
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json)
Hash identifier: XsWZLKyxh2R4KcqIBOgzpVzGRoIQ9ehnP3qicTlyyqI=
Subject key identifier: 29:5C:86:CB:87:09:F6:46:F4:F1:A4:AE:13:AA:87:B7:3F:86:E1:B8
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial: 0832
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
Manifest number: 07FF
Signing time: Thu 08 Oct 2026 21:32:44 +0000
Manifest this update: Thu 08 Oct 2026 21:32:44 +0000
Manifest next update: Thu 15 Oct 2026 21:32:44 +0000
Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: LbW4+tAUEHFFdOyJXdcZ88mHXwtTW7Idn/Y5BKzrl+0=)
2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 21:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Validity
Not Before: Oct 8 21:32:44 2026 GMT
Not After : Oct 15 21:32:44 2026 GMT
Subject: CN=6ac80bfc-1dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:b4:10:46:0b:bd:7b:8f:a8:31:20:5b:52:
d0:49:ab:1f:3d:02:ef:2d:2a:e8:aa:27:e6:1c:23:
3e:de:41:47:9a:50:a6:4c:f8:3a:37:31:c1:20:ae:
6a:cf:35:1e:c7:0d:67:7f:8e:83:d6:e8:bc:c8:fd:
1a:c9:6e:b2:dc:24:99:b1:74:36:03:5d:0d:f6:9e:
bc:fb:d4:41:40:7b:d7:31:27:7e:cf:33:47:5a:61:
f8:dd:09:58:96:52:76:d1:d1:57:74:6b:bc:8f:43:
63:b4:a7:7a:12:c1:8d:08:b7:8b:e8:a4:e7:da:2d:
9e:a2:61:d1:22:cb:5d:bc:6d:fc:94:e9:db:8b:f1:
7d:f7:9e:26:e5:cd:b7:25:73:9b:19:e6:dc:19:a2:
0d:21:bc:68:41:93:79:a2:21:38:68:9b:a3:4f:7b:
0e:fe:02:af:9d:d0:94:27:c6:b2:2d:ae:15:a0:f9:
ea:25:9a:ce:be:86:c5:90:3f:2e:7f:8b:62:ae:e3:
71:c3:e3:dc:de:94:99:27:09:f6:04:96:77:d4:5d:
f3:6b:5e:95:07:2f:22:b7:0b:1a:b8:2b:fd:d8:9e:
c5:85:77:c5:8f:a0:b9:cd:8b:60:72:da:d1:fd:23:
34:ac:23:b6:1d:8b:53:b6:ef:2d:1d:75:48:27:e2:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:86:CB:87:09:F6:46:F4:F1:A4:AE:13:AA:87:B7:3F:86:E1:B8
X509v3 Authority Key Identifier:
keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2b:cd:f5:92:45:5d:2c:87:9b:8d:e5:06:54:71:f1:83:62:
00:eb:a5:1c:30:c3:6d:b7:d0:70:8a:f2:46:4a:92:f2:84:c5:
82:d7:ea:79:4f:18:8a:73:54:8a:dd:82:04:27:d1:c9:5e:13:
47:df:6d:a9:eb:47:70:93:af:7a:ab:5e:fe:87:b1:31:03:44:
cf:b6:cc:b6:f3:d1:fa:45:00:1e:00:8f:92:18:98:7e:88:b5:
f0:a1:0b:5f:ac:00:4d:5d:b1:f2:ff:33:57:05:fa:ed:88:5e:
e6:c2:78:8d:70:0d:4d:7f:87:08:29:5d:de:9d:11:51:2e:4a:
73:14:11:36:00:60:b4:55:1b:c0:e1:ed:9e:b7:dd:cc:40:f3:
20:c9:9d:7a:08:e9:d2:fc:86:6b:ba:41:64:03:45:e7:59:07:
9c:e6:4a:9a:ee:a3:33:23:5b:e5:d9:5e:24:b8:20:f9:30:4d:
d9:a3:12:d5:48:5d:31:a8:81:fc:51:00:c5:ac:2a:b7:f6:9a:
15:4b:1d:e8:a4:bb:8d:dc:15:63:77:62:e6:50:b9:21:76:91:
0d:ef:65:4f:65:ea:88:ef:05:ce:7e:cf:08:7b:9c:b2:19:c4:
7b:2a:1c:3c:7b:af:7f:d0:c7:7f:02:62:57:aa:f9:5b:ea:8b:
20:9a:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:06:56 2026 by rpki-client