
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json)
Hash identifier: zq9YLwEQzRM66fhT/ByPx000BYEiuc3IaMcPHkzi/Aw=
Subject key identifier: C3:12:72:6A:F5:60:AF:D4:E4:11:70:B7:CD:CA:CD:47:30:13:22:C0
Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16
Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
Certificate serial: 084F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
Manifest number: 0841
Signing time: Thu 24 Sep 2026 20:58:22 +0000
Manifest this update: Thu 24 Sep 2026 20:58:21 +0000
Manifest next update: Thu 01 Oct 2026 20:58:21 +0000
Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: p9wPiRMUVW4qeX7eb4p4FQ0sfRdXq88jBI3elcG4eOQ=)
2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: wKAEYn7N0s61lmDabEnuaSxEMJJCyF8MvcXmo7hrc/w=)
3: EX_lvS7gU1AvzbjKRgLhmWARlbs.asa (hash: +kZqapzmf5a4lhlOs86fylCVjupwGssekMG9E/s7pXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl
rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
Validity
Not Before: Sep 24 20:58:21 2026 GMT
Not After : Oct 1 20:58:21 2026 GMT
Subject: CN=6ab58eed-d4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:4d:58:97:84:fc:6e:80:31:be:65:b1:81:
e0:00:ab:61:3e:7a:f7:e3:12:07:08:81:8c:5d:e4:
9a:00:57:0d:dd:f7:c8:d2:d0:96:ac:20:3c:dc:df:
ad:3a:c5:3d:5b:12:b5:1f:0b:e9:e3:9d:a3:30:b2:
cd:b3:35:b9:aa:36:de:c4:6e:a8:36:18:25:55:8e:
ee:f1:9e:40:76:18:9e:69:e3:a9:ee:30:c3:c2:91:
a5:22:53:45:20:f7:82:31:77:62:2e:13:7e:85:c8:
ba:94:e8:d0:c2:fc:f3:10:42:a0:1f:f0:e3:00:23:
6a:83:fe:26:4d:95:18:b3:7c:a2:d9:8c:12:e6:c6:
82:99:89:62:9f:57:1e:14:44:3f:bf:e9:17:6f:6c:
fb:3f:e4:68:68:69:30:a8:64:b6:78:55:ea:73:c8:
25:62:bb:a9:af:f0:6b:e9:37:83:ba:5f:35:4d:7f:
c7:4d:41:bb:dd:dd:e6:c7:7c:4b:0e:cf:34:bc:42:
2c:b4:a0:1b:b1:ea:a7:72:46:c5:bd:a9:4a:66:39:
56:a6:b5:43:56:87:48:07:d3:6f:c9:f8:b9:60:69:
28:2c:f5:9e:65:63:46:4c:ba:9a:f7:79:fa:87:66:
32:a8:be:d0:5c:ee:b9:1b:c2:bd:fd:0a:5d:b1:4d:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:12:72:6A:F5:60:AF:D4:E4:11:70:B7:CD:CA:CD:47:30:13:22:C0
X509v3 Authority Key Identifier:
keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:74:4b:07:4d:1d:d4:09:36:55:cd:73:94:e3:97:be:3e:97:
e5:eb:20:0d:71:6a:51:84:60:22:17:5e:5c:7e:f9:40:0b:39:
f2:88:93:67:b3:dd:8e:9c:bb:1a:25:1e:58:48:7c:e7:87:6b:
ae:76:d9:76:e7:72:81:7c:f6:d3:12:df:b4:ba:dd:17:af:78:
64:94:1f:3d:63:27:15:84:26:d1:12:02:03:90:17:ca:f6:ce:
70:3e:42:10:ad:ca:dd:b5:3f:cb:f7:14:a9:84:5b:74:30:67:
58:00:ca:a9:b7:ef:af:3d:d4:a2:ce:b7:6a:05:84:8d:68:91:
32:87:6e:bc:dd:6e:ce:0d:38:bd:8d:24:60:b4:83:52:e5:66:
84:b1:72:8d:01:a9:74:dc:8c:44:9e:b7:26:f0:1e:30:20:cd:
70:86:6e:b0:c4:3c:4a:01:75:db:e5:00:67:c0:36:e6:fd:a1:
10:eb:d1:02:0a:ec:39:01:19:49:de:ca:41:65:17:0f:b6:92:
38:c7:a0:2f:1e:d6:78:65:28:d4:ae:0c:6a:c5:b1:a0:c3:fa:
80:de:dc:a0:d3:cb:4a:b6:82:a0:15:10:73:9d:4e:3a:88:b2:
37:f0:9d:b5:86:bf:4f:92:d4:4b:32:70:ba:80:6d:7f:3e:c7:
19:05:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:18:46 2026 by rpki-client