
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json)
Hash identifier: +KWKTAUw00L6WRaNnHF/wE6CKA5caGTlMb2t7hMiWuU=
Subject key identifier: 59:9B:ED:76:9B:2F:45:32:0D:B2:64:BF:69:23:0C:76:78:F2:28:8A
Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Certificate serial: 090A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
Manifest number: 08FA
Signing time: Wed 14 Oct 2026 20:32:41 +0000
Manifest this update: Wed 14 Oct 2026 20:32:40 +0000
Manifest next update: Wed 21 Oct 2026 20:32:40 +0000
Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: yRioq5pN8TPC7HNv6inyHjEtQU2xKdvh82ZaZe8vqng=)
2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: g2COT7RPieke6fn1mIweQAMXMPjqkWRMy/0gtbJP0o0=)
3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: q5Y0uGRmUCg4iSbCFOqAPFa+DSzHUTjKsRs6A7GCSWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 20:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2314 (0x90a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Validity
Not Before: Oct 14 20:32:40 2026 GMT
Not After : Oct 21 20:32:40 2026 GMT
Subject: CN=6acfe6e9-ec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:e0:7d:7d:1b:19:25:3a:97:ba:04:d2:05:
a3:9d:6f:aa:45:a9:79:d0:a6:99:31:5c:c9:18:6a:
10:2b:3a:d8:64:ce:13:ed:c4:84:44:c6:55:ab:aa:
59:52:59:7c:73:cf:c0:ee:dd:6f:fb:a6:06:27:7b:
96:7f:01:83:75:2b:cd:fd:08:68:e6:8f:8e:89:3c:
6a:18:73:30:66:db:dd:de:01:23:a4:6b:38:d7:2b:
41:29:42:dc:a2:08:cd:e4:23:48:6e:61:d1:5d:a5:
53:f6:93:30:fc:0a:11:8c:9c:3a:b8:a9:80:7b:c3:
6f:c4:13:96:d5:a6:bf:b8:61:72:db:39:01:6b:2f:
33:8d:2b:46:02:0b:14:91:ed:12:3e:1b:17:42:a8:
24:c9:34:d8:91:a2:6b:1d:19:20:08:8c:69:6a:71:
b2:ae:6d:eb:01:bf:bd:90:b0:fd:11:95:87:28:91:
ce:57:88:a3:63:17:04:7e:da:33:0a:d5:93:8d:c7:
52:eb:61:8d:61:17:86:ac:3d:6c:95:c7:35:f7:1f:
c1:1e:0c:bd:f8:d9:b8:df:f9:ed:a9:6a:ce:eb:d4:
3b:5f:da:2d:86:80:8d:05:7d:8f:0c:e0:98:53:cf:
89:1f:ee:13:ab:99:7c:61:55:dd:4d:8b:42:54:8d:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9B:ED:76:9B:2F:45:32:0D:B2:64:BF:69:23:0C:76:78:F2:28:8A
X509v3 Authority Key Identifier:
keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:9f:fd:a3:69:a5:ed:5c:26:f7:9a:7b:51:24:23:6d:3f:95:
d2:e1:ad:85:9c:29:01:06:c5:2b:b3:f5:85:90:8f:19:50:2a:
c6:93:41:bd:a8:bc:5f:b3:08:1c:c8:43:39:c1:84:2a:65:44:
8f:fc:4e:e7:b3:e2:f7:33:81:ec:ec:b1:c8:65:2d:2a:88:19:
85:21:05:a7:f6:21:80:e1:a7:0e:be:20:d1:23:74:6e:22:35:
2c:52:4b:d8:9f:86:9a:b7:23:87:20:cd:85:47:2f:fe:11:7c:
55:b2:91:82:49:6f:51:41:84:0b:c9:74:74:bf:b0:13:a1:27:
0b:05:9b:eb:76:ad:60:2e:d6:7b:1c:0c:aa:e3:d5:9e:63:a7:
bf:e6:ea:c7:a9:ce:18:12:d5:4d:4b:02:e0:79:98:fe:73:0e:
28:9a:ef:12:ff:e7:64:25:cf:b7:71:3e:31:c5:cc:86:02:6f:
95:8b:73:98:36:38:ef:48:c7:fe:4c:ac:7d:32:4b:cf:fc:aa:
d6:4a:af:7b:90:6e:ea:8b:c0:1c:bb:67:ff:09:cf:c5:78:c6:
ea:23:08:e9:98:cb:75:42:ee:dd:6e:34:b8:5a:83:77:56:47:
c3:97:c2:e7:db:31:6a:45:a5:39:9a:ab:a8:e7:ce:eb:dc:fe:
94:23:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 07:49:35 2026 by rpki-client