
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json)
Hash identifier: yAFwjHqMyigtzWPFZcb1xQ4pNaZo+RsTCvbfzGnYh2s=
Subject key identifier: FF:A6:52:4E:D4:3B:A6:FE:0C:CE:52:D1:A5:C1:AA:CB:DD:6D:4E:24
Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Certificate serial: 08DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
Manifest number: 08CF
Signing time: Wed 22 Jul 2026 20:53:58 +0000
Manifest this update: Wed 22 Jul 2026 20:53:58 +0000
Manifest next update: Wed 29 Jul 2026 20:53:58 +0000
Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: epHg1WqZ81rz02yeLQm1ghJnIwB5/gUfmY968doKHuE=)
2: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: q5Y0uGRmUCg4iSbCFOqAPFa+DSzHUTjKsRs6A7GCSWc=)
3: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: g2COT7RPieke6fn1mIweQAMXMPjqkWRMy/0gtbJP0o0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271 (0x8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Validity
Not Before: Jul 22 20:53:58 2026 GMT
Not After : Jul 29 20:53:58 2026 GMT
Subject: CN=6a612de6-8196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:3f:44:1e:57:9c:76:68:72:12:73:0a:d0:
15:3a:0d:cd:fb:3c:fb:3a:64:f9:2c:4a:4c:d9:b0:
57:6f:86:e4:64:59:b7:13:fe:e0:2d:98:5c:b9:da:
6b:3c:b8:fc:8d:91:4c:ab:ce:dc:1b:e2:50:80:ec:
74:f8:fa:3d:49:4e:47:05:b6:f4:b5:f1:4d:22:85:
1b:61:b5:ab:54:a8:cd:32:b8:43:47:da:48:4d:36:
6f:a3:16:56:0e:ba:c7:5d:98:d0:75:c7:c3:54:d4:
a8:2a:9c:42:5b:82:d3:2f:cf:12:96:9d:ff:ef:29:
c2:38:9b:7c:c2:da:7b:f3:40:cb:7b:46:31:de:96:
79:c4:f8:77:02:89:91:1a:f8:f6:ad:33:dd:9c:7f:
58:f7:76:ad:4f:ce:d5:ba:7e:40:e5:b2:0a:73:42:
48:50:6d:69:93:1e:89:fa:d0:4f:54:1f:e2:57:6d:
7f:a4:d9:a5:88:df:d1:ad:7c:9d:09:56:61:6f:08:
1c:78:58:c1:55:62:23:cb:08:d8:93:67:d8:7d:a8:
37:e3:9c:42:02:ad:2d:4e:f9:b7:16:38:34:df:3e:
08:17:d0:9e:f6:3a:b2:48:1a:cd:0d:61:e2:44:a5:
5c:39:81:f2:e7:c7:23:8f:37:cc:da:98:b4:e7:02:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:52:4E:D4:3B:A6:FE:0C:CE:52:D1:A5:C1:AA:CB:DD:6D:4E:24
X509v3 Authority Key Identifier:
keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:64:50:7f:b4:5d:ca:7d:b2:1f:49:82:13:ee:71:16:83:c9:
6e:c8:4f:e2:d6:02:5c:cb:15:fd:90:8e:3e:c3:b2:80:fb:d7:
64:79:f2:55:98:53:53:ab:60:60:7a:88:64:71:92:0e:03:df:
70:bd:a6:b6:a6:a3:aa:8b:53:dc:e6:da:06:79:be:8a:3d:f4:
27:b8:dd:9a:95:60:6f:2b:db:9d:41:f8:58:c9:ad:11:86:85:
be:fa:34:f8:31:a5:b3:48:3e:76:df:58:9f:03:df:0c:ef:2c:
82:37:f1:13:b3:98:d8:16:5e:58:93:80:ce:81:cd:0a:ae:51:
21:08:10:aa:e2:44:25:8a:23:02:11:c3:0a:db:f9:df:62:b0:
40:45:e3:32:e2:0f:a7:37:e8:f2:9c:a1:07:ae:bb:53:96:1c:
d4:0b:6c:89:6c:c2:08:c1:1f:ba:ab:d9:27:ba:10:06:d8:14:
eb:29:22:74:ae:cf:90:5d:84:7d:c8:36:47:2e:9a:3c:e9:b1:
b6:b7:2f:0b:62:53:a5:4e:98:a7:fb:e6:da:57:b2:f2:b0:c6:
ba:bc:12:ce:a8:82:1d:be:e0:00:a2:71:68:49:81:a0:1b:94:
ec:99:33:05:dc:90:fa:c3:40:65:db:71:93:4d:86:fd:3c:f0:
4c:22:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:07 2026 by rpki-client