
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json)
Hash identifier: AtLULhDT4HZdD37jZ1chqzBiprXlYZ4EdFlf6b9q88g=
Subject key identifier: 42:BE:0E:0A:6F:20:0F:F5:82:05:6D:B2:09:59:DC:32:CF:62:2C:36
Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Certificate serial: 0CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
Manifest number: 0CDB
Signing time: Tue 12 May 2026 18:24:22 +0000
Manifest this update: Tue 12 May 2026 18:24:22 +0000
Manifest next update: Tue 19 May 2026 18:24:22 +0000
Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: b4Vs3MvqA2V6IgKVoHuIuUPAtVHBpiuI8NisK6JM588=)
2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 5Ti6m1LIl0TQP6ix0VQfMwgNVX0N4OYoM9ENVwcx4C0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Validity
Not Before: May 12 18:24:22 2026 GMT
Not After : May 19 18:24:22 2026 GMT
Subject: CN=6a037056-3168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:0a:6a:1a:92:f3:26:4e:39:b3:59:0b:31:
c8:a8:60:18:fa:20:32:92:12:8a:ed:59:ae:57:d9:
28:3d:c0:97:4b:8b:e3:e3:e1:15:6e:d7:42:84:a7:
dd:fa:63:23:ad:67:29:94:ec:fd:99:d4:4c:30:ee:
75:e3:6a:23:02:d6:38:35:a0:92:62:aa:40:85:d4:
e1:0a:8b:01:38:cb:97:94:b5:b7:27:44:f7:ca:50:
1d:8f:20:ce:d1:15:69:f6:58:86:f3:78:19:8f:78:
fc:95:60:ba:03:33:64:9f:0f:11:c6:9b:4b:61:fe:
c5:56:61:b3:57:89:ef:d6:13:6d:a2:af:f9:31:b5:
bc:4b:4f:60:0b:6d:86:50:c8:19:60:94:c6:c0:d1:
4b:c8:76:0b:3b:13:08:f3:8f:bd:0c:3d:8f:9e:98:
3a:58:d3:2b:74:18:31:67:d3:d0:6a:f2:30:9e:e1:
6a:d2:ff:94:0f:40:da:69:20:cb:63:4b:a1:17:19:
e5:aa:e8:ad:b8:06:55:87:00:3a:f3:44:4d:b3:26:
3d:d3:eb:78:78:22:0b:69:14:19:1c:03:c3:21:ee:
a9:1f:12:bc:90:91:16:dd:07:77:6c:a3:0a:44:f3:
6e:9d:45:4d:9a:15:1c:09:35:2a:65:ed:44:c3:e7:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BE:0E:0A:6F:20:0F:F5:82:05:6D:B2:09:59:DC:32:CF:62:2C:36
X509v3 Authority Key Identifier:
keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:54:8c:d1:92:98:d5:6b:db:57:32:ed:2e:20:4f:08:ed:a4:
0f:96:b5:7c:31:05:44:17:01:29:08:67:a8:6c:9e:40:23:dd:
aa:ad:80:e7:19:77:f1:a3:11:c7:7f:3f:56:cd:5d:35:7b:e4:
78:01:49:90:49:cb:25:04:5c:5c:95:10:f7:52:02:ea:25:a6:
14:7d:86:c1:02:1f:06:94:ac:54:10:e6:c7:9f:aa:da:84:ad:
2d:fd:62:1c:bd:33:22:f8:cd:9b:01:53:1c:c2:d2:35:97:c2:
0d:41:ba:a7:42:44:c6:79:f9:5c:8b:59:72:5e:7b:7e:85:a7:
98:f7:ea:31:50:0b:a3:8e:ff:52:b4:69:a0:4e:ca:32:50:f1:
ef:b7:11:84:b7:2d:43:e9:ef:58:7e:67:b1:7f:b5:09:e2:f1:
25:08:da:7d:b1:d0:27:33:39:f8:2c:d8:2b:61:96:83:2b:69:
a0:31:a5:fc:45:03:22:e2:a4:44:4d:96:24:80:e8:a1:e5:c3:
2c:ca:72:e7:09:93:bb:87:bc:7e:c3:ba:b6:49:cc:91:10:38:
ff:52:b7:1b:9a:c1:d2:5a:02:f4:06:e4:fd:a7:82:db:e8:51:
40:ea:a3:33:53:7b:e4:39:97:10:3c:67:5e:06:a1:1d:18:30:
b5:96:b3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:18:04 2026 by rpki-client