
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
File: nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json)
Hash identifier: MIg++ZsJYzE480DnZHcGgd48jBq0Ge+cBr1YniHWecA=
Subject key identifier: D4:AB:06:D5:FA:8A:56:2B:A5:82:02:48:82:07:36:6D:36:E7:14:8B
Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
Certificate issuer: /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
Manifest number: 01DB
Signing time: Fri 25 Sep 2026 03:36:03 +0000
Manifest this update: Fri 25 Sep 2026 03:36:02 +0000
Manifest next update: Fri 02 Oct 2026 03:36:02 +0000
Files and hashes: 1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: k0KfyXXzOFTl/DwPJWnCXDCr/ptWSCb12Kfaa3ME++4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CDD, serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Validity
Not Before: Sep 25 03:36:02 2026 GMT
Not After : Oct 2 03:36:02 2026 GMT
Subject: CN=6ab5ec22-4b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:e3:1e:6d:80:56:1c:b5:79:80:57:b0:31:
6e:26:fd:fd:9e:87:59:f6:5a:49:25:6a:69:7d:b1:
e3:ce:09:5a:ec:61:f2:09:47:1a:6f:13:34:a0:fd:
e8:e2:da:b6:28:f7:09:c5:cf:77:59:ab:56:bd:7e:
c0:50:d1:83:42:af:ae:ba:ea:22:10:f9:62:65:cc:
18:c0:be:50:26:78:1a:47:e4:b7:b1:7f:22:af:fe:
59:2b:fd:12:05:82:68:a5:70:b5:60:07:c7:1d:7e:
78:88:b2:66:a0:48:14:b6:b9:64:6a:3a:88:35:43:
04:90:e8:b3:1b:36:c2:a3:2f:08:0a:7c:e2:e2:43:
fb:63:d4:36:3e:d8:a6:a5:5d:c3:b3:b4:f6:cf:e5:
52:6a:dc:db:8b:cf:c5:0c:33:0a:14:02:cd:3e:1f:
d0:17:ad:84:b9:86:51:14:98:f6:a0:eb:fb:82:a7:
3f:1f:74:d6:c5:74:a7:de:95:6e:ea:2f:45:bd:f6:
40:a1:85:10:24:e7:26:c3:b9:29:97:70:ed:af:8e:
73:a6:3c:9c:0a:9d:34:64:b7:ba:d9:7d:fe:16:b3:
d9:9f:f2:dc:c1:79:f7:63:52:c8:d0:7a:5e:da:54:
ab:5e:3d:9a:24:be:4b:d2:0c:7f:bf:62:5d:c9:08:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AB:06:D5:FA:8A:56:2B:A5:82:02:48:82:07:36:6D:36:E7:14:8B
X509v3 Authority Key Identifier:
keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:30:44:f1:5e:d7:38:80:9c:57:ff:d5:1b:a2:85:a8:5f:10:
44:72:37:2a:28:4d:94:c3:12:36:80:b6:57:c5:6c:f2:bf:ac:
a2:12:60:fc:14:8f:cc:04:ce:e2:a9:3e:13:eb:30:4b:18:ad:
99:9b:69:46:3e:ec:e8:81:d1:0f:67:31:bc:01:ba:55:b3:72:
17:22:c6:4a:c6:ee:49:c2:99:36:78:9b:6b:5b:41:25:40:73:
3b:8e:1c:6b:6a:33:89:45:4c:d7:55:85:d9:0c:c5:f4:73:5d:
8f:3a:35:72:cc:85:0f:3b:94:4c:01:08:0b:29:53:25:00:ce:
8a:5a:8e:d9:2e:a6:01:e4:4e:3e:41:b3:62:ab:2d:eb:68:dd:
1f:d4:8b:72:3e:4b:79:85:d1:89:40:35:2e:29:ab:bf:8a:6d:
8b:7d:b6:c0:91:df:90:f9:ca:6d:c8:1a:4d:ad:a7:99:d6:4b:
17:48:b4:dc:92:4d:15:5c:ef:c8:73:e4:12:70:70:03:b3:4c:
28:ec:64:74:d3:f6:bb:c0:75:fc:2e:f3:da:f0:9a:94:2c:99:
58:25:3d:c3:27:4e:8b:36:7e:ef:5e:de:33:a2:db:89:3e:57:
f7:c6:0d:3b:d0:70:e5:4b:d5:05:aa:86:72:ea:bd:33:b1:0d:
f7:0f:70:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:08:15 2026 by rpki-client