
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
File: N2LeNhaqS6BLeurLVIuGpi5vFw4.mft (raw, json)
Hash identifier: eo9fppaUAn+Gv3EaXeCzowKvB6WOmnEAQt/pNjWiA+I=
Subject key identifier: 85:53:27:B6:A2:A5:A7:D4:ED:DE:8B:CB:3A:A6:77:18:6A:31:8D:0A
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Certificate issuer: /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
Manifest number: 60
Signing time: Thu 23 Jul 2026 10:09:47 +0000
Manifest this update: Thu 23 Jul 2026 10:09:47 +0000
Manifest next update: Thu 30 Jul 2026 10:09:47 +0000
Files and hashes: 1: N2LeNhaqS6BLeurLVIuGpi5vFw4.crl (hash: GXggkQcZStGmsxTMGwrDz+Jnfh+7gRVwz4r416nb3hs=)
2: 3A8D72EC50E511F1B3C6CC42C3833773.roa (hash: 5UipJ4+NR1gmwBU9u4POViONi8ldwVxPixTIJgWqppg=)
3: 3B91F0E650E511F1B3C6CC42C3833773.roa (hash: pdQ7ogtc0OuHjN8nJXSLfEsn91VaxjO1B4iSxidpvWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Validity
Not Before: Jul 23 10:09:47 2026 GMT
Not After : Jul 30 10:09:47 2026 GMT
Subject: CN=6a61e86b-0386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:05:d1:0e:16:19:8e:e2:a4:d7:f6:1e:de:
40:96:02:0d:c2:db:90:06:aa:7b:6f:0a:36:4f:57:
41:8c:91:86:78:7a:f8:9a:44:81:28:2e:78:be:e2:
89:ab:a7:26:a3:58:4b:ed:aa:27:e6:61:7c:04:81:
d0:04:19:c4:6d:e7:ef:ea:0f:7b:ab:99:d7:ed:0a:
2e:7f:01:fa:49:6c:ba:5e:0b:c2:a6:df:73:fc:de:
4f:07:26:f6:f1:e2:be:51:c9:be:68:3b:b1:fa:99:
1b:0d:24:1e:ba:b3:47:c2:91:a3:c5:13:34:2d:d6:
4f:14:59:33:55:ff:bd:64:58:cf:33:50:ed:aa:d9:
55:7b:a5:da:29:d9:a9:18:e0:e8:bf:fe:d9:b0:65:
9b:dd:81:37:bf:aa:a2:67:d1:a9:bd:b9:fa:16:89:
c9:da:c9:98:40:bb:75:99:04:8e:fc:1a:ff:34:a7:
f1:53:7e:e7:56:dd:db:9b:88:30:54:a4:3e:23:e0:
d7:a1:85:68:a1:de:ca:e6:0b:47:9d:36:88:4d:df:
7d:c3:82:6e:cd:54:ec:09:d3:69:c3:d4:6d:61:21:
37:f7:0a:90:5a:a3:a8:12:1f:36:0e:4b:a6:4d:ac:
14:ac:4c:41:e5:f9:f8:ca:ae:da:14:a2:c1:bf:b0:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:53:27:B6:A2:A5:A7:D4:ED:DE:8B:CB:3A:A6:77:18:6A:31:8D:0A
X509v3 Authority Key Identifier:
keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:aa:5d:90:49:5c:34:03:0a:d3:6e:2a:a6:f4:1c:3c:a4:41:
df:ef:3d:47:cf:a2:3b:51:27:75:ae:19:40:64:ce:aa:74:50:
39:1b:81:b6:77:15:de:0a:dd:d5:53:ce:a8:70:60:89:22:7f:
