
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
File: NAYp5_yg0jJa2fswVWg0aO8t0MM.mft (raw, json)
Hash identifier: 7Vi2X2tOJsp3MXAcV5BTj6OLLwOUS9UE8psyggXdsmc=
Subject key identifier: 12:E9:64:71:86:91:28:06:09:69:63:DB:08:9C:3D:D6:31:09:B9:4A
Authority key identifier: 34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3
Certificate issuer: /CN=A91B9477/serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
Manifest number: 40
Signing time: Wed 13 May 2026 08:38:17 +0000
Manifest this update: Wed 13 May 2026 08:38:17 +0000
Manifest next update: Wed 20 May 2026 08:38:17 +0000
Files and hashes: 1: NAYp5_yg0jJa2fswVWg0aO8t0MM.crl (hash: GhxbJEh1LvlHcxfJ3SP3yN0YhhTF7gwSmdpdpjg8Er0=)
2: 6A1304F0F4DD11F09B4FF218486F56BC.roa (hash: MVWHTycXop2ncCPzUo2tw9R/cfqnpVaE5CQiK4/0/Wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl
rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9477, serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
Validity
Not Before: May 13 08:38:17 2026 GMT
Not After : May 20 08:38:17 2026 GMT
Subject: CN=6a043879-62cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:58:47:f1:6a:82:24:46:16:ae:bb:c4:0e:
7f:08:0d:ab:10:0b:ca:93:2a:f4:ae:af:a5:7f:cf:
d9:97:b2:16:e8:1e:47:d4:40:b1:eb:3d:c6:a4:c3:
94:74:63:b2:e7:83:9b:38:43:45:f2:75:0f:8d:ac:
c7:0b:bd:43:bd:cd:15:48:86:78:9e:73:2c:96:2e:
c0:73:f0:71:92:80:6e:7b:e8:92:46:1c:94:63:cc:
37:fd:15:32:43:7b:5f:98:0c:3a:a3:1d:55:32:d2:
55:aa:14:41:cb:1c:ed:4d:f2:da:a7:96:d2:e0:54:
5e:11:c6:17:3f:51:66:33:eb:26:02:be:3a:f2:15:
3d:e2:53:cb:f6:80:b9:79:ff:f2:3d:33:1a:4c:fd:
24:b2:2e:63:29:3d:58:ec:53:77:77:2b:b5:bb:3f:
3c:3e:cc:3f:4a:c1:53:1f:c9:55:a7:f8:ed:c3:0c:
2e:47:9f:a8:10:d8:83:75:92:2c:7f:c1:da:b4:4f:
ef:65:4b:fa:60:1e:8b:8e:e1:d2:58:ff:25:1b:17:
cd:35:62:6d:40:8f:16:82:ca:53:9f:b6:b9:61:a0:
83:f7:ac:e4:54:d0:23:bb:d8:e6:1a:d1:48:76:90:
a1:d8:4f:1e:b8:97:1f:21:dd:80:3b:f4:9b:a6:a6:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E9:64:71:86:91:28:06:09:69:63:DB:08:9C:3D:D6:31:09:B9:4A
X509v3 Authority Key Identifier:
keyid:34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:30:84:ca:75:29:98:9a:1d:cb:97:0a:65:44:de:2f:97:1f:
42:21:c9:76:cb:c0:88:cd:ce:67:bc:78:6c:93:f6:63:fa:5c:
b6:da:28:5f:ca:b7:69:ca:58:66:d3:56:50:35:e5:2d:2d:43:
0c:f4:15:e6:6d:9c:5d:87:6c:d1:72:9e:7e:4d:a8:a0:e5:59:
bf:08:64:94:9e:6b:1b:20:9d:f0:88:be:92:de:8a:38:fc:98:
29:88:a1:2b:e0:2a:ab:1e:a9:71:37:04:f6:41:41:83:92:80:
05:18:ff:d6:16:2f:79:7b:52:3b:b7:73:b6:8f:a7:fc:b5:d9:
0d:08:d1:6c:49:34:96:00:1b:51:31:ee:10:89:bf:97:33:1e:
e4:87:a9:68:1f:04:4b:3e:81:41:ce:1e:63:ae:4f:9f:7e:3b:
6a:10:f4:60:42:3a:e4:f2:12:bd:1a:a8:21:16:7c:20:a3:30:
bd:03:94:76:6c:8e:f9:6d:2a:37:6c:0b:ef:d1:b8:5a:55:0d:
e2:86:9e:21:5a:b9:b1:7b:27:40:9b:65:87:b8:54:ac:10:31:
12:2b:f1:94:34:cb:b7:49:8a:ea:69:60:42:12:7a:38:66:23:
7c:6f:1d:a7:ec:fb:26:2d:c2:cd:e7:b3:5b:8f:b3:41:74:d4:
6d:d5:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:28:30 2026 by rpki-client