
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json)
Hash identifier: 3SNDN9aWkUG9ojIe1QxH1rCyzAkMiw/rS/HfqLpoY2o=
Subject key identifier: 2A:A6:98:A7:7A:F7:DA:14:21:2C:3F:FB:46:2E:56:F3:62:68:A1:EB
Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
Manifest number: 0164
Signing time: Wed 13 May 2026 04:56:56 +0000
Manifest this update: Wed 13 May 2026 04:56:56 +0000
Manifest next update: Wed 20 May 2026 04:56:56 +0000
Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: rk/Lb8YWnCALW2wgPJMe/OsWY1oJn2Apw7Rwkn9WrTc=)
2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: rwM85aK7lK+yIuUXlvt+45rHjWLjHKjyCpBV5oJ3MMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Validity
Not Before: May 13 04:56:56 2026 GMT
Not After : May 20 04:56:56 2026 GMT
Subject: CN=6a040498-d8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:8d:70:22:68:57:4b:fe:8f:4a:8c:ae:3c:
4d:5f:4d:b6:30:1d:32:7c:78:9c:01:52:b2:58:64:
7a:11:4a:1e:c6:4f:0a:0e:c3:ab:c6:7f:a8:97:44:
a0:2e:47:e6:c1:99:bf:2b:19:5a:2f:01:51:b0:5d:
95:55:32:99:01:63:e1:fe:38:81:10:91:18:73:82:
0c:f4:09:84:e9:06:fe:d9:e2:7b:4d:70:e1:2e:32:
8e:a7:2f:cf:4a:4f:4f:ce:a4:a7:ea:f4:c2:2b:6d:
96:3a:24:e4:b7:5a:a9:03:21:2f:4b:8c:82:77:e9:
de:69:c9:c2:57:73:ff:43:9d:6c:b1:fe:db:10:ec:
a4:90:58:b4:0d:09:fb:a5:9e:9a:18:67:4a:f7:0c:
f2:ff:ab:14:72:13:cc:85:46:88:31:04:c3:93:83:
98:c5:1b:b2:b0:78:d5:22:b1:25:73:21:b2:2c:f2:
cc:5c:d7:16:ce:da:22:45:f6:81:58:6b:04:0d:16:
f5:70:e8:1e:4b:54:1a:f7:07:e5:63:56:75:6b:d0:
49:bc:e9:02:01:d9:d9:69:3e:93:9a:90:be:4f:d3:
e9:99:09:07:18:cf:d9:3c:81:d2:98:50:d1:89:61:
e5:d1:e5:9c:37:1f:13:77:6d:8e:bb:a2:6f:fb:dc:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A6:98:A7:7A:F7:DA:14:21:2C:3F:FB:46:2E:56:F3:62:68:A1:EB
X509v3 Authority Key Identifier:
keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:c2:26:8c:6d:6e:1e:df:26:91:1b:36:6b:ce:fd:55:24:ca:
81:ba:03:fb:05:2c:71:22:fd:ff:89:2f:e5:ed:8f:ca:36:48:
86:07:cd:fe:35:ec:41:bc:0d:b2:62:f4:07:a0:34:ae:92:bd:
77:0b:d6:5a:52:41:f3:39:b6:f7:7f:a2:d9:8f:50:2b:1e:fd:
a8:6e:0a:95:2c:70:d7:15:13:3f:5f:8d:5b:b2:d1:ed:be:1e:
8e:fe:c4:d8:a2:a0:fc:87:bf:60:35:d3:86:f8:bd:73:1f:10:
b6:02:10:91:a2:a9:da:2a:de:b6:ab:f9:73:7a:83:a9:1b:4b:
76:f8:ea:ce:f6:5d:e7:c3:b9:ab:2f:b9:5e:62:b3:30:64:ef:
a2:60:6e:fd:be:d4:a1:38:7f:8b:03:f5:72:4a:89:3c:ff:5c:
10:ea:22:09:bb:e0:43:32:0d:b7:8a:38:f2:5c:1c:d0:79:5a:
9d:02:22:5f:f4:ce:d9:b1:e1:c9:a8:e9:4f:ce:4a:72:d3:d9:
4d:b4:2c:64:16:0a:9e:f3:41:13:b4:4b:d2:be:57:dc:61:cb:
4a:46:11:03:a8:24:1a:38:2e:63:9d:03:ce:31:c8:e6:33:1b:
91:5f:ba:40:e5:a4:ba:73:cd:de:1f:d7:e8:56:0f:92:26:5b:
ad:18:8c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:15:10 2026 by rpki-client