
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
File: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft (raw, json)
Hash identifier: RaU6ei8bI3/dEP6AcAbyGopMrFSdfFpXrXADmKnV7as=
Subject key identifier: 02:C4:68:C6:80:E5:AE:90:7D:19:4A:87:1D:14:E9:36:4F:01:6E:43
Authority key identifier: 34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A
Certificate issuer: /CN=A91D4E53/serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
Certificate serial: 07A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
Manifest number: 079C
Signing time: Tue 12 May 2026 21:34:05 +0000
Manifest this update: Tue 12 May 2026 21:34:04 +0000
Manifest next update: Tue 19 May 2026 21:34:04 +0000
Files and hashes: 1: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl (hash: TPjbQFZ7VyYPyg+X9qFqHX0TfafLyIcqpaSi4Sab8gI=)
2: 349EFE924E6511EBBFE35D1AC4F9AE02.roa (hash: yDS8KPUeg2RwXUxl4NXgC/Qcz1X1ZUUtcQIrqZqysjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl
rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1959 (0x7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4E53, serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
Validity
Not Before: May 12 21:34:04 2026 GMT
Not After : May 19 21:34:04 2026 GMT
Subject: CN=6a039ccd-2afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:2f:ac:96:12:5c:b8:4d:70:1b:98:2d:19:
49:21:d9:48:3f:b3:6a:f1:32:86:06:aa:8b:c0:8a:
d1:6d:02:e1:2f:91:40:ff:6e:54:c2:7b:76:dd:a7:
c9:dc:63:4f:07:d6:49:5a:22:95:2a:ff:f5:77:e4:
21:56:23:f0:3f:fd:bd:84:92:3a:89:d9:bc:bc:df:
39:8f:5b:d1:f3:fa:48:d8:f4:7e:6c:aa:e7:68:94:
00:df:6e:55:2f:2a:51:94:ab:b5:a9:cf:79:c6:4e:
ef:65:43:59:c7:19:02:52:47:62:fa:61:7e:57:8a:
3d:83:d8:67:11:c9:c9:db:93:29:73:71:3c:cf:be:
56:0d:9f:a9:91:05:f8:4d:83:32:f0:06:81:7d:e0:
b1:29:f2:f0:f8:42:28:87:d0:9b:f0:7f:03:38:2a:
59:77:14:80:a8:e3:81:ad:0c:19:f5:01:33:15:0d:
cf:3a:31:86:d7:26:6b:4f:63:3c:f1:f5:be:b7:96:
c7:d0:da:c0:d0:88:d5:87:32:f1:1e:c9:ce:7e:6f:
9b:e0:01:40:d9:26:2d:8d:da:5e:c0:7e:30:a7:bb:
91:52:af:cd:07:2a:79:5a:d8:3c:31:eb:40:e7:57:
ec:d7:ed:d5:f3:07:e2:83:4d:bb:06:b8:4e:f0:38:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C4:68:C6:80:E5:AE:90:7D:19:4A:87:1D:14:E9:36:4F:01:6E:43
X509v3 Authority Key Identifier:
keyid:34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:11:5e:b8:9a:8d:b3:59:7e:c2:aa:8e:f0:e1:f1:27:e6:57:
67:4a:2f:0e:31:66:23:56:03:dc:bb:2e:8f:76:56:72:43:c2:
51:4c:c1:aa:05:f6:a2:9d:41:52:2f:d1:40:d3:09:df:ae:d4:
a2:72:c9:2a:e6:7b:ab:f4:1e:f9:e9:02:8d:47:b1:c8:e2:de:
8d:a0:8a:23:80:6b:d4:64:ee:ab:e4:5a:1b:96:84:a6:68:56:
82:04:8e:60:1e:6d:8f:9e:2b:e6:0c:fe:e2:9b:3a:55:a5:48:
6a:c9:82:58:b2:d1:a9:f5:00:07:f2:a7:76:11:87:67:30:73:
bd:dd:ec:26:8a:0e:ea:15:23:d4:e9:c0:25:49:5d:50:68:0d:
9d:09:da:92:03:f1:ec:a9:c2:53:e8:17:ca:b4:3e:fc:f3:ea:
26:5a:ee:63:fb:ff:80:d3:a9:c3:e0:07:ba:18:d8:a5:06:ab:
10:8a:f8:f1:70:77:4a:5d:32:6d:98:e0:52:10:de:e1:7d:71:
1c:00:55:ac:48:75:32:01:11:83:7a:7a:3d:ad:3d:42:51:9d:
40:ce:64:74:26:c2:6b:5a:09:4a:52:2b:53:0a:b2:6c:c2:89:
6b:b0:01:8a:99:4e:d3:f9:b7:9a:41:09:ab:37:48:0f:7f:02:
85:d2:fc:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRFNTMxMTAvBgNVBAUTKDM0OUU1OTdDNzE3ODgxMDRCMDY0OUYwNzNBQkE3MkY2
NUYyODRCOUEwHhcNMjYwNTEyMjEzNDA0WhcNMjYwNTE5MjEzNDA0WjAYMRYwFAYD
VQQDEw02YTAzOWNjZC0yYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAztkvrJYSXLhNcBuYLRlJIdlIP7Nq8TKGBqqLwIrRbQLhL5FA/25Uwnt23afJ
3GNPB9ZJWiKVKv/1d+QhViPwP/29hJI6idm8vN85j1vR8/pI2PR+bKrnaJQA325V
LypRlKu1qc95xk7vZUNZxxkCUkdi+mF+V4o9g9hnEcnJ25Mpc3E8z75WDZ+pkQX4
TYMy8AaBfeCxKfLw+EIoh9Cb8H8DOCpZdxSAqOOBrQwZ9QEzFQ3POjGG1yZrT2M8
8fW+t5bH0NrA0IjVhzLxHsnOfm+b4AFA2SYtjdpewH4wp7uRUq/NByp5Wtg8MetA
51fs1+3V8wfig027BrhO8DgZywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALEaMaA
5a6QfRlKhx0U6TZPAW5DMB8GA1UdIwQYMBaAFDSeWXxxeIEEsGSfBzq6cvZfKEua
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU1My9BNEE1MTlFQTRF
NjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdRU3daSjhIT3JweTlsOG9T
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05KNVpmSEY0Z1FTd1pKOEhPcnB5OWw4b1M1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEU1My9BNEE1MTlFQTRFNjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdR
U3daSjhIT3JweTlsOG9TNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaxFeuJqNs1l+wqqO8OHxJ+ZXZ0ovDjFmI1YD3Lsuj3ZWckPCUUzBqgX2op1B
Ui/RQNMJ367UonLJKuZ7q/Qe+ekCjUexyOLejaCKI4Br1GTuq+RaG5aEpmhWggSO
YB5tj54r5gz+4ps6VaVIasmCWLLRqfUAB/KndhGHZzBzvd3sJooO6hUj1OnAJUld
UGgNnQnakgPx7KnCU+gXyrQ+/PPqJlruY/v/gNOpw+AHuhjYpQarEIr48XB3Sl0y
bZjgUhDe4X1xHABVrEh1MgERg3p6Pa09QlGdQM5kdCbCa1oJSlIrUwqybMKJa7AB
iplO0/m3mkEJqzdID38ChdL84Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:07:10 2026 by rpki-client