
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier: +cxAZgvdZVUujCC5d38Htgng6iYIvxF1TxdOJcPcl9k=
Subject key identifier: 04:7D:60:53:A9:56:BD:5C:8D:BA:D8:A9:5C:73:3E:88:F1:AF:4E:7E
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer: /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number: 01BE
Signing time: Thu 23 Jul 2026 05:18:55 +0000
Manifest this update: Thu 23 Jul 2026 05:18:54 +0000
Manifest next update: Thu 30 Jul 2026 05:18:54 +0000
Files and hashes: 1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: JOGbK76RG5Rz4GYnSMPeWuKf5lORPrRQHP8TrI5V/90=)
2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: iI90c0kPDEFqDSBJB4+1vqswCDOFhWHQNpb/y5cuaW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Validity
Not Before: Jul 23 05:18:54 2026 GMT
Not After : Jul 30 05:18:54 2026 GMT
Subject: CN=6a61a43e-1eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:3a:ef:52:d0:b4:bd:2c:63:a7:ff:fc:87:
36:6d:84:de:61:ca:18:af:60:dc:a1:27:a4:0f:f0:
95:c0:b0:5e:13:47:1a:a5:45:08:40:13:5f:d0:58:
a3:80:11:5f:20:e7:ac:f6:42:fd:9e:ba:48:27:b8:
3c:db:dc:d4:f2:fa:2b:78:87:fa:d8:24:44:67:fc:
da:9a:bf:53:45:c8:b3:df:cc:f6:4b:77:e5:bb:26:
1b:86:4c:b0:e6:c5:19:07:0b:e5:82:f0:4b:26:33:
da:04:77:bb:2e:57:8e:32:54:ba:59:b8:ef:fb:c6:
40:34:43:72:63:49:e9:7d:c5:75:02:e7:c4:d3:35:
fd:0b:8a:d0:19:ef:70:24:7a:c9:95:aa:68:d8:b1:
e5:99:12:77:e7:ab:5a:1a:df:66:52:40:15:ba:ef:
35:1f:9b:31:84:85:f7:22:5f:67:f9:1e:5b:eb:18:
5f:ab:20:2e:32:2c:3d:0b:ac:d2:87:3c:33:30:ff:
3a:10:40:90:2f:4b:b9:a5:0b:c6:7c:9f:aa:84:e6:
6f:ba:be:fe:57:7a:2f:05:3a:bd:d7:ca:02:28:ca:
cc:7c:d7:a8:b3:fa:fb:c2:ef:65:43:24:fc:22:25:
2e:d0:5f:2e:ec:85:db:14:2c:d3:91:db:41:29:6c:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7D:60:53:A9:56:BD:5C:8D:BA:D8:A9:5C:73:3E:88:F1:AF:4E:7E
X509v3 Authority Key Identifier:
keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:65:d4:e0:5c:26:1f:3c:2d:5c:5b:b1:71:77:af:78:2f:
71:89:d1:14:d6:01:49:2e:4b:9d:2d:bd:52:e7:e6:b8:30:7b:
9c:bb:31:0c:be:a0:a9:cb:17:0e:2f:a4:34:ef:36:f4:a4:14:
8a:9e:94:5d:86:47:a9:ec:4c:06:7b:92:bf:ab:3d:35:1e:03:
30:57:d5:a0:24:c9:cd:bc:89:b6:f8:6e:18:f5:73:82:82:e7:
54:bf:d3:74:4b:3c:7a:76:23:33:92:8a:5c:e6:fa:f9:b7:e7:
ae:6f:68:c8:11:6c:32:c1:59:44:7f:0a:e9:c8:be:0a:31:27:
f3:d3:f9:24:64:db:e9:d5:5b:90:55:d6:d0:67:8c:fb:42:47:
40:44:d8:9d:92:e6:4b:fa:de:eb:35:14:13:d6:26:23:64:54:
64:2c:3e:05:28:11:e2:7e:34:66:1d:b2:64:72:7f:05:a2:ec:
f1:3f:da:e1:1c:91:c8:c9:c6:16:10:b8:5c:ff:66:90:0a:04:
16:de:25:3b:97:6a:0f:1d:45:dd:f9:a6:43:0f:08:aa:cc:16:
3e:12:46:4f:f6:ee:83:d3:b2:b2:c6:3e:05:20:72:41:28:0e:
de:32:97:5d:32:74:92:7d:c0:6e:93:07:f8:44:f3:65:ff:d1:
89:41:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:31 2026 by rpki-client