
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier: EqIcHqiPlDavnApgSJA5ctaCgGZD28XbAOESAqOCMWk=
Subject key identifier: 2B:53:58:BE:5A:35:59:96:C0:50:EA:36:52:7B:59:51:A4:50:6A:15
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial: 0814
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number: 1C02
Signing time: Fri 24 Jul 2026 17:04:29 +0000
Manifest this update: Fri 24 Jul 2026 17:04:29 +0000
Manifest next update: Fri 31 Jul 2026 17:04:29 +0000
Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: otYHLtrNN2zvux2sgKY4arGMOzuXGomDQRYmE8AL+90=)
2: C56AF018E98B11F0A24D3E834F6F56BC.roa (hash: MIF4G38mLftqnqeE9T0qy+6BeKMKul+rB3EiPJaG4sA=)
3: C6BB442CE98B11F0A24D3E834F6F56BC.roa (hash: fQvlcrwBQbuojkhr1MzXvqt8o4OCenjdJMRcowohAyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 17:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Validity
Not Before: Jul 24 17:04:29 2026 GMT
Not After : Jul 31 17:04:29 2026 GMT
Subject: CN=6a639b1d-bfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:75:2e:84:d6:5e:08:5b:63:22:f1:58:3d:
7e:bb:0b:50:2a:c5:80:c5:40:98:8f:7a:15:e8:5c:
cb:5f:c4:36:bf:ca:4a:0b:c2:26:e5:47:96:30:bc:
3c:96:31:f8:e5:c9:46:aa:26:e6:80:ec:c0:22:95:
7d:7c:72:d0:4e:74:cc:a5:4d:52:a8:2f:48:16:63:
1b:84:c8:de:06:2a:1e:f0:6c:10:8c:83:dd:93:ce:
7c:1a:a8:dc:79:7e:a3:a5:e5:c2:d5:d6:c2:96:3b:
8d:34:0d:3e:30:0f:75:7d:6e:d5:8c:75:4f:0a:c4:
09:89:a4:4c:98:fb:c5:b1:c5:87:ac:95:1b:95:d9:
27:eb:c4:39:6a:e8:2f:02:dc:f1:18:f8:c2:ee:48:
74:e8:32:ec:69:51:c8:b2:15:ac:38:d1:1a:84:93:
25:32:d9:34:0f:16:67:43:bf:d6:91:50:c5:d4:c7:
92:3f:de:27:48:3b:14:90:c8:fd:13:19:6c:9e:e0:
61:2c:c9:35:b8:66:ee:d0:1f:03:91:7e:fe:7f:ef:
92:a8:4d:75:12:27:10:62:94:56:dd:48:0f:7b:d2:
e2:d8:ef:3d:f0:13:be:36:2d:c9:df:64:a3:ab:ad:
4e:99:d2:af:28:ce:d5:8d:60:3c:10:c7:17:81:c0:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:53:58:BE:5A:35:59:96:C0:50:EA:36:52:7B:59:51:A4:50:6A:15
X509v3 Authority Key Identifier:
keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:f3:2a:6a:e5:5d:dc:66:b1:94:77:d9:9b:b2:5a:f1:c7:72:
d5:86:14:ab:db:0a:8e:fe:1c:0c:51:34:6e:34:86:9a:cd:41:
0b:e2:90:3c:2b:0f:45:6f:d7:81:28:57:c4:35:16:da:a0:b0:
6f:85:ac:7a:93:3a:53:72:f2:ed:9c:d9:09:3d:b1:18:4c:c2:
09:ff:29:72:c0:78:7e:c4:5e:8c:40:07:97:46:1f:17:88:cd:
d5:f7:37:0e:3f:b2:4e:76:59:46:88:b9:cd:5a:c9:9a:20:9e:
de:50:89:3c:75:f1:94:00:6d:a0:6a:49:5a:7e:97:91:07:7e:
4e:cc:75:a4:aa:90:eb:52:f4:cc:25:1b:82:6c:3e:de:52:96:
d8:67:da:91:7f:1f:d2:15:50:62:fd:64:ae:78:2c:29:88:91:
cb:b8:cf:2e:23:62:fa:54:d3:40:70:86:32:2b:4d:b5:10:e7:
74:71:3b:25:d6:87:c2:4b:24:95:5e:f8:13:ef:a3:68:50:df:
58:94:70:2e:7c:13:84:32:ab:9e:82:2e:23:46:f7:f9:8b:65:
fb:87:9e:85:e5:00:10:07:7b:56:b6:ff:57:75:47:ed:83:09:
36:38:b6:8f:54:68:79:d7:a5:c7:5a:73:34:c8:9d:7c:8d:1b:
72:75:f2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:08:03 2026 by rpki-client