
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json)
Hash identifier: qIDaBLV4RvQv8fff89oysHqbFpuD7n3BkIl+D/Hfv48=
Subject key identifier: B3:6B:ED:65:52:37:B7:6C:AB:F2:45:D8:AF:9F:DB:18:70:59:A2:0B
Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Certificate serial: 07E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
Manifest number: 07B3
Signing time: Tue 12 May 2026 21:39:38 +0000
Manifest this update: Tue 12 May 2026 21:39:37 +0000
Manifest next update: Tue 19 May 2026 21:39:37 +0000
Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: bfSXauIRnXwKVvbZNK5FpEnOKyWYFzfwAyjvec/t+bw=)
2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022 (0x7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA
Validity
Not Before: May 12 21:39:37 2026 GMT
Not After : May 19 21:39:37 2026 GMT
Subject: CN=6a039e1a-85e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:b5:ba:d6:ac:3a:b5:a9:55:56:78:0b:d8:
47:ca:15:8c:ea:8b:04:1d:ea:e0:9a:56:8d:18:69:
57:a9:c8:b6:f6:52:3f:84:dd:db:4f:1c:3a:eb:9e:
b9:4e:70:71:7f:91:fa:66:09:54:fa:4f:ef:cf:77:
75:c3:d9:bc:fd:ec:d0:ae:a8:74:6d:7d:4f:ed:77:
67:ae:a0:c0:74:9b:49:1c:2e:61:0e:98:31:c6:80:
d7:c9:18:01:f7:ba:9f:38:38:8f:bc:6c:07:9b:73:
25:24:01:c2:8b:79:2e:03:50:79:7e:bd:a5:58:58:
65:8f:05:7d:8a:5d:26:cd:e6:c2:0b:eb:65:b0:13:
bd:ee:11:29:ba:9f:38:6c:4d:00:cc:fe:68:1c:04:
bb:ae:9f:f5:64:bb:e3:18:cd:20:14:d2:77:ee:ef:
1d:9f:92:29:79:3b:ec:9c:bc:3d:ff:13:14:c3:17:
ca:85:f9:a0:de:10:52:1d:e6:ae:d2:85:f9:d2:1a:
7b:55:ab:e1:d0:4a:99:74:55:7e:20:c6:a4:76:6e:
82:8f:47:78:70:3a:c0:15:b6:91:25:3d:f4:0c:35:
0a:c2:09:ee:a7:32:18:2f:47:34:bb:de:7b:b9:0e:
3e:0f:ff:e1:e4:f3:fe:29:69:34:9f:16:4b:98:c3:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:ED:65:52:37:B7:6C:AB:F2:45:D8:AF:9F:DB:18:70:59:A2:0B
X509v3 Authority Key Identifier:
keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:33:80:27:3f:24:91:dc:2c:5f:7d:ef:8e:1d:a1:44:d7:8d:
2c:07:c2:9f:5e:11:8d:9e:98:81:af:bd:61:94:0b:2e:70:f8:
e9:17:c2:29:f5:91:18:c1:18:65:2c:bc:33:69:f0:db:bd:d1:
b1:90:53:d0:6b:fa:c3:a2:37:d3:17:dc:ea:b8:0d:78:aa:cf:
e7:cb:13:d3:7e:a2:21:60:65:c5:ca:b7:3e:af:e0:08:63:09:
e5:4e:3a:6d:d0:9f:ea:d9:70:22:de:28:02:91:f3:93:0c:7a:
de:19:7b:e4:47:f9:0a:cc:82:9e:5d:1d:c5:1d:8a:fd:00:1e:
ff:93:89:7a:1e:0f:2c:d1:59:fa:16:b1:40:21:5f:66:6e:d2:
0d:9b:2e:a5:4b:3f:89:8d:2c:d9:d7:b3:99:18:49:b6:87:29:
63:05:c4:fa:ab:f0:12:6a:9f:4c:a4:25:56:7f:46:8d:af:b3:
a1:23:c8:29:d7:58:d8:cc:11:fa:d2:ba:55:d5:e7:f3:15:3c:
c8:ab:45:55:00:b5:42:63:57:6e:d8:ee:7d:08:4e:c3:8a:50:
e7:62:d6:6d:0f:c6:8a:56:21:74:9d:10:0b:e8:8e:a4:3e:03:
4e:da:c1:1c:bf:a3:aa:93:8f:66:6d:a3:67:c3:25:f0:bd:3e:
9d:09:17:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:02:01 2026 by rpki-client