
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
File: NXR5DY34KztVHjtwJXG69VqemWE.mft (raw, json)
Hash identifier: lkVFPIeN/mHehFZZNI7q0WZNu5Cz/ywXNYdImysiK74=
Subject key identifier: 39:4A:23:26:F4:E1:A2:45:A9:B6:3D:67:1C:D7:0E:74:6D:8A:35:69
Authority key identifier: 35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
Certificate issuer: /CN=A91CD40B/serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
Manifest number: 0164
Signing time: Thu 23 Jul 2026 06:44:48 +0000
Manifest this update: Thu 23 Jul 2026 06:44:47 +0000
Manifest next update: Thu 30 Jul 2026 06:44:47 +0000
Files and hashes: 1: NXR5DY34KztVHjtwJXG69VqemWE.crl (hash: gTBnOsk00jagCDS+WBtZFcwpH6AU5t64Gf0hodnfGWc=)
2: DA8D1C7EA72311EFBCEB047EC4F9AE02.roa (hash: KOPGS6LMhund+vJdD6XHT18EgiJR1qKIzzUaEq9CH3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD40B, serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Validity
Not Before: Jul 23 06:44:47 2026 GMT
Not After : Jul 30 06:44:47 2026 GMT
Subject: CN=6a61b85f-14e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:9f:d5:6f:15:f5:cb:c6:58:88:b4:67:b0:
6d:56:47:f1:de:be:72:ee:3e:04:33:d8:87:8b:62:
20:90:21:65:bb:b7:94:0d:71:93:d9:f6:f8:a6:1b:
e1:41:7f:00:24:1c:16:9d:32:2e:81:d1:32:af:d0:
14:a1:64:47:db:71:05:08:b9:6e:c2:d8:41:d9:2b:
6b:c5:7a:f3:23:67:8f:8a:e1:27:25:39:a2:d0:0a:
b5:89:a9:e6:48:b6:ab:a9:6f:b1:ba:7c:a8:7f:e9:
a3:27:de:2c:f7:d3:72:ed:62:4f:94:a4:bc:7b:4f:
0f:e2:7f:9c:ef:52:41:43:8d:68:5a:50:2e:15:59:
1c:ae:74:d9:98:15:0d:ed:9e:40:c3:2b:f1:01:a7:
2a:53:20:2b:3d:3a:f7:eb:3f:01:5d:0f:fc:1d:47:
f6:bc:45:0a:00:d0:ce:f9:1a:a7:8c:9d:f4:8f:86:
d5:e1:f0:74:48:b6:d6:7c:24:39:83:6f:26:65:df:
74:9e:29:69:2e:3e:4f:e6:ef:6c:f0:b5:ff:c5:1e:
94:ef:a0:6d:62:b8:62:18:7a:a0:5a:d3:a2:bd:82:
49:36:ce:b8:c0:68:df:7e:5f:60:67:5c:57:15:d3:
8d:99:d2:91:0e:0b:54:07:23:73:26:0e:cb:5e:08:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4A:23:26:F4:E1:A2:45:A9:B6:3D:67:1C:D7:0E:74:6D:8A:35:69
X509v3 Authority Key Identifier:
keyid:35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:7d:76:da:b9:7d:18:94:ba:14:cb:ca:58:d1:f6:bf:de:7a:
d9:99:15:56:95:f9:17:81:97:73:4b:8f:4f:21:35:9c:71:5b:
b0:cf:45:3f:11:97:b9:bb:4a:03:08:b6:6c:60:66:6e:cb:61:
7b:82:62:e2:19:71:0e:96:3f:5d:72:78:4b:42:58:87:21:c8:
bb:15:93:fa:13:fb:84:7d:71:6b:2b:ae:04:30:ca:19:01:7b:
0f:96:22:d7:27:c1:18:52:3f:a6:59:f0:e0:f8:99:d9:0f:92:
0c:ae:5b:3f:7d:08:c6:a1:ce:02:ce:d4:44:5c:43:cf:c4:bf:
fb:1e:f5:41:72:d4:6c:cc:bf:57:da:d3:6b:3b:b7:e6:2f:17:
1a:16:e1:27:59:f6:19:04:d6:3c:0a:fc:8f:72:63:df:d2:9f:
9b:5e:5b:9b:d3:89:42:05:e2:06:34:c7:9d:d0:3a:1d:61:1b:
7b:5e:d8:df:fa:21:97:2f:0d:06:54:f0:5a:7a:cc:e8:d7:83:
f9:d2:ff:02:c0:f3:47:67:7b:db:a0:e9:8f:33:c6:a8:7b:f9:
dd:63:1a:27:df:cc:a5:2c:c5:10:ec:7d:b2:73:9f:17:b8:f6:
68:6d:8a:f8:79:e6:2c:7c:3a:cf:a1:cc:e3:94:4f:78:8c:48:
e0:a3:c4:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Q0MEIxMTAvBgNVBAUTKDM1NzQ3OTBEOERGODJCM0I1NTFFM0I3MDI1NzFCQUY1
NUE5RTk5NjEwHhcNMjYwNzIzMDY0NDQ3WhcNMjYwNzMwMDY0NDQ3WjAYMRYwFAYD
VQQDEw02YTYxYjg1Zi0xNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1pSf1W8V9cvGWIi0Z7BtVkfx3r5y7j4EM9iHi2IgkCFlu7eUDXGT2fb4phvh
QX8AJBwWnTIugdEyr9AUoWRH23EFCLluwthB2StrxXrzI2ePiuEnJTmi0Aq1ianm
SLarqW+xunyof+mjJ94s99Ny7WJPlKS8e08P4n+c71JBQ41oWlAuFVkcrnTZmBUN
7Z5AwyvxAacqUyArPTr36z8BXQ/8HUf2vEUKANDO+RqnjJ30j4bV4fB0SLbWfCQ5
g28mZd90nilpLj5P5u9s8LX/xR6U76BtYrhiGHqgWtOivYJJNs64wGjffl9gZ1xX
FdONmdKRDgtUByNzJg7LXghkwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlKIyb0
4aJFqbY9ZxzXDnRtijVpMB8GA1UdIwQYMBaAFDV0eQ2N+Cs7VR47cCVxuvVanplh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDQwQi82QjVEMkE3Qzg1
NUIxMUVGQjA1NzZENDBDNEY5QUUwMi9OWFI1RFkzNEt6dFZIanR3SlhHNjlWcWVt
V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05YUjVEWTM0S3p0VkhqdHdKWEc2OVZxZW1XRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDQwQi82QjVEMkE3Qzg1NUIxMUVGQjA1NzZENDBDNEY5QUUwMi9OWFI1RFkzNEt6
dFZIanR3SlhHNjlWcWVtV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl3122rl9GJS6FMvKWNH2v9562ZkVVpX5F4GXc0uPTyE1nHFbsM9FPxGXubtK
Awi2bGBmbsthe4Ji4hlxDpY/XXJ4S0JYhyHIuxWT+hP7hH1xayuuBDDKGQF7D5Yi
1yfBGFI/plnw4PiZ2Q+SDK5bP30IxqHOAs7URFxDz8S/+x71QXLUbMy/V9rTazu3
5i8XGhbhJ1n2GQTWPAr8j3Jj39Kfm15bm9OJQgXiBjTHndA6HWEbe17Y3/ohly8N
BlTwWnrM6NeD+dL/AsDzR2d726DpjzPGqHv53WMaJ9/MpSzFEOx9snOfF7j2aG2K
+HnmLHw6z6HM45RPeIxI4KPE2g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:37 2026 by rpki-client