
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier: z0rXq2iG2rcmHF7pEQ+9cfWjVpN7SgCPkcPZXChGf4Q=
Subject key identifier: D7:97:F7:B2:CA:20:B4:B3:61:BF:8D:3B:0B:E9:D6:73:F0:F9:5E:0F
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial: 07D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number: 1B86
Signing time: Tue 24 Mar 2026 16:50:45 +0000
Manifest this update: Tue 24 Mar 2026 16:50:44 +0000
Manifest next update: Tue 31 Mar 2026 16:50:44 +0000
Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: RY+a5rS5djEQ/IUJA1MqOExfExmpBf3IrSZ2dxvw0TU=)
2: C56AF018E98B11F0A24D3E834F6F56BC.roa (hash: MIF4G38mLftqnqeE9T0qy+6BeKMKul+rB3EiPJaG4sA=)
3: C6BB442CE98B11F0A24D3E834F6F56BC.roa (hash: fQvlcrwBQbuojkhr1MzXvqt8o4OCenjdJMRcowohAyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2006 (0x7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Validity
Not Before: Mar 24 16:50:44 2026 GMT
Not After : Mar 31 16:50:44 2026 GMT
Subject: CN=69c2c0e4-3deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:49:60:f1:3d:3e:04:e0:6b:62:49:43:59:
26:10:dd:85:f1:ca:43:7c:46:e1:4d:a4:ad:64:06:
d6:bd:af:6c:1b:e2:1d:97:cf:aa:73:8b:53:15:4c:
bd:aa:5d:2d:58:e8:bb:76:c6:8a:54:96:ba:20:4c:
71:15:94:c4:94:10:79:0d:5a:22:50:83:af:60:00:
47:42:4f:1b:f4:7a:09:f6:9b:ae:99:3f:db:44:5f:
dc:37:e3:e6:7c:e0:e6:6f:2e:9c:8f:2c:70:98:9c:
c0:d2:6d:e9:ba:7e:50:e7:fa:e8:d1:5b:3e:65:e2:
84:5f:10:03:32:be:af:aa:ba:b3:17:63:33:7a:ac:
f1:f2:b7:d9:eb:9b:4d:30:27:f0:13:8f:16:a1:83:
e7:fa:3c:89:69:50:19:6b:0c:4c:69:3e:d9:ed:03:
70:03:69:6d:bf:96:b2:11:cb:bd:b2:61:59:df:c8:
22:69:5d:50:fc:90:44:1e:54:74:3c:8e:75:7d:cd:
1c:c9:0d:48:80:77:2d:43:20:20:17:90:60:e2:c4:
cf:aa:35:45:37:f9:f2:b7:60:61:57:a4:98:47:7e:
21:4c:2b:3f:38:d5:a5:af:2c:f9:5b:31:53:7e:11:
6d:d9:66:b7:22:c1:4a:ad:04:b9:86:51:e2:fa:84:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:97:F7:B2:CA:20:B4:B3:61:BF:8D:3B:0B:E9:D6:73:F0:F9:5E:0F
X509v3 Authority Key Identifier:
keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:3e:da:57:f1:32:52:39:74:10:e4:d3:4c:0a:41:58:86:d3:
2e:a0:2e:e1:18:69:88:da:2b:06:34:a3:e5:31:cd:2a:f9:c2:
61:f2:b3:5c:81:72:69:80:fe:22:99:85:14:d6:0a:ff:c2:51:
b7:91:dc:95:2b:ab:55:6c:f1:52:77:91:48:ed:f5:6f:e8:69:
ec:6a:ba:6a:00:96:dd:af:18:df:da:15:d2:c9:0f:df:a2:25:
fc:57:b5:18:ce:22:6c:2b:6d:ed:a1:b5:04:b5:f1:2e:fe:bb:
c5:0b:f4:11:a3:03:46:59:c6:34:af:76:4f:44:ce:6d:be:e1:
ee:3a:1b:e0:c1:18:d8:75:84:41:fd:14:40:22:9e:f6:74:df:
99:0d:3c:7c:a7:bd:05:19:74:2b:05:c4:79:a7:6f:29:b1:6b:
96:41:3d:c9:84:9b:66:22:a0:05:20:cf:0a:57:03:69:90:68:
43:75:9f:eb:d9:fd:89:ed:a6:ff:c3:3f:2d:10:b3:87:46:ec:
4a:80:e4:3f:4f:84:35:4b:58:34:74:9d:6b:99:0f:5d:54:f4:
d3:a6:32:ce:db:4a:f4:ee:e8:20:d6:83:30:3e:53:c0:15:46:
07:6d:9b:db:5e:33:de:68:b2:1b:bb:29:b2:12:b2:21:82:55:
69:58:e3:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3
NERFRDQ2NkUwHhcNMjYwMzI0MTY1MDQ0WhcNMjYwMzMxMTY1MDQ0WjAYMRYwFAYD
VQQDEw02OWMyYzBlNC0zZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzGNJYPE9PgTga2JJQ1kmEN2F8cpDfEbhTaStZAbWva9sG+Idl8+qc4tTFUy9
ql0tWOi7dsaKVJa6IExxFZTElBB5DVoiUIOvYABHQk8b9HoJ9puumT/bRF/cN+Pm
fODmby6cjyxwmJzA0m3pun5Q5/ro0Vs+ZeKEXxADMr6vqrqzF2Mzeqzx8rfZ65tN
MCfwE48WoYPn+jyJaVAZawxMaT7Z7QNwA2ltv5ayEcu9smFZ38giaV1Q/JBEHlR0
PI51fc0cyQ1IgHctQyAgF5Bg4sTPqjVFN/nyt2BhV6SYR34hTCs/ONWlryz5WzFT
fhFt2Wa3IsFKrQS5hlHi+oRrYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeX97LK
ILSzYb+NOwvp1nPw+V4PMB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5
NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq
UFRub2NDSTRWbFYwM3RSbTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMD7aV/EyUjl0EOTTTApBWIbTLqAu4RhpiNorBjSj5THNKvnCYfKzXIFyaYD+
IpmFFNYK/8JRt5HclSurVWzxUneRSO31b+hp7Gq6agCW3a8Y39oV0skP36Il/Fe1
GM4ibCtt7aG1BLXxLv67xQv0EaMDRlnGNK92T0TObb7h7job4MEY2HWEQf0UQCKe
9nTfmQ08fKe9BRl0KwXEeadvKbFrlkE9yYSbZiKgBSDPClcDaZBoQ3Wf69n9ie2m
/8M/LRCzh0bsSoDkP0+ENUtYNHSda5kPXVT006YyzttK9O7oINaDMD5TwBVGB22b
214z3miyG7spshKyIYJVaVjjYQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:08 2026 by rpki-client