
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
File: naybVs-kN1sQyJkjPVX2Bx7wgyE.mft (raw, json)
Hash identifier: DSmqv5jFwRnEmbxotWkj3nqsH4Uu4l2PogpknX7AVF0=
Subject key identifier: 8F:4A:02:76:FA:95:50:00:A3:CF:47:B4:16:0B:50:B9:58:AA:34:8A
Authority key identifier: 9D:AC:9B:56:CF:A4:37:5B:10:C8:99:23:3D:55:F6:07:1E:F0:83:21
Certificate issuer: /CN=A91A3C2B/serialNumber=9DAC9B56CFA4375B10C899233D55F6071EF08321
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
Manifest number: 4E
Signing time: Fri 25 Sep 2026 08:27:11 +0000
Manifest this update: Fri 25 Sep 2026 08:27:11 +0000
Manifest next update: Fri 02 Oct 2026 08:27:11 +0000
Files and hashes: 1: naybVs-kN1sQyJkjPVX2Bx7wgyE.crl (hash: 6hYYSU48m53zWPZn7OipK7eT/b+8r7DOCQ7DEaGGzwM=)
2: D041C5C644F711F1A94CB46CCC833773.roa (hash: ujAUvex6eehN8/9sST01/gQAgORLT9YZQ+hSBO6s3PM=)
3: D021169C44F611F1AD994B65CC833773.roa (hash: BzWsJODB8wb2BTymGqiakgMGysHOF2qAkOGM8uSKf0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.crl
rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3C2B, serialNumber=9DAC9B56CFA4375B10C899233D55F6071EF08321
Validity
Not Before: Sep 25 08:27:11 2026 GMT
Not After : Oct 2 08:27:11 2026 GMT
Subject: CN=6ab6305f-dff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:11:6f:fe:1e:f2:c7:f4:73:76:73:1c:a8:
e4:ff:66:9e:cb:a9:6f:6c:69:20:e1:62:a6:00:ca:
0c:2b:d7:f6:60:14:50:45:80:68:46:02:7a:3d:98:
71:7e:ef:49:98:16:0a:1d:08:be:f5:bd:a8:2f:aa:
25:56:2a:9b:b9:f1:62:bf:0f:d1:0e:ef:27:6d:2c:
e8:3c:02:c2:8c:70:a2:04:41:9a:f0:7c:16:78:30:
b3:5c:ee:aa:95:0a:4a:20:65:64:a9:09:f9:ed:38:
bb:33:50:8a:e2:c3:45:62:f8:66:4c:d3:fb:5a:7b:
5a:49:7c:6d:17:d6:23:dd:c6:ea:9f:11:be:e8:4b:
82:32:32:dd:b5:ce:b2:bd:be:4c:27:9b:67:59:fa:
c8:92:b1:46:27:a9:06:07:ca:74:d9:58:f7:bb:15:
f1:4b:f2:0b:cf:32:47:bd:19:df:d6:0e:8d:28:06:
b2:c3:91:3c:f7:13:5d:59:af:df:70:d2:c0:cd:c5:
42:7d:e1:fa:8d:76:e7:52:42:3c:21:4a:cd:ed:9c:
0d:7d:c8:47:9b:9e:ba:57:cf:20:6f:07:61:d0:a0:
80:2d:f2:19:23:49:d3:0b:d4:a5:85:b2:b0:f2:76:
41:df:4d:24:b3:81:a3:01:8e:01:ce:7e:3f:49:e3:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4A:02:76:FA:95:50:00:A3:CF:47:B4:16:0B:50:B9:58:AA:34:8A
X509v3 Authority Key Identifier:
keyid:9D:AC:9B:56:CF:A4:37:5B:10:C8:99:23:3D:55:F6:07:1E:F0:83:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:49:37:a3:7b:2f:f3:b9:69:09:5c:70:e9:95:f0:8a:4b:40:
f7:64:e5:da:78:ad:09:58:ca:bb:35:83:50:f3:66:04:08:ce:
85:2c:4a:fa:74:1d:d5:21:23:d8:f3:9b:73:61:3f:55:37:ce:
34:07:9b:41:df:ea:5e:64:0d:e1:16:c0:2b:aa:35:57:c9:0c:
eb:6c:4b:0e:99:72:ee:b0:20:d2:82:d4:e1:8f:3d:3d:5e:23:
d0:b1:b7:d7:71:91:1f:2b:71:cf:1e:24:eb:29:56:58:49:59:
4a:1a:56:34:cb:be:53:5b:93:a1:4b:2f:bd:44:92:25:00:38:
68:6a:fb:cd:ca:30:88:70:c6:da:14:a9:c5:ff:87:0c:c5:14:
94:26:53:3d:4a:ab:ff:54:7d:e6:f8:5c:46:9a:be:66:83:20:
46:fd:42:d1:6d:9e:04:dd:b6:ca:56:82:6d:f1:de:10:dd:f1:
82:da:2f:07:b9:a5:19:27:e8:29:da:fb:33:2a:20:f8:06:45:
de:8f:1d:0d:21:a0:97:f1:6b:a7:19:84:0e:65:7a:c3:28:54:
2c:cc:84:0a:f2:97:00:e6:08:d2:83:27:21:f9:19:5c:08:5d:
01:1d:80:a4:d6:74:04:c3:33:5e:25:1b:47:9b:f9:e9:7c:21:
91:f7:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:12:19 2026 by rpki-client