
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json)
Hash identifier: cXEri0SD132OdRZho6eJ1IAN1/MHYihev6FHFkBeBws=
Subject key identifier: 06:7B:40:4B:D9:3D:D5:A8:84:23:2F:F7:37:2B:53:CF:8A:36:D9:98
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial: 1D1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
Manifest number: 1CFF
Signing time: Tue 12 May 2026 16:09:20 +0000
Manifest this update: Tue 12 May 2026 16:09:20 +0000
Manifest next update: Tue 19 May 2026 16:09:20 +0000
Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: kbowdP8GRdJxMw2S9fhOFFNDwN+ewoGTxu6A6RxlLG4=)
2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: Y1gVzkwfOLuyPoIfE59zPK8DMvF4H060KJy8V8tGtwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7451 (0x1d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Validity
Not Before: May 12 16:09:20 2026 GMT
Not After : May 19 16:09:20 2026 GMT
Subject: CN=6a0350b0-fb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:46:c6:80:31:65:e2:97:8b:8f:fd:a4:de:
09:2a:82:52:6e:b1:a4:94:89:75:e4:b3:33:8a:9d:
8b:a7:e6:6f:23:48:56:5a:aa:5b:d5:21:0b:15:09:
16:4d:a9:f0:36:bc:4f:6c:b1:98:a1:27:9a:cc:99:
5d:c2:fb:63:46:e0:40:03:9f:ee:89:a5:0f:d6:11:
c8:33:9a:e3:c9:04:e3:bf:7c:c5:44:b1:65:df:af:
38:26:6c:04:de:57:cb:52:a9:f2:5b:2a:cd:02:58:
3e:3d:d9:76:b7:85:b5:5e:27:84:44:97:6a:90:21:
e6:8d:0e:f3:bc:b1:f5:32:0e:e7:b2:34:c0:08:b7:
25:8a:bb:1f:19:cb:63:55:a1:4a:ef:f5:1b:34:76:
ae:04:57:ef:2a:66:dc:86:d8:a9:78:6a:b7:e8:27:
37:33:f5:e3:e4:be:37:62:14:ba:f1:45:fa:2a:97:
cc:07:a0:82:0d:d0:e6:a4:a2:e0:21:54:25:09:a6:
4f:d5:f2:42:5c:e5:2e:9b:66:4e:10:7b:8b:46:63:
4c:ea:4d:bf:c3:bf:4a:df:ef:7e:0d:40:2a:d8:84:
95:90:0f:5d:92:dd:17:4d:e0:7d:ae:a3:cf:70:98:
23:38:4d:52:63:11:31:8f:80:7a:15:41:3d:32:c8:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7B:40:4B:D9:3D:D5:A8:84:23:2F:F7:37:2B:53:CF:8A:36:D9:98
X509v3 Authority Key Identifier:
keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:45:03:1f:01:d1:2f:ae:9b:d5:fd:6a:55:1b:77:bb:13:1f:
2f:02:48:4f:33:e4:76:0f:5f:ff:8c:3e:08:be:b7:de:4f:d0:
14:0c:31:27:15:a4:a4:7b:0e:d6:d5:ef:15:eb:e5:f4:e2:b1:
55:a1:06:7f:d4:72:ff:73:a1:89:4d:e1:53:b5:20:13:9a:9c:
17:b0:52:6b:74:b1:d9:80:a4:b0:b5:e6:0c:04:c1:e3:1e:d8:
b9:54:e6:83:1e:fb:5a:c6:2f:0c:92:e6:a0:17:aa:7d:b4:69:
22:99:53:56:92:55:d4:0b:4f:26:ae:9f:a6:fc:81:ff:dc:be:
fd:40:8e:ef:a9:80:cb:51:2c:09:e2:0f:41:79:f8:df:49:07:
6e:d7:97:47:89:e3:00:c8:30:36:f6:00:13:ae:a4:44:98:20:
b1:1e:5e:05:ab:75:c7:1b:96:fe:fe:0e:b3:02:41:f0:f4:32:
d2:0f:76:38:0b:33:2b:40:a0:14:e0:8b:ae:78:0c:53:01:cb:
45:6c:ff:89:09:25:b2:42:ee:5e:dd:3e:52:8c:03:1b:a3:1b:
5e:61:bd:b4:d8:23:71:a7:4e:0e:b7:f9:e7:fd:0f:64:1e:7b:
5b:50:7c:ed:61:ca:66:d1:db:4a:c7:03:43:9b:35:db:bb:59:
e8:6b:2f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:34:52 2026 by rpki-client