a9:c6:4d:61:cc:1d:de:89:06:8c:c4:fe:be:4b:c0:d8:4e:83:
50:43:b8:2a:9b:15:3e:09:bd:bd:81:06:a6:65:b1:21:6c:49:
f6:9f:96:64:4d:4a:ff:21:0e:bd:ad:c8:54:5a:ff:2d:6e:c5:
d2:b5:78:a1:70:31:b8:71:f4:63:cf:6a:00:ae:84:93:c8:9e:
c8:2b:0a:71:13:50:44:d1:21:09:0b:69:83:0a:47:e1:e3:4b:
49:3f:fa:90:8c:65:65:5a:2e:5f:d9:e0:4b:82:15:2e:1c:4e:
d2:1d:25:62:41:e8:3b:eb:0a:e8:00:8e:60:63:43:0c:5f:1d:
b4:1e:cb:3a:c2:c9:7d:b9:25:48:38:df:bd:b8:09:4d:05:7f:
0d:88:60:0c:11:ba:b0:27:e6:d1:52:4e:a8:83:24:03:2a:b3:
ba:bf:d5:0b:d3:cd:e6:27:a0:4b:4f:97:0c:21:1a:e6:1a:0c:
39:e3:68:68:99:d1:6e:9a:9e:b0:d3:29:ef:c7:03:7d:ca:21:
f5:fe:99:55
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MzY2MDExMC8GA1UEBRMoMzc2MkRFMzYxNkFBNEJBMDRCN0FFQUNCNTQ4Qjg2QTYy
RTZGMTcwRTAeFw0yNjA3MjMxMDA5NDdaFw0yNjA3MzAxMDA5NDdaMBgxFjAUBgNV
BAMTDTZhNjFlODZiLTAzODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUwwXRDhYZjuKk1/Ye3kCWAg3C25AGqntvCjZPV0GMkYZ4eviaRIEoLni+4omr
pyajWEvtqifmYXwEgdAEGcRt5+/qD3urmdftCi5/AfpJbLpeC8Km33P83k8HJvbx
4r5Ryb5oO7H6mRsNJB66s0fCkaPFEzQt1k8UWTNV/71kWM8zUO2q2VV7pdop2akY
4Oi//tmwZZvdgTe/qqJn0am9ufoWicnayZhAu3WZBI78Gv80p/FTfudW3dubiDBU
pD4j4NehhWih3srmC0edNohN333Dgm7NVOwJ02nD1G1hITf3CpBao6gSHzYOS6ZN
rBSsTEHl+fjKrtoUosG/sCkVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhVMntqKl
p9Tt3ovLOqZ3GGoxjQowHwYDVR0jBBgwFoAUN2LeNhaqS6BLeurLVIuGpi5vFw4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzNjYwL0RFRTlDNjgwMDAx
NjExRjE4QTRDRDk5QTQxNkY1NkJDL04yTGVOaGFxUzZCTGV1ckxWSXVHcGk1dkZ3
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTjJMZU5oYXFTNkJMZXVyTFZJdUdwaTV2Rnc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz
NjYwL0RFRTlDNjgwMDAxNjExRjE4QTRDRDk5QTQxNkY1NkJDL04yTGVOaGFxUzZC
TGV1ckxWSXVHcGk1dkZ3NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCEql2QSVw0AwrTbiqm9Bw8pEHf7z1Hz6I7USd1rhlAZM6qdFA5G4G2dxXeCt3V
U86ocGCJIn+pxk1hzB3eiQaMxP6+S8DYToNQQ7gqmxU+Cb29gQamZbEhbEn2n5Zk
TUr/IQ69rchUWv8tbsXStXihcDG4cfRjz2oAroSTyJ7IKwpxE1BE0SEJC2mDCkfh
40tJP/qQjGVlWi5f2eBLghUuHE7SHSViQeg76wroAI5gY0MMXx20Hss6wsl9uSVI
ON+9uAlNBX8NiGAMEbqwJ+bRUk6ogyQDKrO6v9UL083mJ6BLT5cMIRrmGgw542ho
mdFump6w0ynvxwN9yiH1/plV
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:04:52 2026 by rpki-client