
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json)
Hash identifier: tLD22iDn5GGmAmo/JWttUKWSQ5ufva50h9rwHH2olvg=
Subject key identifier: 90:20:6E:EA:21:E4:0D:78:D3:71:F6:D1:C0:30:73:92:D5:C6:CB:82
Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
Manifest number: 0146
Signing time: Mon 11 May 2026 05:34:44 +0000
Manifest this update: Mon 11 May 2026 05:34:44 +0000
Manifest next update: Mon 18 May 2026 05:34:44 +0000
Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: p7gmcUN/T5TmvcgBboosEM0Y5fsohbfO554ad6EarfE=)
2: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: YSZYviBTPxtzDHVeHnT8ow3/nXxU9t04H0K+ZmSVj7U=)
3: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: /Mfb+/GCj01R9lifsGJinmVrLBP5+B8J3/UWQZMFbAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Validity
Not Before: May 11 05:34:44 2026 GMT
Not After : May 18 05:34:44 2026 GMT
Subject: CN=6a016a74-1360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:0c:1d:4c:18:e1:aa:b9:bd:a4:b3:79:32:
83:67:08:78:a7:e3:56:ee:f6:ee:4e:bb:e6:0f:86:
df:a6:0d:d4:94:b6:af:d1:17:ca:dc:e2:a0:95:21:
3d:66:18:59:45:0e:e0:57:34:ac:ce:49:4e:2e:c2:
74:02:e8:71:0c:c1:ef:d8:32:e4:5d:80:f6:c5:f4:
18:b3:52:5b:2f:e1:17:c5:1c:7d:54:00:46:2d:19:
a1:05:54:27:b1:22:d7:d0:15:d7:ba:6a:a0:ba:da:
cc:5c:7b:77:db:7a:7a:91:8a:c2:41:c3:1e:74:79:
a8:e5:99:c4:32:76:7b:d1:52:c2:fe:dc:98:88:59:
dc:c3:38:66:27:88:03:51:2b:14:1c:10:64:90:ce:
99:22:c1:28:a2:b9:04:4b:7b:ae:8b:f5:96:76:4b:
a0:0b:35:99:db:3b:5c:e8:78:5e:f2:26:79:5f:f1:
c7:72:75:15:f3:66:ed:d1:dc:2c:7c:ad:66:d2:02:
67:2d:7b:f0:90:74:ef:35:45:cb:d6:26:45:e4:dd:
a0:51:dd:78:76:21:0c:fb:25:6c:9f:e4:dd:17:ff:
b7:c0:8c:bd:fa:06:4a:a8:7a:00:51:d0:fc:b4:bc:
61:3c:93:29:9f:1e:01:14:a3:d9:d9:08:f9:7b:bd:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:20:6E:EA:21:E4:0D:78:D3:71:F6:D1:C0:30:73:92:D5:C6:CB:82
X509v3 Authority Key Identifier:
keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:93:30:37:ef:fd:9d:78:db:fd:4a:eb:e9:9e:d7:ef:3d:e6:
3b:b8:4f:fc:92:2e:c7:b7:41:00:a0:75:f0:06:26:14:ad:fa:
10:a8:4c:56:a3:25:3e:ca:5a:e2:d2:d4:a6:ae:aa:7b:14:2b:
f9:42:10:1d:44:de:4c:7c:f9:eb:39:bf:01:ff:02:1a:9f:0a:
0b:2a:51:17:74:ac:39:82:aa:1d:ec:df:cf:42:ec:23:90:85:
f1:7f:92:48:91:36:90:e0:26:7e:1c:6c:ba:74:3e:ac:eb:67:
1e:9e:87:09:9d:a2:82:fd:40:7f:7a:4c:40:39:42:0a:ca:d9:
97:96:a4:f9:a2:ae:ea:18:f4:ec:8d:4f:44:6d:6a:c4:33:cb:
cf:9c:86:8a:2d:47:7e:8f:92:f8:08:7c:9e:b7:41:27:d5:f7:
10:34:f4:87:16:43:ca:88:61:d7:eb:4d:22:80:23:12:b8:26:
ce:ee:7e:2f:48:29:62:4c:fe:de:dc:84:2b:f1:45:1d:44:8f:
21:ea:7b:c5:df:8f:85:eb:e2:e2:ea:71:8c:1d:a4:40:f3:a1:
54:47:f2:e6:da:10:a6:9f:23:b2:8a:8f:26:62:76:da:0a:6a:
98:95:97:ce:e9:f7:be:11:2a:09:4d:a8:27:2f:03:b2:68:bc:
27:ca:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:47 2026 by rpki-client