
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier: WN/6epfQgsIfBkYSbgdvq3Awi88C7xjv02M+yxkTLtc=
Subject key identifier: B5:89:EC:1B:95:02:51:82:CE:9A:97:F5:09:EF:5A:9E:A0:3A:F2:3E
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial: 1454
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number: 144A
Signing time: Wed 22 Jul 2026 16:59:08 +0000
Manifest this update: Wed 22 Jul 2026 16:59:08 +0000
Manifest next update: Wed 29 Jul 2026 16:59:08 +0000
Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: lWryvYzqKGGFLmsrj5KUn+lqVcO3QDhQ000J+TYD9yE=)
2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: MDlcdzXufvKhGOKFUxldUFZUq6m6mjYUqAENV0y3O3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5204 (0x1454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Validity
Not Before: Jul 22 16:59:08 2026 GMT
Not After : Jul 29 16:59:08 2026 GMT
Subject: CN=6a60f6dc-d550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:4f:fe:60:a3:5d:c7:c9:d1:5c:77:86:b9:
38:3a:e7:8e:ce:b0:74:7c:3d:d3:96:82:49:bd:58:
9c:6b:c1:bf:d8:ad:25:2a:61:7f:3d:98:99:9f:28:
a7:9a:77:1f:2f:6c:9d:fa:ec:b3:99:d9:3d:53:ae:
49:16:18:8e:9a:da:7c:0a:14:12:2e:3e:d9:c8:0b:
60:ef:3c:d7:28:22:34:dd:d2:b5:1d:45:b6:5a:11:
9e:34:80:32:ae:27:83:43:ef:c7:f9:10:65:fa:53:
c1:09:b1:c3:6c:e8:90:ca:34:22:12:b2:e3:f3:d0:
9f:61:74:d1:69:7f:44:39:c9:92:c3:a4:62:b2:9e:
16:40:91:49:ca:b9:07:7a:1a:18:b2:52:41:0c:83:
a1:85:6f:8b:0f:e1:3b:c3:b2:70:fc:88:a8:10:3f:
b8:16:d2:69:31:ef:ff:32:b9:9e:30:bf:bf:48:cc:
fc:1d:e7:91:0c:ae:14:0b:cd:c5:17:64:6e:85:ba:
22:6f:a9:f1:88:28:5b:41:e8:05:dc:e5:93:22:c9:
19:a7:5d:fa:52:95:71:8e:b9:63:15:66:42:ef:34:
6a:f8:04:97:4d:b0:1f:44:1e:cd:e2:3f:e2:b8:8d:
55:d3:da:9b:93:6f:2e:f4:89:ff:c0:65:84:76:9f:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:89:EC:1B:95:02:51:82:CE:9A:97:F5:09:EF:5A:9E:A0:3A:F2:3E
X509v3 Authority Key Identifier:
keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:bc:6a:08:3d:33:ab:99:cb:e6:20:74:9b:d6:10:eb:31:ff:
98:98:9e:34:1f:ca:17:ad:92:14:49:e2:05:82:1f:44:07:50:
09:bb:f0:49:85:1c:3d:9e:3b:5f:45:d3:a3:e7:d9:81:88:ea:
4a:bb:c6:24:89:4f:8d:9f:e1:24:a3:9d:93:dc:26:99:15:3e:
ca:9d:d2:8c:a2:5a:e4:bf:28:b8:89:ca:80:4f:fe:c4:59:71:
f2:56:ea:88:28:01:df:71:14:d7:96:c8:cf:43:fd:ee:bc:86:
97:bd:be:96:de:47:66:09:4b:a2:2a:60:9b:03:5c:b0:cc:96:
89:2d:f2:79:f2:53:f6:aa:05:91:05:df:1e:93:b9:bf:9b:31:
1c:b9:29:ff:36:ea:37:32:51:21:8e:86:a3:22:32:cc:0c:76:
1a:17:6e:0e:d4:25:91:7c:38:a8:9e:24:e8:f7:c0:07:1b:84:
94:60:a7:e8:88:7a:ae:4b:5a:74:27:c1:f3:94:bd:e0:b6:ae:
9c:1b:84:c5:13:52:d9:c9:5d:d3:0d:c7:b8:cb:32:44:f9:f8:
80:78:01:94:eb:1f:04:80:71:6e:41:0f:86:93:62:37:33:74:
f9:6e:f5:3e:41:13:4e:e5:d0:a4:8d:a9:78:af:2a:63:2f:86:
04:53:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:46 2026 by rpki-client