
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json)
Hash identifier: HJGPFHXQvClTqa+MlKEUPl6CLQkY8f0mU19L6HcGFJA=
Subject key identifier: 5C:D4:8D:BD:F0:06:82:70:56:DB:BE:44:57:AC:78:52:89:E0:2A:F6
Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39
Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
Manifest number: DF
Signing time: Wed 13 May 2026 06:40:28 +0000
Manifest this update: Wed 13 May 2026 06:40:27 +0000
Manifest next update: Wed 20 May 2026 06:40:27 +0000
Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: 8RtFVHlQrtlAKIwhN4jou5fxu4wbYWnFpPC1AWxXJsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl
rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39
Validity
Not Before: May 13 06:40:27 2026 GMT
Not After : May 20 06:40:27 2026 GMT
Subject: CN=6a041cdb-012f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:00:d8:c9:db:2a:9c:96:c5:d2:3d:1a:f2:
3f:88:91:05:39:4d:9f:b8:5b:dc:78:85:ff:e2:90:
9d:8d:b2:8b:83:c0:8f:11:cd:b4:c4:70:84:36:6a:
29:0f:e9:2e:1a:ca:55:01:ee:bb:68:c9:7f:1c:f9:
06:32:d4:c3:76:f9:c5:05:1a:cc:20:11:83:95:d0:
86:82:5c:b9:dc:23:08:86:e7:50:79:38:32:05:89:
5d:8b:9f:90:0a:d1:56:7a:54:41:81:5c:6a:cb:14:
39:a3:05:af:f2:18:c8:bc:d4:b9:f1:82:6b:39:d3:
f7:22:fd:f7:c9:a7:60:85:3f:ac:41:76:3d:7d:55:
67:67:01:70:ac:30:0d:57:ff:35:01:86:c9:45:9a:
56:c9:1d:0b:01:a8:f3:a1:cd:82:e6:1d:42:29:2a:
f6:e6:3a:4d:13:25:e2:c5:b8:1c:f5:ae:38:a4:94:
fd:97:76:2e:e8:ce:bf:0a:7e:6c:da:2f:43:2b:d8:
42:14:a2:ec:90:27:ff:b8:fe:40:15:0b:0b:88:9a:
31:dd:24:de:ca:7e:e2:da:1e:27:c2:b6:c1:8e:0f:
29:e7:58:3b:ec:b9:fd:82:f8:1f:07:6e:e2:ef:ed:
ca:2b:c1:2e:3d:4e:b4:29:f4:e4:7f:fb:5c:62:81:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D4:8D:BD:F0:06:82:70:56:DB:BE:44:57:AC:78:52:89:E0:2A:F6
X509v3 Authority Key Identifier:
keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:22:c9:5e:88:8b:3b:a9:f1:90:a7:c9:8c:dd:e2:e2:4a:c5:
54:38:ae:0a:4e:40:47:44:a0:55:7f:7d:95:b3:63:c5:b8:20:
6a:0d:a1:26:78:8c:38:31:2c:b5:18:96:c5:65:32:c2:bc:59:
6d:09:60:9a:ba:60:f3:60:ce:e6:66:d0:35:16:ba:24:49:44:
ac:b9:0d:45:c3:64:aa:39:01:af:da:8a:e2:5f:e0:fc:9d:42:
10:55:70:cd:55:99:3c:8c:13:a8:91:4c:99:0e:b6:60:e2:dc:
f7:bd:e8:ee:16:51:31:51:50:0a:53:d2:b1:14:9a:1b:6f:8f:
8b:b5:33:e1:ce:24:3b:32:c2:37:a1:98:e7:07:36:7c:75:1d:
ab:df:aa:c8:e0:f4:7b:f1:0b:17:03:8d:f8:b6:0c:95:52:d3:
d1:c8:e9:57:1d:db:4c:73:3d:a8:a0:f2:70:f2:f5:c3:3c:91:
fe:0f:22:7d:36:85:84:b4:b2:4e:4d:0a:d2:ac:c9:88:02:49:
c8:a7:d2:a1:47:d4:67:9f:b2:4c:8e:0c:b3:4c:49:6f:2d:a4:
41:de:91:c7:bc:98:33:6a:35:8a:e3:91:b2:01:04:cb:43:97:
b0:11:59:24:fa:9a:68:bd:6b:44:f2:6c:50:72:c6:1d:7e:19:
8e:c9:8a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:22 2026 by rpki-client