
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json)
Hash identifier: XTIffu8/jNJBn3LRF7xfNqkanF0cUyFLTMal7bGVb1M=
Subject key identifier: 26:99:5C:AD:42:C2:13:28:EC:F5:71:0E:93:B6:08:D9:EE:62:9E:12
Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2
Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2
Certificate serial: 0626
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
Manifest number: 0615
Signing time: Thu 24 Sep 2026 22:43:43 +0000
Manifest this update: Thu 24 Sep 2026 22:43:43 +0000
Manifest next update: Thu 01 Oct 2026 22:43:43 +0000
Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: DsUsW4chwasn3t4YR5BfHTVLzMOWh0pKz7E/x7CzI0Y=)
2: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: lwBd5Cu3FrXZsvsaCtwRFnBd3GgAPC6R4lTlq4TEtoA=)
3: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: 61lj5wie+0pD8A1NUVTU2Hvwb8qw4LnkXn9K+pXfJqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl
rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1574 (0x626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2
Validity
Not Before: Sep 24 22:43:43 2026 GMT
Not After : Oct 1 22:43:43 2026 GMT
Subject: CN=6ab5a79f-8562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:f5:59:cb:9d:75:4e:4e:34:cc:91:16:23:
c3:ef:da:14:a1:da:17:87:71:02:5c:44:6e:e7:86:
41:bd:9d:3a:1f:06:05:f5:47:67:3c:27:5a:5a:90:
1b:7c:b4:b9:11:e9:0e:4c:64:68:09:44:16:47:ad:
b6:97:b0:9f:ea:0b:50:91:bd:4c:a6:ab:e6:2e:7a:
c2:0c:14:51:b7:33:52:e5:27:1b:c9:45:69:23:63:
62:e6:67:87:74:aa:9b:e2:fc:35:6f:55:1a:21:cf:
f2:62:8c:8d:0e:c2:40:1e:8e:9f:fb:ec:6d:f6:7d:
75:28:8b:35:3e:17:3b:3b:1c:a0:6e:3c:f5:da:02:
71:bf:58:0a:1f:f8:e5:bf:c3:b7:2a:34:df:bc:e0:
39:3e:02:16:5a:12:78:7d:ee:11:5f:80:d7:3b:ac:
6b:0f:73:64:f8:e2:86:cd:c7:1e:53:14:b9:b6:41:
52:15:55:46:52:d1:94:a0:0e:c1:d1:4d:32:53:94:
ef:1b:a7:9e:8d:70:6b:63:dd:b7:6a:c9:2d:97:7f:
48:0b:43:fd:f6:1c:1c:d6:23:0a:5c:83:22:e9:c5:
b8:56:4d:a0:5d:a5:2c:04:77:0b:46:3d:70:fb:49:
87:b9:38:ab:b1:77:59:d0:e9:67:36:6a:b4:97:41:
61:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:5C:AD:42:C2:13:28:EC:F5:71:0E:93:B6:08:D9:EE:62:9E:12
X509v3 Authority Key Identifier:
keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:93:df:44:05:6b:89:1d:b8:bb:f6:7d:40:7c:ae:56:eb:1e:
e7:46:0f:02:99:f8:d3:5f:e9:21:0e:35:e7:f7:ac:45:9b:74:
50:a8:9d:d1:e4:45:0a:95:5b:2d:d4:44:c9:ac:00:74:cf:2c:
a5:2b:a2:0b:e2:77:95:4a:0a:12:38:0b:99:d7:9f:72:ad:f3:
db:a7:23:97:2c:fd:58:af:88:3d:08:61:8a:46:94:01:0a:1c:
d4:11:24:d1:2a:bd:67:86:d5:58:bc:04:e0:f7:74:ff:be:d2:
fa:3f:3f:2d:46:66:39:cb:89:6a:fa:92:dd:9a:92:fd:ec:26:
39:0c:76:82:9a:c9:da:80:83:58:00:73:de:7b:5b:84:d0:61:
4e:fd:a5:f5:4d:25:db:22:9c:84:82:a8:ce:02:03:ec:60:13:
be:7d:53:22:66:cd:07:b0:1a:07:8c:83:8f:c1:92:77:78:1f:
25:a2:40:34:de:4c:ca:50:f5:2a:cd:12:9f:1f:a7:08:f1:42:
aa:ec:cc:03:19:64:ed:97:14:bf:de:0a:5d:bf:4b:71:ef:fb:
cb:eb:b7:83:dd:a9:1e:66:6f:94:ab:e5:42:3f:27:61:59:0c:
4d:c9:2b:a8:51:b8:7e:1c:6b:4b:08:65:2a:17:8a:28:4f:8d:
8a:74:76:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy
QTFDQTBCQTIwHhcNMjYwOTI0MjI0MzQzWhcNMjYxMDAxMjI0MzQzWjAYMRYwFAYD
VQQDEw02YWI1YTc5Zi04NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+X1WcuddU5ONMyRFiPD79oUodoXh3ECXERu54ZBvZ06HwYF9UdnPCdaWpAb
fLS5EekOTGRoCUQWR622l7Cf6gtQkb1MpqvmLnrCDBRRtzNS5ScbyUVpI2Ni5meH
dKqb4vw1b1UaIc/yYoyNDsJAHo6f++xt9n11KIs1Phc7Oxygbjz12gJxv1gKH/jl
v8O3KjTfvOA5PgIWWhJ4fe4RX4DXO6xrD3Nk+OKGzcceUxS5tkFSFVVGUtGUoA7B
0U0yU5TvG6eejXBrY923asktl39IC0P99hwc1iMKXIMi6cW4Vk2gXaUsBHcLRj1w
+0mHuTirsXdZ0OlnNmq0l0Fh0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaZXK1C
whMo7PVxDpO2CNnuYp4SMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz
Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD
NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2
WVA3X2xpSm1zRkFxSEtDNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQpPfRAVriR24u/Z9QHyuVuse50YPApn401/pIQ415/esRZt0UKid0eRFCpVb
LdREyawAdM8spSuiC+J3lUoKEjgLmdefcq3z26cjlyz9WK+IPQhhikaUAQoc1BEk
0Sq9Z4bVWLwE4Pd0/77S+j8/LUZmOcuJavqS3ZqS/ewmOQx2gprJ2oCDWABz3ntb
hNBhTv2l9U0l2yKchIKozgID7GATvn1TImbNB7AaB4yDj8GSd3gfJaJANN5MylD1
Ks0Snx+nCPFCquzMAxlk7ZcUv94KXb9Lce/7y+u3g92pHmZvlKvlQj8nYVkMTckr
qFG4fhxrSwhlKheKKE+NinR2cg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:51:35 2026 by rpki-client