
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json)
Hash identifier: 3ob5qsStxiONLow7rkVROB0MiC4D4tS5hZK9J3SFwac=
Subject key identifier: 3B:A9:64:2A:14:03:3D:4F:4D:8E:98:4E:D9:2E:5C:10:15:DD:2C:17
Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Certificate serial: 0266
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
Manifest number: 0261
Signing time: Wed 13 May 2026 02:13:33 +0000
Manifest this update: Wed 13 May 2026 02:13:33 +0000
Manifest next update: Wed 20 May 2026 02:13:33 +0000
Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: OlEsrW+lqjVTwvb6J29hmupyeHXdqb9uNhFzSRYIZVE=)
2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: DEHa9wU+Ix9r57aVN3GaYMWyOOaqTPBIMaPsZXZX4DU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Validity
Not Before: May 13 02:13:33 2026 GMT
Not After : May 20 02:13:33 2026 GMT
Subject: CN=6a03de4d-dd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:08:b0:7b:8e:0d:73:51:01:d0:86:69:2f:
81:1b:a8:53:c3:15:64:5c:53:3c:08:19:92:16:f3:
39:ff:ec:8a:ba:1d:c3:75:8c:38:92:67:55:66:cb:
96:b3:10:07:03:b8:24:27:eb:8d:09:c8:19:f7:cd:
e9:30:1a:f7:3d:c3:67:56:43:e5:ce:05:4b:a4:26:
9f:a3:26:f7:ee:c5:ea:8f:96:68:f9:6c:97:ea:dd:
11:21:55:de:b6:ba:c8:d2:75:16:c1:93:0a:62:15:
96:48:11:8d:5c:66:c1:94:d5:26:b4:be:c4:8a:a8:
90:42:be:a6:f6:7b:a0:9b:f4:71:d0:b9:84:be:d2:
51:c0:89:c6:7a:ff:b5:2d:24:90:ce:78:b5:57:0e:
7b:56:b4:2c:59:18:81:75:3e:3b:53:8b:7b:16:0a:
89:ad:9c:4a:ae:c7:f2:3f:e7:a7:40:93:01:18:ce:
4c:62:a6:1b:81:ab:c7:89:18:51:52:21:af:c4:9a:
a7:e1:f9:b3:7a:f9:57:92:dc:2f:95:92:9c:9a:f9:
b1:7d:d1:9d:a1:7a:6c:77:eb:3a:86:99:77:df:1f:
78:bf:b8:88:17:8d:da:39:35:83:ce:1d:06:d5:dc:
21:7c:04:8f:5e:5c:1e:c2:f8:c6:25:c0:d1:4e:b8:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:64:2A:14:03:3D:4F:4D:8E:98:4E:D9:2E:5C:10:15:DD:2C:17
X509v3 Authority Key Identifier:
keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:7b:a4:be:4a:6f:b1:41:30:94:2e:21:04:5c:31:9c:41:8e:
d5:f1:b0:80:31:11:71:9f:0a:78:e0:68:ff:2b:47:1b:33:2b:
d7:55:e3:a3:03:7e:e0:4b:f0:f0:d1:9b:26:f2:d5:b4:d7:a8:
e6:3e:8a:0a:cf:ff:f1:13:9e:93:ad:8e:a7:3b:b7:7b:6b:21:
4a:e8:a8:b1:24:fa:31:a9:59:aa:ef:97:2c:6e:3e:51:99:58:
b7:74:8a:89:4b:0d:82:e3:c7:9f:f9:a8:0d:75:72:df:db:5b:
d8:73:f8:52:1d:27:70:6b:19:61:82:b9:7c:21:d7:fd:c8:9c:
d0:06:4f:51:92:87:b2:66:74:4b:50:9e:58:44:9d:ab:d2:81:
cd:b5:40:bd:db:0b:f5:78:02:0f:87:3f:db:28:07:33:e5:f5:
6f:62:ed:de:f0:47:7b:a5:a3:02:b1:1e:36:b2:88:df:5f:9d:
e2:56:b6:a1:fd:32:69:7a:45:67:0b:0b:61:0d:10:b0:ca:d2:
27:1b:13:8b:b5:0a:56:57:77:36:8b:92:a3:3a:33:9c:40:14:
d6:71:a5:b8:73:24:c2:8c:73:c6:51:85:60:87:c7:82:c9:45:
0f:ee:7c:c0:2d:fd:9c:70:04:be:a9:8f:89:53:c5:3d:e1:1b:
12:57:95:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF
MTE5Mzc0NEMwHhcNMjYwNTEzMDIxMzMzWhcNMjYwNTIwMDIxMzMzWjAYMRYwFAYD
VQQDEw02YTAzZGU0ZC1kZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRcIsHuODXNRAdCGaS+BG6hTwxVkXFM8CBmSFvM5/+yKuh3DdYw4kmdVZsuW
sxAHA7gkJ+uNCcgZ983pMBr3PcNnVkPlzgVLpCafoyb37sXqj5Zo+WyX6t0RIVXe
trrI0nUWwZMKYhWWSBGNXGbBlNUmtL7EiqiQQr6m9nugm/Rx0LmEvtJRwInGev+1
LSSQzni1Vw57VrQsWRiBdT47U4t7FgqJrZxKrsfyP+enQJMBGM5MYqYbgavHiRhR
UiGvxJqn4fmzevlXktwvlZKcmvmxfdGdoXpsd+s6hpl33x94v7iIF43aOTWDzh0G
1dwhfASPXlwewvjGJcDRTriu9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDupZCoU
Az1PTY6YTtkuXBAV3SwXMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD
RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk
RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO
WXFQZWlQWHotaVRoR1RkRXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv3ukvkpvsUEwlC4hBFwxnEGO1fGwgDERcZ8KeOBo/ytHGzMr11XjowN+4Evw
8NGbJvLVtNeo5j6KCs//8ROek62Opzu3e2shSuiosST6MalZqu+XLG4+UZlYt3SK
iUsNguPHn/moDXVy39tb2HP4Uh0ncGsZYYK5fCHX/cic0AZPUZKHsmZ0S1CeWESd
q9KBzbVAvdsL9XgCD4c/2ygHM+X1b2Lt3vBHe6WjArEeNrKI31+d4la2of0yaXpF
ZwsLYQ0QsMrSJxsTi7UKVld3NouSozoznEAU1nGluHMkwoxzxlGFYIfHgslFD+58
wC39nHAEvqmPiVPFPeEbEleV5w==
-----END CERTIFICATE-----
Generated at Wed May 13 16:23:08 2026 by rpki-client