
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
File: NAYp5_yg0jJa2fswVWg0aO8t0MM.mft (raw, json)
Hash identifier: BJfoJV2/2DZEMfZw//wBHgFnp2Ro+vITrYQsqlG7feY=
Subject key identifier: 7A:62:52:F0:68:1F:48:05:66:09:DB:04:A2:74:5E:08:B2:56:DD:27
Authority key identifier: 34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3
Certificate issuer: /CN=A91B9477/serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
Manifest number: 27
Signing time: Wed 25 Mar 2026 07:59:37 +0000
Manifest this update: Wed 25 Mar 2026 07:59:36 +0000
Manifest next update: Wed 01 Apr 2026 07:59:36 +0000
Files and hashes: 1: NAYp5_yg0jJa2fswVWg0aO8t0MM.crl (hash: qEQXluD5QpgI92AxMQXAwtNJo0RIHt4v5OQsCnmvY0o=)
2: 6A1304F0F4DD11F09B4FF218486F56BC.roa (hash: MVWHTycXop2ncCPzUo2tw9R/cfqnpVaE5CQiK4/0/Wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl
rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9477, serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
Validity
Not Before: Mar 25 07:59:36 2026 GMT
Not After : Apr 1 07:59:36 2026 GMT
Subject: CN=69c395e9-0c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:a6:e4:32:50:f4:91:40:fe:a2:0d:e9:03:
da:51:0c:87:f9:29:0f:4c:f5:1f:0a:41:a4:a3:25:
b1:60:46:14:33:a8:9c:11:d8:6e:3d:c5:70:37:ba:
21:27:2e:75:14:83:4b:65:fe:78:e0:b6:5a:17:79:
1f:d5:ed:da:6a:e9:5e:44:97:3a:8b:e3:17:2c:31:
ff:72:81:f7:dc:8b:db:46:e0:36:67:32:34:1d:8d:
6c:6b:48:b2:58:ab:d0:28:22:ac:29:b2:6d:41:ba:
73:d9:ca:6a:d4:d1:a0:1c:b9:5f:56:58:57:af:e7:
98:91:a1:32:53:4d:a7:b7:08:fc:af:26:95:0b:eb:
a0:f5:a6:53:db:c2:e6:08:61:a9:43:67:78:73:ee:
8f:9a:a1:65:5b:72:66:78:4a:08:c4:25:70:5f:8f:
27:e9:e5:fb:f1:ff:c2:ca:6a:ac:34:6c:5d:31:f6:
a1:98:87:da:86:2a:d2:56:da:60:95:83:0b:ea:ce:
0d:84:8d:be:46:1b:ae:78:eb:b9:e8:7b:ef:00:b9:
64:95:9d:b7:35:d1:bb:7a:7e:de:1b:de:52:8e:f6:
2c:3e:dc:2e:b7:5c:52:70:ec:14:67:f4:d7:0c:6d:
e2:99:40:5a:18:3e:e1:db:62:fa:c8:93:4b:25:c9:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:52:F0:68:1F:48:05:66:09:DB:04:A2:74:5E:08:B2:56:DD:27
X509v3 Authority Key Identifier:
keyid:34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:53:1c:10:c0:f6:ef:af:14:32:1c:01:64:1a:06:d2:6c:2d:
be:ab:30:65:30:61:7a:73:50:80:28:af:18:68:59:ca:45:b8:
9e:8f:21:79:06:99:44:f1:17:da:95:b8:ef:06:8f:24:58:3b:
25:e4:1b:20:0c:a0:3d:17:a4:74:64:f3:9d:b0:4e:16:42:73:
d6:a2:d9:5a:96:7c:5c:b8:14:69:0c:70:6c:a0:ee:c4:0c:84:
a1:b7:a9:4d:b1:97:cf:dc:84:5f:06:be:c4:35:66:4d:a5:b4:
da:74:fa:7a:a5:b1:ec:6a:38:2a:8c:aa:1f:d1:72:87:74:91:
49:ea:25:27:4e:bd:54:23:d6:9b:53:4e:48:88:2a:65:b0:57:
6b:65:5f:79:b2:62:a7:46:22:b9:c8:e1:2c:1f:00:95:db:57:
df:9f:fe:f7:b2:34:a3:db:f5:14:46:6b:39:aa:63:9e:f6:71:
08:88:ba:cd:b6:33:66:2e:3a:ae:7a:4a:50:c7:4e:a2:d5:03:
6f:45:0d:1a:6a:d2:6f:f6:d3:d3:40:0e:ac:3e:9f:1d:4f:21:
33:22:68:7b:cd:03:e0:fd:42:70:76:c0:89:a7:aa:e5:61:26:
bd:71:db:26:eb:d2:01:a2:8b:52:fc:35:9c:e5:81:bb:00:a1:
6e:11:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:15:42 2026 by rpki-client