
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json)
Hash identifier: AGov4IjV02rHfgJi/SjJgTezZUKXbcRPriAO9zAqudQ=
Subject key identifier: 74:CD:9D:D7:A8:D8:9B:FF:40:D3:0C:0C:DD:4A:42:7E:BC:49:6E:57
Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A
Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
Certificate serial: 0AF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
Manifest number: 1299
Signing time: Tue 12 May 2026 19:25:25 +0000
Manifest this update: Tue 12 May 2026 19:25:24 +0000
Manifest next update: Tue 19 May 2026 19:25:24 +0000
Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: xJFDqL94UaFCzf8/gky9HWtqvJMstIcSfdoSFJIRBWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl
rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2805 (0xaf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
Validity
Not Before: May 12 19:25:24 2026 GMT
Not After : May 19 19:25:24 2026 GMT
Subject: CN=6a037ea4-da69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:ff:7b:72:30:4a:16:df:57:2a:51:65:3e:
eb:4e:25:d2:a5:87:f0:4d:41:37:9e:99:94:d4:61:
16:33:80:66:6f:67:ec:ba:f7:37:30:db:a1:8e:65:
99:ff:64:81:05:fd:1c:89:21:16:e5:46:42:65:59:
ee:f2:35:c4:89:c2:d5:3a:0e:73:23:ba:be:4e:17:
0b:15:be:fa:a0:bd:7a:46:ba:63:92:8e:37:4d:31:
88:84:6e:62:ac:99:1d:1f:39:46:52:ab:7e:63:23:
dc:7d:60:51:72:03:bc:08:ed:09:da:73:a1:c0:1b:
3f:26:fd:d3:61:d4:86:df:b7:60:18:76:1f:b9:f6:
44:3c:d1:f5:04:fb:bd:74:21:02:fd:3d:59:00:85:
07:48:b1:27:8e:1c:b5:e6:3d:3f:ea:02:48:4e:48:
06:4c:25:71:69:14:68:8b:c8:21:a0:ef:95:57:88:
cb:07:76:b2:bd:dc:02:0d:4f:07:0b:47:54:f5:36:
c9:90:03:13:a1:90:a4:27:7d:2d:c1:e5:2a:82:b7:
80:91:6c:e3:75:40:4f:ad:ba:ea:05:18:48:93:2f:
bf:dc:0e:42:55:81:fe:73:54:e1:5c:b9:2f:85:a5:
0c:fe:bd:21:68:4e:62:48:fe:95:3c:69:5c:74:16:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:9D:D7:A8:D8:9B:FF:40:D3:0C:0C:DD:4A:42:7E:BC:49:6E:57
X509v3 Authority Key Identifier:
keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ff:18:3f:57:33:4b:bd:5e:64:e5:c7:42:ea:d0:78:50:db:
3a:9e:67:28:91:1a:85:48:e6:47:83:07:29:9b:02:f2:bc:3c:
ed:49:20:70:73:c1:d0:c6:57:06:a8:67:88:68:3a:a0:77:9e:
41:dc:b1:d5:da:02:d6:aa:22:e7:77:0c:33:43:0c:9c:06:44:
0e:6e:1a:51:2b:dc:3a:77:2e:cd:27:aa:f6:b4:5e:6a:be:81:
3a:ff:33:4c:3b:df:f4:e1:58:76:86:29:0f:f5:fa:8c:12:56:
78:49:42:76:e4:0d:04:d8:d5:fc:42:0e:c6:11:7f:d4:49:cb:
2c:f7:0f:9c:37:f9:35:16:30:c2:ed:ad:b4:fe:7c:66:a0:96:
96:51:43:0e:c6:ac:1c:44:a6:b5:55:c6:0e:03:8b:37:55:50:
75:fa:b6:2f:e2:1d:86:ed:8d:18:b8:0f:7c:b5:c9:8b:a9:72:
0d:d4:91:75:34:42:b6:d9:1c:71:69:08:f2:96:9f:44:81:45:
c7:bc:2b:3d:a6:e7:e7:1c:b7:1b:35:4f:8d:6d:39:1f:4b:17:
8a:29:61:7d:c7:ed:b1:3b:0d:b3:9a:2e:2e:ef:d1:c6:02:1e:
84:57:ea:03:20:d1:ab:d5:b7:cb:8b:8b:ad:c2:48:18:b7:4b:
43:d0:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:20:54 2026 by rpki-client