
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
File: N2LeNhaqS6BLeurLVIuGpi5vFw4.mft (raw, json)
Hash identifier: NGZ1eLKDZHYpF6uPk7nJSQYzyrBashdg8b3HjiC413s=
Subject key identifier: 79:FB:C7:9A:69:1D:97:20:A3:CD:26:14:E1:8F:55:22:34:91:AE:BB
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Certificate issuer: /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
Manifest number: 3A
Signing time: Tue 12 May 2026 02:54:12 +0000
Manifest this update: Tue 12 May 2026 02:54:11 +0000
Manifest next update: Tue 19 May 2026 02:54:11 +0000
Files and hashes: 1: N2LeNhaqS6BLeurLVIuGpi5vFw4.crl (hash: Zs9G0vKKOACS7CvHx0cbFvOnPL+2dRmmzk7V5gpB/W8=)
2: AA175058274911F1878D13C8B4833773.roa (hash: kTIz7rz7OZ8EQKnSrQuhCggmlAoEm989ju8R+p6peKU=)
3: D7E35D8A4DAD11F1962E9D16A8833773.roa (hash: dZnVkJ9Du+NonF+jeiJKKDTcwr6+Gn8YtN3j2dsH8mI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 02:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Validity
Not Before: May 12 02:54:11 2026 GMT
Not After : May 19 02:54:11 2026 GMT
Subject: CN=6a029653-b376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:9f:8d:2b:b1:0a:9c:6b:f0:2f:17:ac:53:
3b:b6:fb:70:f0:77:a5:c8:0c:d6:8e:14:f9:4b:04:
f4:c5:5a:1e:a0:b1:cd:b4:c1:29:ed:b9:ee:0c:b9:
f9:89:e3:b9:ae:f2:3b:da:92:dc:30:e4:2e:ac:3b:
64:d6:53:f9:58:37:24:9e:26:5b:cf:11:3d:7e:6a:
fa:c2:d7:d9:1f:ef:c6:ff:f7:33:e2:f2:61:4b:89:
26:50:d3:5c:61:92:d4:cb:2c:0d:b4:51:62:7e:e9:
8a:e5:b5:ca:82:ad:68:39:08:ee:cc:ad:8a:2e:57:
9a:47:e3:de:32:f9:46:d0:24:18:7a:57:b7:c1:7d:
96:ae:16:04:1f:c6:3c:2b:28:ca:8f:4b:ec:5e:f0:
a2:90:4a:e8:ee:ce:c8:ca:5f:f7:23:b5:3d:1e:de:
51:53:5c:48:fe:42:e7:2f:96:10:46:fd:a9:10:8e:
82:b6:a6:58:55:29:55:aa:ea:77:ef:1c:7d:73:1e:
c5:54:62:dc:75:9c:ee:c9:4a:f4:e2:6d:99:9f:3d:
f8:74:03:b0:74:38:7d:1c:60:0e:1d:3a:d0:b7:f7:
03:42:af:40:4b:30:e8:be:04:90:d2:06:ff:44:e9:
1c:7f:cc:91:df:34:40:4d:86:ba:63:8c:d6:93:e9:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FB:C7:9A:69:1D:97:20:A3:CD:26:14:E1:8F:55:22:34:91:AE:BB
X509v3 Authority Key Identifier:
keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:59:89:63:ed:f7:e7:4a:04:fb:eb:78:99:90:5e:f0:61:ac:
c7:cc:8c:77:24:94:f7:4e:71:bf:3d:af:f4:dd:b9:b4:8d:0f:
31:d3:d2:a6:0a:26:76:99:bb:09:0a:71:36:91:6c:66:1d:a9:
18:84:36:a7:ac:07:38:09:f0:bc:99:a6:00:81:2f:9e:62:9c:
88:52:ee:d5:0b:cd:3b:45:a6:0b:62:95:3c:11:4d:a3:13:84:
18:fd:06:49:23:9c:a1:98:ab:a8:18:b7:74:03:fd:e6:d4:0c:
20:56:da:5a:37:bc:82:15:4a:2b:3c:b0:8f:09:eb:85:cd:8b:
99:88:d9:6c:1f:f7:90:2d:3a:24:a2:ff:f2:9b:04:00:24:a0:
52:6b:d6:14:a8:d4:60:97:67:4d:d8:2a:32:8e:e9:1d:c6:05:
55:c3:33:e7:16:51:ab:23:e8:af:52:69:a5:87:6c:5b:7f:ff:
a2:9f:26:48:52:04:a5:f4:87:26:b7:ef:78:03:8f:d1:c4:28:
05:63:82:4e:ab:70:d0:9e:45:47:f5:03:85:29:72:0b:7b:3b:
fa:ab:b3:42:40:9c:86:72:97:32:be:65:b7:ba:58:9b:76:70:
24:f4:5e:e1:43:e1:5c:e7:6d:44:44:bf:d8:bc:35:a3:a1:89:
b9:6c:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:13:59 2026 by rpki-client