
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier: hv0ReBqmf9IXZPg+OcRbnGSYpezHTEOm8cJYbE3M2qs=
Subject key identifier: 64:B4:7A:40:98:F8:CF:BC:BE:50:C8:3B:41:E7:22:64:BE:48:44:C8
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number: F2
Signing time: Thu 23 Jul 2026 08:08:45 +0000
Manifest this update: Thu 23 Jul 2026 08:08:44 +0000
Manifest next update: Thu 30 Jul 2026 08:08:44 +0000
Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: rfBGKvgZsEQY2/QLAXWq2EFwViiOUQWRzD+xB63vQ+E=)
2: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: 9XVTTsK1JeE28Aq3qvoIFUpxYW3yzAOh3tPhanTDLuI=)
3: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: i1rnPuXqbnMqAc4PCX48sTcxB0t1JxdfTOj4tcvmsyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Validity
Not Before: Jul 23 08:08:44 2026 GMT
Not After : Jul 30 08:08:44 2026 GMT
Subject: CN=6a61cc0c-37ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:44:61:dc:51:c5:9e:f6:85:e1:fc:67:59:
22:79:eb:25:1c:9c:f4:e6:25:49:5a:b9:f8:62:60:
1c:79:51:65:c5:49:be:00:f7:80:95:a6:cc:b7:83:
cd:c3:c4:59:a3:6d:89:6c:02:fb:b2:ff:48:fd:30:
f9:11:e6:ea:77:c3:56:2b:ff:1a:6a:ea:b4:b8:49:
5f:13:76:44:93:ff:0e:58:c7:ca:d1:3b:4a:c0:0f:
34:ee:1b:72:d4:0c:a4:ae:11:84:35:54:8c:14:5f:
57:09:d1:fe:13:7a:59:44:85:71:4c:04:f5:aa:89:
25:27:8d:45:99:a3:4d:90:76:87:4a:2e:02:1b:e1:
ac:5b:9c:fe:66:2b:ec:62:f0:df:f3:98:32:3a:36:
0f:a1:98:09:ef:46:43:e9:c6:1a:9b:7b:e8:26:18:
1d:fb:17:2d:18:f6:bf:7c:d5:4c:48:56:68:11:54:
2b:57:34:f7:1c:b6:bc:6e:3e:ad:70:f3:ab:c8:71:
b7:ad:f0:16:b8:5d:49:a9:50:7e:2f:b2:7b:a7:a8:
f6:29:5e:72:3c:e4:06:fd:f6:c0:49:f0:12:1f:ce:
64:49:dc:df:a3:23:5f:0e:8b:e8:ea:8a:ab:5c:2f:
fd:0f:99:f8:c3:22:98:02:6d:2b:01:6a:93:52:a0:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B4:7A:40:98:F8:CF:BC:BE:50:C8:3B:41:E7:22:64:BE:48:44:C8
X509v3 Authority Key Identifier:
keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b9:91:c8:2b:ca:94:de:e4:83:d9:f6:fa:26:d0:25:c2:4b:
f5:15:37:4c:6b:e8:a5:9e:8a:97:83:94:2f:9d:3f:e5:f6:f5:
02:e2:7b:83:30:c6:9f:94:c1:20:5e:ff:8b:e0:c1:da:16:3b:
9d:40:fc:5a:1d:f3:fc:4f:95:31:71:b4:94:d1:ee:8d:fc:fd:
90:58:6c:1e:89:42:49:1a:51:26:0b:5a:77:c7:be:aa:42:2e:
f8:92:57:8e:51:25:8a:f1:79:e0:3e:a0:83:f9:a2:be:53:6a:
f7:4d:21:26:da:f6:de:c2:17:eb:d0:d6:e3:d8:85:42:da:bc:
a8:14:ea:02:83:01:7f:2a:0c:a5:c2:db:b8:9b:b1:59:8a:bb:
f5:84:f8:f4:73:d6:42:98:71:e8:6a:db:16:eb:51:ac:83:85:
14:20:44:6d:a6:05:de:6d:9c:0d:15:c6:62:66:a6:01:46:c8:
72:db:92:fa:1c:ec:c3:a2:3e:ab:19:be:40:d8:1e:3e:c1:66:
38:59:20:35:b2:ff:3e:f8:f6:b1:27:42:d8:46:8f:1b:57:a3:
e2:2e:0c:ca:a4:1f:da:91:69:e7:99:dd:30:91:e3:dd:4d:aa:
d2:4f:0e:6a:0f:18:c1:94:9f:c8:8a:8d:7d:14:a0:3c:0f:42:
3a:fa:87:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:01:49 2026 by rpki-client