55:3a:96:6d:c4:99:65:dc:0c:
8d:6f:41:d1:80:7e:e3:7e:bf:5f:7c:02:9d:de:fb:
66:85:aa:b7:4b:61:d7:ae:fe:f9:ae:c0:7f:62:ca:
bc:ac:5c:b7:d8:4a:dd:fc:69:8c:2e:3a:36:95:af:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:9E:6D:04:FA:40:B1:D3:E9:CC:82:9D:FF:E8:6E:EC:52:7E:17
X509v3 Authority Key Identifier:
keyid:36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:53:39:46:4a:82:c9:07:4f:03:9d:de:67:66:e0:8f:58:68:
1a:02:3a:28:bc:41:24:84:17:0f:87:a8:9d:79:e8:a0:f2:95:
ca:f4:58:b0:e7:6b:3e:f5:57:a4:0e:80:cd:96:e0:a4:40:15:
40:f2:b7:09:db:63:d9:1c:3b:b8:30:dc:ca:e8:33:cd:d8:73:
7f:07:b7:db:e2:34:d8:59:83:53:24:06:53:1b:58:8d:e5:38:
04:7a:34:6a:18:8b:63:5d:94:13:61:d4:e6:34:eb:c9:33:a2:
eb:30:f9:98:00:3c:42:6e:c4:8f:bf:b1:ed:b5:93:bf:ca:df:
0b:b4:79:31:5a:32:3f:78:c5:6e:8e:f5:e2:52:91:51:58:15:
3e:a6:db:98:3a:06:4b:80:3e:ec:4e:66:14:e5:4b:41:a2:01:
9c:7c:70:1c:12:c2:20:a8:6d:5a:e3:0f:ce:0f:61:20:b1:91:
7a:26:31:f1:75:5c:aa:01:7b:5a:2c:db:d7:26:18:54:83:db:
2a:66:db:0e:31:c0:78:28:bd:7b:5d:c9:13:aa:fa:bb:12:ef:
a6:f0:95:85:84:f2:22:aa:ee:a0:38:01:78:06:8b:a7:17:34:
01:01:53:48:b5:c4:d9:06:77:b1:f1:f5:ab:a2:d5:a6:cb:38:
ea:66:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:29:50 2026 by rpki-client