
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json)
Hash identifier: WiZ6RD2VZ43kUtSHJ9a1U7AoguyB92NkkB6F+aJAaQA=
Subject key identifier: 41:67:4F:E9:36:39:5C:68:83:DB:3E:AD:03:E1:79:27:75:C4:75:87
Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1
Certificate issuer: /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
Manifest number: 0143
Signing time: Wed 23 Sep 2026 05:12:40 +0000
Manifest this update: Wed 23 Sep 2026 05:12:40 +0000
Manifest next update: Wed 30 Sep 2026 05:12:40 +0000
Files and hashes: 1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: 87wRA/iYUyGhz2KyCI208bdCI1HuiPxjcwlwaXKo/Dc=)
2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: 4hDTlCGLeED2V5NneVQ9VwBSF0HWPTNuGKERbuoxtX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl
rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
Validity
Not Before: Sep 23 05:12:40 2026 GMT
Not After : Sep 30 05:12:40 2026 GMT
Subject: CN=6ab35fc8-66c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:2b:70:d2:b4:ef:f5:5e:3d:30:ed:03:c2:
21:e2:0f:75:b6:cd:19:ad:28:12:4f:14:a7:20:69:
fa:e8:e3:a8:cb:81:d0:54:50:8b:bb:c7:0b:f5:0e:
1b:58:e8:1a:f4:b1:3e:e0:82:dd:de:3f:cd:6d:a7:
8d:14:c0:b9:30:4f:35:a8:66:79:62:5e:31:8b:86:
ae:8e:45:03:5a:14:97:ef:50:04:3c:3a:6a:57:8e:
38:c6:83:e3:ab:44:a1:49:75:4a:40:7b:e8:42:85:
31:0e:2b:94:3e:20:8c:05:de:1e:d5:1e:7f:99:6f:
41:db:57:c0:63:63:32:6e:0e:3f:d9:48:06:47:e3:
78:1d:06:24:8f:20:64:aa:36:97:76:cf:81:27:f8:
9b:29:6a:02:5b:d6:bc:62:0a:01:05:15:90:44:45:
0a:be:cc:58:13:4a:66:ea:ee:c7:62:f9:78:6d:2d:
73:a6:32:31:24:f2:95:c0:db:ec:8f:b5:d7:86:b9:
a3:51:45:5b:f3:84:49:93:32:9e:2f:da:74:0b:96:
0c:c1:dc:86:5b:5a:64:26:51:5e:41:82:6f:57:57:
a7:ba:a1:17:0a:98:ee:ce:6c:dc:0f:d6:fc:c6:31:
78:5f:2b:83:e9:53:fe:ae:a2:69:e9:fe:08:a3:a9:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:67:4F:E9:36:39:5C:68:83:DB:3E:AD:03:E1:79:27:75:C4:75:87
X509v3 Authority Key Identifier:
keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c6:ed:ee:d8:a3:82:f9:68:69:d0:a5:c4:39:2b:b6:1f:23:
e9:b7:56:b3:27:93:61:bb:f3:1e:01:72:f9:16:db:b7:e3:43:
e1:e1:75:33:9c:f7:f9:5e:ff:55:ab:c9:a9:15:0f:71:c8:b0:
d2:54:6f:ee:6a:c2:90:f6:65:cf:4b:22:7b:44:63:e5:5b:23:
be:e2:47:c3:dd:70:bd:6e:48:6c:e5:e0:dd:10:2c:49:b6:54:
ef:49:31:15:d9:be:d9:d4:ce:34:cd:e8:e9:f8:0a:d8:3c:3c:
a3:9b:8f:4a:5f:d3:12:b9:bb:04:f1:e4:95:4b:96:a0:b4:59:
2f:4d:89:37:fc:a6:49:70:d8:d5:3c:43:17:7a:93:71:d5:34:
4c:99:f2:b9:a9:e0:a5:7d:3d:2a:da:c9:d6:b7:36:31:99:30:
31:ba:29:cf:e7:94:00:c7:3e:04:53:96:3c:ab:58:3f:43:ca:
84:1d:91:31:76:cb:e5:f1:85:e5:e6:09:11:10:e3:d5:ef:b6:
35:ac:8f:59:f0:21:93:3a:aa:2a:1e:8e:65:7f:fa:7b:33:1f:
e9:4a:f9:c1:9e:92:9a:99:2b:81:b0:ce:5c:e8:6f:4d:05:8c:
d9:b4:ad:bb:56:a1:1f:0f:ca:b2:d1:0a:64:ba:ea:63:be:46:
59:b3:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:12:04 2026 by rpki-client