
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json)
Hash identifier: 6OnOjCFsvyLtY2JBqwcnQvFoMNgGFeGYG161hf44mrk=
Subject key identifier: 0F:B8:5E:10:6F:A6:1B:58:9F:F4:79:D2:92:85:73:8B:4E:26:9B:F1
Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Certificate serial: 0D03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
Manifest number: 0CFA
Signing time: Tue 22 Sep 2026 18:16:22 +0000
Manifest this update: Tue 22 Sep 2026 18:16:21 +0000
Manifest next update: Tue 29 Sep 2026 18:16:21 +0000
Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: 7NcnatXOZj+igrAP+BfIVh/jVpfzBHoRY+7J7Llrjrs=)
2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: +1OqTpdYQThGOs42BYoaAj2a2Cg6wC/jJbBuEZgzjdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3331 (0xd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Validity
Not Before: Sep 22 18:16:21 2026 GMT
Not After : Sep 29 18:16:21 2026 GMT
Subject: CN=6ab2c5f5-9742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:5f:b9:a3:77:4a:2e:d1:55:42:f5:f9:b3:
4f:2f:47:ee:cb:c6:e9:32:c9:c5:3b:da:be:ce:76:
72:da:98:11:72:fe:6d:a5:b5:b8:29:41:0a:06:d6:
fe:6d:f9:6d:9e:ea:ad:a4:e2:7b:a2:79:5d:5f:51:
34:2f:3e:cd:79:7e:98:12:95:c3:ae:0f:fb:46:3a:
bf:f2:09:fa:ad:b0:7c:76:4c:38:78:3d:92:59:13:
56:6a:2a:9b:4d:2a:18:df:00:63:d6:5d:b3:0a:52:
7c:3e:05:1e:57:7c:3e:35:94:ce:28:0d:03:ce:2b:
a4:dc:e1:f6:0d:65:53:bb:55:41:0b:8a:19:f9:fc:
d6:07:58:d2:79:0f:5f:46:52:4c:38:16:c8:a1:f3:
6d:3c:f8:8f:90:23:e6:92:6b:ec:ad:9b:ce:fe:da:
d3:d1:ca:0b:5b:98:5a:77:db:6a:9c:04:c3:9d:0f:
2c:ee:87:84:a9:5a:47:ca:19:2b:80:94:e3:74:47:
5a:fc:49:fe:3c:4b:7c:e9:2b:25:18:89:a5:77:31:
d6:82:09:3d:39:94:cf:ca:91:35:e2:f1:c4:12:1d:
ee:25:a9:18:a9:ff:69:4f:35:a9:70:a1:74:dc:b3:
f5:5c:f5:c7:43:6c:ec:f6:bc:bf:79:cf:6e:d8:90:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B8:5E:10:6F:A6:1B:58:9F:F4:79:D2:92:85:73:8B:4E:26:9B:F1
X509v3 Authority Key Identifier:
keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3b:e4:59:69:06:cc:34:a8:d9:2a:b4:1d:a1:4e:30:0d:23:
8e:9f:83:d0:d9:bd:60:6b:14:10:14:e5:71:74:5c:94:c3:99:
e8:f0:eb:78:48:90:f9:ff:c5:5f:bf:f1:d5:ea:50:2e:3a:d4:
dc:9c:f4:13:83:8c:e0:53:ed:85:f6:57:3b:31:f0:69:b8:d4:
1a:88:96:2e:95:15:b0:10:47:06:ce:c0:53:84:20:a8:a5:01:
40:c4:d5:a9:cf:ff:4c:20:54:79:3b:7c:42:af:a2:86:89:a4:
a0:92:6d:9b:41:8b:3c:b1:29:5a:1d:d8:84:fe:ae:f1:44:a2:
47:80:92:b9:f1:b8:42:7d:e4:a2:50:60:1f:ca:ee:46:1a:dd:
e0:d1:cf:cf:d1:dc:c5:b6:f2:1a:8f:9d:0d:2e:75:4b:49:f5:
22:a1:35:69:21:cd:3f:33:e4:08:5d:da:8f:ae:df:71:3f:e2:
91:4c:c6:4d:47:84:27:8d:20:30:f9:b5:ec:f7:d5:c7:5b:87:
7c:12:67:bf:26:8e:4a:0f:8c:be:92:bf:a8:4c:ef:93:f8:01:
b2:ea:82:9f:be:6c:e7:6e:36:df:04:02:4e:98:8a:64:bd:bd:
2f:01:ec:93:a2:1d:e0:74:68:94:c5:be:da:1a:b8:c9:3e:00:
05:10:ca:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2
RDgxMkY1NUIwHhcNMjYwOTIyMTgxNjIxWhcNMjYwOTI5MTgxNjIxWjAYMRYwFAYD
VQQDEw02YWIyYzVmNS05NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzs9fuaN3Si7RVUL1+bNPL0fuy8bpMsnFO9q+znZy2pgRcv5tpbW4KUEKBtb+
bfltnuqtpOJ7onldX1E0Lz7NeX6YEpXDrg/7Rjq/8gn6rbB8dkw4eD2SWRNWaiqb
TSoY3wBj1l2zClJ8PgUeV3w+NZTOKA0Dziuk3OH2DWVTu1VBC4oZ+fzWB1jSeQ9f
RlJMOBbIofNtPPiPkCPmkmvsrZvO/trT0coLW5had9tqnATDnQ8s7oeEqVpHyhkr
gJTjdEda/En+PEt86SslGImldzHWggk9OZTPypE14vHEEh3uJakYqf9pTzWpcKF0
3LP1XPXHQ2zs9ry/ec9u2JAi5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+4XhBv
phtYn/R50pKFc4tOJpvxMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx
QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5
VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D
U0NheHZQbHZQSGR0Z1M5VnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqTvkWWkGzDSo2Sq0HaFOMA0jjp+D0Nm9YGsUEBTlcXRclMOZ6PDreEiQ+f/F
X7/x1epQLjrU3Jz0E4OM4FPthfZXOzHwabjUGoiWLpUVsBBHBs7AU4QgqKUBQMTV
qc//TCBUeTt8Qq+ihomkoJJtm0GLPLEpWh3YhP6u8USiR4CSufG4Qn3kolBgH8ru
Rhrd4NHPz9HcxbbyGo+dDS51S0n1IqE1aSHNPzPkCF3aj67fcT/ikUzGTUeEJ40g
MPm17PfVx1uHfBJnvyaOSg+MvpK/qEzvk/gBsuqCn75s52423wQCTpiKZL29LwHs
k6Id4HRolMW+2hq4yT4ABRDK2w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:46:52 2026 by rpki-client