
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
File: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json)
Hash identifier: Fj8skeMNDOqukz6RjtnAkA8N4T4EK+EkhTO2k/2XzGc=
Subject key identifier: 4E:15:5D:3F:7C:A6:77:F9:E1:54:65:D0:37:25:44:66:2A:13:38:EF
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial: 0FB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
Manifest number: 0EC3
Signing time: Sat 10 Oct 2026 17:50:07 +0000
Manifest this update: Sat 10 Oct 2026 17:50:07 +0000
Manifest next update: Sat 17 Oct 2026 17:50:07 +0000
Files and hashes: 1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: MAISY7lq/sTjAeQNDtYDwq42af4K5BJJyIWDeZ4L7oc=)
2: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: 4Dur1jIx3Py+FV9GnftEwHBIoGYO+qrpeIHWnQl1eg4=)
3: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: rOBLE6A0EIALDzqcM8ydFc2oovMN2wtUd1p0AWxIOoE=)
4: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: dpkimmBVqBA7Hxpk3m2+4JsPBW+BiPPwqR13NATbL1g=)
5: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: wLoXAFA4bLf19b9jPn3a1aNAYCXtzzCyZRCHGXoGTTs=)
6: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: 7ySchihxHfebU2ZhU1CGMeKuJprNHeKF8ZvTEPQm+Ps=)
7: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: YFagb40AbqmE67WpsPHQQlwPOv44QLtDjwGBLFO+SMg=)
8: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: DvevpJu7vWFY5EjSZxts3Sc7D51eP/pW+05crk3lgB0=)
9: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: NI9ztI/dUr8wepd6qEzurrTRw6jIjbbQY+3nIC256Cg=)
10: B066E5B6C5C111F0BD9B1831C4F9AE02.roa (hash: 3SAss0MqifvhYCSKVAgI5ST/pMGSkdk9iBE2hF9Y7Y8=)
11: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: 1f2phcqQmmi3QewwHTntymoXxlY1vaGBHZf4d83qpRc=)
12: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: /lqE0fcVtZNviMtzF6KcdvDYxyFd2WfKbqPkhxIQA0g=)
13: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: FRg/vpc/AMBGrvMjIcOoVz1j/708E2nJzNJ2bFS2Beg=)
14: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: IEzFe4BPkAZ0NzJZL6yH2kjj+JWlwA9NjN+OrbuWGN8=)
15: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: zlI1hG7GiNHiVUCacl+MGSO9NxzvZc+dp6nf+cN3YqQ=)
16: 03774914696211EC8A05D115C4F9AE02.roa (hash: 529ic9qz0jYOTL+Y9hkAcJ9upS4aOt6qG85i+oz5nlY=)
17: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: VF5Ihkgss3eEF0eF0RXv99yvFaNnXbi4F1C1EW0C81k=)
18: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: CPQelJmSoQmrjckxju62zT4kF0v4K2A3XLdBMFmD/A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 17:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4022 (0xfb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Validity
Not Before: Oct 10 17:50:07 2026 GMT
Not After : Oct 17 17:50:07 2026 GMT
Subject: CN=6aca7acf-cda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:88:4f:45:34:10:fd:c0:70:48:e7:37:3f:
cf:16:4f:84:a2:ad:5e:dc:66:64:89:cd:e3:3b:85:
81:fc:a8:16:87:ca:02:5f:d1:8b:bd:e9:9e:fd:41:
68:71:07:18:c7:21:44:f9:15:c9:85:13:83:49:5c:
43:25:4c:c5:50:0b:e3:17:69:be:00:ad:ee:62:fe:
62:dc:02:3d:2d:83:d4:78:6f:6a:2e:e0:62:57:cb:
34:41:f9:8e:5b:20:9b:dd:61:f8:9d:09:c4:78:7b:
9d:86:9b:55:c5:d6:2a:67:94:39:4a:ae:de:3d:a5:
db:bd:19:d8:64:51:ee:31:27:d7:88:5d:6c:3b:a2:
0a:f2:43:dd:63:eb:c5:98:91:08:fb:f9:06:cf:38:
c9:21:96:99:e4:6e:54:db:a5:d7:cb:a8:06:14:b8:
9f:24:3a:91:e8:81:b1:be:f3:c8:71:ce:4e:34:2b:
61:d1:1c:bf:a0:99:4c:58:ac:67:f6:69:33:db:91:
3a:c2:f6:4b:9b:09:d2:6f:ba:24:31:98:53:44:02:
0f:bb:1f:1f:08:b0:08:6c:ef:04:80:8b:6a:9a:c5:
98:76:f6:09:58:3b:6e:f3:b9:d1:00:36:11:90:12:
f9:01:a7:1b:4c:e4:14:48:5c:b9:88:11:a9:36:20:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:15:5D:3F:7C:A6:77:F9:E1:54:65:D0:37:25:44:66:2A:13:38:EF
X509v3 Authority Key Identifier:
keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:1d:5c:a2:47:c0:03:0b:64:3e:aa:f1:0f:fa:8e:83:30:19:
c1:0b:14:07:8f:f7:b6:40:0c:39:bb:48:52:36:ec:82:b1:c4:
5d:d2:6e:2f:10:6a:fc:7e:d4:37:42:f1:65:3a:96:df:50:93:
cd:52:1d:38:28:02:c4:c1:3e:a2:9c:6a:61:bb:e1:43:42:1c:
98:8b:f0:78:58:59:e9:66:07:ad:dd:f2:93:f0:24:a6:28:33:
9e:5c:bc:55:85:e7:af:b2:b3:2e:b6:39:3f:85:c8:35:7b:1b:
6a:9e:f5:af:d0:a3:96:81:b2:0b:12:be:d1:ac:67:3c:18:ac:
49:8e:73:0b:41:cc:bb:09:ca:75:42:bd:4d:da:78:b7:04:73:
59:50:18:20:59:f7:bf:70:81:aa:6b:e3:ba:4a:13:b4:36:22:
39:f6:e8:a4:84:3e:0a:f3:ad:b6:04:f6:0e:da:4b:41:77:76:
96:6f:85:20:ec:fa:41:4b:13:42:9d:f7:b5:15:f5:85:c0:38:
71:11:e1:21:e4:7c:15:7d:e9:ec:f6:58:6f:53:6b:79:8d:e4:
05:42:b4:c9:68:0b:29:41:12:58:18:02:2c:a6:29:4f:37:67:
90:36:53:d3:72:85:80:6b:40:eb:7a:c2:df:20:67:2e:48:d0:
24:e2:94:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:59:32 2026 by rpki-client