
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json)
Hash identifier: cZrCUyF+DN43O+s+NB9iTjA2DzLvbaojVOHO42bRrxY=
Subject key identifier: 81:48:B1:25:21:EE:BC:17:46:17:1F:35:63:46:9C:CB:07:46:12:13
Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
Manifest number: 014B
Signing time: Wed 25 Mar 2026 04:25:37 +0000
Manifest this update: Wed 25 Mar 2026 04:25:37 +0000
Manifest next update: Wed 01 Apr 2026 04:25:37 +0000
Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: 93n4a0bvkMD50nuR4gqAIOBqxuNjrs3n0h2ye3JC9tU=)
2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: rwM85aK7lK+yIuUXlvt+45rHjWLjHKjyCpBV5oJ3MMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Validity
Not Before: Mar 25 04:25:37 2026 GMT
Not After : Apr 1 04:25:37 2026 GMT
Subject: CN=69c363c1-2613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:5b:af:36:9c:8c:2a:0b:52:6e:4e:4f:64:
08:fe:7b:aa:19:8b:40:dd:28:94:d9:15:0b:10:28:
29:a6:13:d6:03:ce:d4:78:c1:8c:29:77:55:e2:94:
75:d3:ff:99:c8:b2:c4:11:9b:6f:7e:b6:be:66:94:
42:87:37:13:32:58:c9:92:fc:42:0d:2c:17:81:21:
93:15:09:0c:cb:95:bc:3a:4f:33:04:3e:d6:43:43:
8a:97:e8:61:1e:f3:3b:4e:1b:c3:9f:71:bc:f5:e7:
13:a5:60:d7:0d:67:cb:07:ed:e0:a9:04:27:3a:08:
68:a2:12:c1:c7:ff:14:12:e8:6c:79:82:c9:d6:22:
99:ae:a5:0b:00:1e:02:fc:dc:e2:5e:57:fd:c5:c2:
f4:56:17:82:dc:cb:0d:d7:ba:27:f9:8c:73:26:68:
ea:18:5a:1c:6d:8b:bc:33:64:51:82:97:7f:58:33:
a3:42:9a:e0:5c:a1:01:79:8e:9a:bb:24:14:2e:51:
22:70:d8:22:85:3e:1c:37:a5:46:ee:b2:84:ed:2e:
36:12:28:8a:0a:6e:e2:2e:ce:40:8a:e2:42:fa:91:
d3:82:eb:03:fb:6f:70:80:33:89:ca:93:0c:61:f5:
52:24:f9:60:16:54:24:c5:d5:f5:4d:35:5f:7c:db:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:48:B1:25:21:EE:BC:17:46:17:1F:35:63:46:9C:CB:07:46:12:13
X509v3 Authority Key Identifier:
keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:ec:60:94:e7:ca:f5:7f:ce:50:4e:61:38:84:36:09:3b:4e:
b3:e5:91:ae:b9:93:48:e3:13:1d:e9:5f:49:6e:c9:d1:ce:de:
c7:87:fe:ac:3f:aa:27:63:18:56:8a:4f:40:16:80:a2:1b:5a:
12:41:32:96:b2:21:19:3b:1c:51:b4:9f:b4:ea:09:57:71:42:
2d:eb:97:4a:56:f5:54:4b:72:0f:6e:8d:fa:c0:ed:61:17:b3:
a1:23:6f:f5:00:28:92:59:65:b2:6c:b0:2b:bc:cd:f7:e0:0b:
33:4c:50:96:13:b5:a0:a0:c6:b8:34:26:f3:b5:51:7d:a0:52:
e3:3f:9f:48:0f:b0:8a:f8:f1:a1:d4:af:5b:b2:9d:05:10:82:
61:8f:2f:e3:c2:9b:3d:94:d4:43:bc:71:eb:1c:a9:d9:5a:59:
3a:19:25:3f:36:f8:e6:4f:af:e7:30:bd:3a:eb:9b:81:70:15:
31:e3:6d:75:5e:4a:3d:84:75:22:c2:4a:32:7c:27:2b:bc:40:
81:e7:f6:42:83:d3:74:57:12:05:0a:de:1d:0d:bb:9c:81:b4:
eb:2e:2e:bc:93:f1:e5:dd:bb:b3:ab:9a:95:de:41:eb:f5:f4:
e4:8e:66:0a:35:e8:ed:2f:1a:fc:a1:2f:c3:8d:49:b3:1e:46:
49:b9:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:58 2026 by rpki-client