
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier: BJJuh/ngQapZxzxcwddlpWUvTjORuKqKZoz0GGxLSoc=
Subject key identifier: AE:44:43:19:25:48:15:1C:E8:27:57:BD:86:8B:48:A7:AB:96:83:98
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number: 0112
Signing time: Wed 23 Sep 2026 05:49:45 +0000
Manifest this update: Wed 23 Sep 2026 05:49:45 +0000
Manifest next update: Wed 30 Sep 2026 05:49:45 +0000
Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: NUHKCORENGzuiV5mOBl9kBxXVf1vPRhYoD/qQCylmyg=)
2: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: 9XVTTsK1JeE28Aq3qvoIFUpxYW3yzAOh3tPhanTDLuI=)
3: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: i1rnPuXqbnMqAc4PCX48sTcxB0t1JxdfTOj4tcvmsyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Validity
Not Before: Sep 23 05:49:45 2026 GMT
Not After : Sep 30 05:49:45 2026 GMT
Subject: CN=6ab36879-6911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a0:1e:55:c1:17:c8:ab:b6:d8:67:4e:16:86:
48:e6:cc:31:66:66:44:e1:f2:44:69:f9:0b:ab:af:
0f:a2:89:e3:f6:52:20:17:0c:9c:93:fd:43:0b:d2:
9e:b9:a0:87:ba:ec:3d:dc:43:4d:ec:e7:66:86:e0:
9f:29:26:e2:36:86:3e:80:b5:a0:ed:67:e9:ff:b2:
dc:4d:0a:c8:f3:d5:a4:a2:1d:2e:f3:06:d7:4a:51:
54:a8:a8:32:99:2f:ce:45:18:97:19:c2:82:1f:80:
d7:e2:53:bb:3c:c8:a5:03:32:3c:fb:48:70:9c:c6:
b7:5a:6a:2e:9b:b1:35:cb:71:35:17:04:87:ed:7e:
c6:1c:64:11:35:f3:55:26:77:21:ae:4f:1e:71:d8:
5e:b1:0e:c6:42:f9:cd:fc:5c:f0:94:3b:5f:d3:3b:
37:08:b6:ae:35:e2:fd:91:dd:a6:35:a3:aa:cb:15:
98:6b:d4:cc:74:bd:80:55:63:96:ba:56:5f:f0:9b:
48:f2:ca:17:c8:9e:5e:26:f4:01:6f:b1:4a:9c:c6:
60:43:71:07:e5:9b:84:e1:f6:7e:f1:68:53:ac:d1:
01:aa:c3:3c:37:a4:26:1d:c6:0c:2a:72:ea:56:1f:
cf:ea:2c:fd:a8:9e:7f:d7:0c:99:71:33:f4:a2:b8:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:44:43:19:25:48:15:1C:E8:27:57:BD:86:8B:48:A7:AB:96:83:98
X509v3 Authority Key Identifier:
keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:de:10:7a:7c:71:ec:d5:4e:f4:df:11:2b:5d:05:76:49:68:
6f:87:77:78:23:75:f2:15:63:d9:e8:9a:ba:d8:36:14:cd:97:
a9:cc:90:23:6f:1d:92:d5:02:30:74:f6:89:bc:23:e1:38:ea:
db:5a:61:2b:47:7c:8c:36:d0:ba:09:7f:26:bb:6b:1f:6b:3a:
52:65:cc:51:be:85:b6:a4:0b:ab:a1:c2:68:c5:6d:c9:44:cf:
ae:00:31:e5:e3:65:7c:67:74:f8:03:c0:60:9d:34:da:e5:2d:
5e:82:d0:97:d8:2c:82:98:56:22:9b:08:ca:45:03:74:aa:0d:
74:0e:0e:e9:a6:09:32:69:da:d8:3a:83:a2:bd:1e:3a:52:82:
8d:62:88:4f:9d:ab:e6:ee:6a:15:c7:79:80:3d:91:e4:81:75:
28:c9:e8:37:b7:b8:9e:ef:f7:e3:f2:fe:2f:14:7b:fb:bc:6b:
31:78:b8:20:d3:d3:6a:7a:c9:ba:df:3e:d7:56:23:8f:c6:ce:
f7:94:40:bc:91:cf:b2:85:07:1a:c2:4d:b6:a5:2e:89:03:b5:
67:23:c6:39:00:32:16:74:03:06:1c:2f:12:0a:ed:f2:73:cf:
e3:ff:f3:fb:c6:7c:01:79:eb:bd:26:55:9c:fd:bb:2a:b8:7f:
02:25:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:20:43 2026 by rpki-client