
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json)
Hash identifier: sZ7U6T2BZQuecQy8mEY5GjKdPh6kpaVl8ZztJb/Sgh0=
Subject key identifier: 8D:90:8F:45:6C:4B:A9:C6:7D:A9:24:2D:A5:2E:52:19:BE:92:B9:A8
Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Certificate serial: 355D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
Manifest number: 3545
Signing time: Thu 26 Mar 2026 14:44:59 +0000
Manifest this update: Thu 26 Mar 2026 14:44:59 +0000
Manifest next update: Thu 02 Apr 2026 14:44:59 +0000
Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: q4r3rZv90HosD+tt3PfgMtnLOiEmnLBWO1i3AvfrxCI=)
2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: 9VyiC9O6U//ZPVxmrlig/dycvmzYpPGTRnjYrlBpYSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13661 (0x355d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Validity
Not Before: Mar 26 14:44:59 2026 GMT
Not After : Apr 2 14:44:59 2026 GMT
Subject: CN=69c5466b-13fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:e8:79:9f:65:56:48:2a:18:88:52:bd:6d:
cf:c1:08:d3:3d:d4:d9:d4:4f:74:63:76:79:1c:fb:
f9:4c:86:83:79:92:f0:a2:d5:74:d5:9f:36:52:33:
71:6d:a9:24:95:6e:5b:c2:c8:42:8c:1d:0b:d8:4c:
ff:dc:9a:a8:01:70:ea:ba:99:20:6d:33:58:9c:2a:
2e:e9:2a:44:91:1d:2d:6c:f4:39:32:e0:e0:53:93:
52:f5:d7:cb:78:73:4b:df:0e:43:e1:8e:f0:22:c9:
81:e1:f6:aa:bc:6e:db:d4:61:a6:16:1c:e5:4b:3f:
45:09:8a:f0:1a:30:eb:c5:56:f8:60:b1:1d:5e:e0:
19:83:c2:7a:d7:b6:cb:1d:75:df:5f:4e:ea:5a:e0:
e5:57:1b:5e:52:90:7c:87:d6:de:dd:90:74:e8:63:
57:63:1b:90:f5:78:30:8f:3c:44:cd:40:d6:0f:35:
2e:2b:5f:9a:1a:9e:b7:3e:07:20:90:30:f9:89:db:
7f:d9:ae:10:8a:f4:73:d2:8e:ba:7a:46:a6:1f:06:
67:f7:18:45:55:56:13:a6:be:48:ff:59:03:b0:20:
d8:41:be:af:9b:a4:56:90:e9:76:60:87:08:26:a0:
20:26:75:2e:0d:16:0c:22:17:71:53:00:42:6b:6e:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:90:8F:45:6C:4B:A9:C6:7D:A9:24:2D:A5:2E:52:19:BE:92:B9:A8
X509v3 Authority Key Identifier:
keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:7a:52:27:72:e5:f5:1f:2d:1c:01:9f:20:8a:3e:ca:f1:51:
a1:b0:d9:29:ea:7a:ba:c9:db:66:ad:40:7e:41:e8:d9:bf:bc:
bb:34:f4:cb:49:42:c4:cf:b4:97:38:19:89:fe:27:c0:d8:13:
83:ab:f4:d1:c3:17:b5:13:61:ae:14:d3:3f:d0:f4:a8:1f:e4:
01:b1:51:33:9b:69:1d:7e:0c:43:95:17:c4:4b:37:05:b5:89:
66:42:a5:2d:5f:4a:f6:c2:77:69:7d:df:c7:fa:63:84:1f:60:
8a:f0:b9:b5:8a:1d:1e:c2:9a:b0:9b:ae:cf:9a:61:57:fc:b2:
89:83:73:97:0f:ab:8b:9a:8e:00:ba:aa:50:49:bf:9b:5c:a5:
b7:5e:cb:5b:15:0a:c5:96:97:6a:ce:e1:ab:ed:40:76:81:2e:
70:99:c7:be:ad:b7:dd:59:97:f6:9c:7e:38:bd:12:ca:b9:f1:
3d:a7:88:5d:ef:c1:8a:39:fd:27:30:61:a0:02:e9:34:a0:93:
6e:ad:6b:8a:d6:08:b5:b5:86:af:09:ba:b7:e7:4d:7b:bc:d8:
af:c6:19:73:47:3c:53:48:ec:9c:77:46:f7:70:22:8a:3c:0e:
67:fe:bb:00:5c:6e:db:1b:09:30:5c:21:26:a5:a8:99:40:2c:
b7:96:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:18 2026 by rpki-client