
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
File: N6Zf20DoxlmxflAA-ommVoCXbVs.mft (raw, json)
Hash identifier: WAXR1w+FKB3mHy+4x4l3+JU4MgsM9m0msRFCY3SlbH0=
Subject key identifier: A2:34:75:1F:FB:90:20:9D:64:DB:12:04:A0:48:95:AA:08:FC:83:9C
Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B
Certificate issuer: /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
Manifest number: 82
Signing time: Wed 25 Mar 2026 06:58:30 +0000
Manifest this update: Wed 25 Mar 2026 06:58:29 +0000
Manifest next update: Wed 01 Apr 2026 06:58:29 +0000
Files and hashes: 1: N6Zf20DoxlmxflAA-ommVoCXbVs.crl (hash: /QXNTBPB3gKQC2dlWean2G+7VQrTSIrwhJI8FwBtwQw=)
2: 482874AE710E11F0B4CBA430C4F9AE02.roa (hash: Enrr3cuFwRAqoDocsM8n82Zm7sQ1w4sn1Dd/0z7i8QU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl
rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
Validity
Not Before: Mar 25 06:58:29 2026 GMT
Not After : Apr 1 06:58:29 2026 GMT
Subject: CN=69c38796-bfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:c8:30:ea:51:96:25:3c:02:d7:59:db:43:
2c:b4:9e:83:7f:46:3b:c2:01:91:ae:c8:70:1f:5f:
50:03:cf:05:37:fc:bb:28:92:cf:f5:44:23:fa:71:
64:f6:ba:ea:19:5b:b7:ea:4c:6e:fd:0b:6f:92:af:
76:7b:35:1a:0b:fb:be:8a:0e:de:b1:27:fb:af:90:
f6:2b:07:bd:f9:c7:6f:a8:b4:4c:5d:87:da:97:e4:
2d:fd:0a:05:aa:22:82:97:94:f3:c4:b5:17:ca:83:
0b:cf:50:d4:e0:e1:7f:cf:25:2a:02:9b:a3:d3:99:
f6:5c:7d:fa:f0:22:60:75:2a:d4:7e:1a:cf:f0:49:
62:fb:26:d2:52:65:71:cc:29:2f:f0:d2:1e:f3:7f:
d4:e5:5f:13:02:dc:49:b1:ef:fc:35:e2:08:f9:9a:
c0:44:a2:b9:0a:9c:4f:6f:a8:ac:62:e0:3f:fe:3c:
35:c1:76:a8:7e:b5:d7:4c:22:7d:e4:19:d8:d5:81:
e1:45:74:72:64:19:cf:40:0f:1d:2d:ba:33:70:c3:
24:a2:34:81:76:92:d3:ef:cc:45:5b:83:4f:0e:24:
c2:7a:60:3b:be:d6:35:30:5d:51:c5:f4:1a:cf:19:
02:3b:8c:1e:ed:0e:56:22:08:d7:0c:40:ff:b3:a2:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:34:75:1F:FB:90:20:9D:64:DB:12:04:A0:48:95:AA:08:FC:83:9C
X509v3 Authority Key Identifier:
keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:11:06:17:80:0c:64:a1:ee:5d:c5:d0:0c:d1:63:61:9b:
9f:8d:82:4c:e5:b6:12:72:f8:cd:a6:34:8f:d8:20:9b:27:b8:
54:b8:31:f7:21:13:f1:64:af:dd:51:d0:1a:02:9b:06:86:d1:
33:08:db:14:ca:f3:0b:51:73:b4:08:d9:eb:ff:af:8f:41:38:
ac:9c:2f:81:08:8f:e0:69:23:08:47:56:75:d3:03:2c:56:a8:
2b:90:37:74:4b:f2:e5:9b:21:2b:da:e8:4a:d3:f3:b9:45:ce:
73:a3:6d:7c:c5:f3:69:66:a4:63:fa:0a:ce:40:fe:bb:9a:26:
9f:aa:3e:36:a3:3f:d1:f8:76:b6:af:f6:d7:d1:dc:7a:d6:5f:
5b:d2:50:e6:f2:64:52:79:4d:dc:78:fb:0d:73:e3:32:33:c6:
d2:e3:da:9b:c1:37:41:9f:a5:58:6e:18:da:fa:03:d2:e0:9b:
4e:3c:f2:6e:a6:27:61:13:b8:df:6d:56:48:15:e3:26:a7:9a:
cc:4d:53:4a:c5:94:90:19:ab:0b:32:39:70:78:40:00:4d:84:
bb:c8:42:33:fc:c7:9b:b2:bd:06:4c:d1:97:22:1b:ff:44:a0:
21:0d:84:c6:a9:d0:53:ce:34:32:0e:1c:bb:43:26:10:8f:a4:
45:8e:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:40 2026 by rpki-client