
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier: /YcDN2C9eF0bk0dfa0A55JEVwEaGdxy/GprXudxT4Dc=
Subject key identifier: 3B:D9:79:DC:76:90:E2:C5:15:DC:A7:27:11:21:BD:25:B1:0A:03:BD
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer: /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number: 0181
Signing time: Wed 25 Mar 2026 03:52:59 +0000
Manifest this update: Wed 25 Mar 2026 03:52:59 +0000
Manifest next update: Wed 01 Apr 2026 03:52:59 +0000
Files and hashes: 1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: yZ5im3b7oSMZy5b40Tyer4JxJ7fkegldpY3oAY+WX0o=)
2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: iI90c0kPDEFqDSBJB4+1vqswCDOFhWHQNpb/y5cuaW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Validity
Not Before: Mar 25 03:52:59 2026 GMT
Not After : Apr 1 03:52:59 2026 GMT
Subject: CN=69c35c1b-6794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:c7:b4:bd:c5:49:4a:d6:2d:11:64:c6:63:
85:af:38:05:9e:0f:19:15:13:b7:48:2c:aa:6c:de:
e5:da:ff:7b:5b:82:7a:1f:16:94:19:0e:a7:f0:20:
67:0a:20:94:64:37:dc:1d:b3:3c:94:05:26:3f:15:
0b:eb:fc:84:fd:3d:c2:23:89:05:20:e8:69:0f:1e:
dc:66:88:63:6f:ce:e9:b8:f6:df:94:de:2e:f4:21:
7f:f1:f1:6e:56:d6:b1:93:20:fc:b2:67:c8:1a:49:
0e:24:31:fd:4c:0d:d8:98:fc:4d:32:dd:8c:fd:ce:
e2:b7:be:9e:c0:cc:63:5e:dc:ec:5a:e2:cf:99:04:
ee:47:05:81:ad:e5:41:ed:7f:87:f1:eb:c6:1e:0a:
10:74:ad:1a:50:05:2c:49:2d:94:b5:66:aa:2b:d3:
19:21:61:d4:34:19:29:ab:f8:58:b2:a3:cb:e7:c2:
2b:48:7c:e5:12:3c:af:0a:28:45:09:82:83:d8:93:
54:88:ad:22:63:45:95:35:f3:3d:52:6d:7d:53:45:
ab:ed:f3:16:7f:a9:6f:f3:87:b0:a6:ee:70:88:08:
e8:9a:b7:0c:58:3b:94:9d:70:df:c8:e7:df:66:64:
09:e6:3c:88:f4:6d:fe:ad:3f:21:a6:64:47:8e:fe:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:79:DC:76:90:E2:C5:15:DC:A7:27:11:21:BD:25:B1:0A:03:BD
X509v3 Authority Key Identifier:
keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:bf:9b:31:b5:bb:0a:01:cd:55:e3:18:cc:41:d1:ef:60:ee:
7e:7d:eb:48:13:e4:14:56:ce:b7:ea:a0:bd:66:b1:f8:cd:0d:
a4:03:a3:99:92:f9:f6:6f:ed:c1:f2:14:c8:ec:3d:77:c9:de:
fc:4c:03:db:1a:de:b3:64:8e:9c:d6:97:4e:ed:94:a8:a1:7b:
86:ad:b7:3f:13:46:8e:f7:59:21:02:d2:5e:ad:d0:ae:de:b6:
be:18:5e:d0:f6:4b:7e:87:b5:b4:32:78:4b:96:90:63:e5:47:
6c:02:73:44:6f:b6:62:b5:f9:e2:b9:fe:03:52:be:d8:70:fa:
b0:59:a3:45:67:a3:e2:b3:e3:98:19:24:4a:35:85:68:a2:b6:
6f:f2:41:94:79:7c:28:99:23:1d:02:52:81:03:82:ae:3f:38:
c7:b6:5f:10:c6:62:11:fe:2e:e0:c3:02:6c:03:58:fa:0e:c3:
69:75:02:d6:cc:0c:2b:4e:5a:e9:79:74:a5:68:d8:45:99:3d:
1a:73:ba:4e:09:33:0a:bd:ed:7c:21:2a:b3:29:7a:69:18:f0:
21:70:4e:1b:f9:e0:d7:4c:c6:42:46:b6:2c:c6:c9:31:c9:a9:
cf:0a:09:65:61:ed:ed:7b:21:2f:f3:8a:49:ab:e5:43:f3:7b:
1e:db:b2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:50 2026 by rpki-client