
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File: nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier: zH8y/3ngRO7Xd+gLFsnKnFwkRVzDRRwjSbZW792ufUs=
Subject key identifier: 6D:16:35:B0:74:15:F5:57:68:1C:B9:0E:57:83:0A:F4:2E:65:08:D3
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer: /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number: 0102
Signing time: Wed 25 Mar 2026 05:20:27 +0000
Manifest this update: Wed 25 Mar 2026 05:20:27 +0000
Manifest next update: Wed 01 Apr 2026 05:20:27 +0000
Files and hashes: 1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: L1WzIWYlDPfORxuk4EIlI47rNIOJypXTHueomoesXew=)
2: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: TSc9nhEhWmbGRApAQE13+JucrQxfGC8N0706Bmj46MQ=)
3: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: LHp91fXfeBiyI0BufwwluadyAI7a4YTkgVgUF+ihiuI=)
4: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: 6sYXn011K9g2scrf7jey3FtY3PeEY3hVRse65pK5m0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Validity
Not Before: Mar 25 05:20:27 2026 GMT
Not After : Apr 1 05:20:27 2026 GMT
Subject: CN=69c3709b-b8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:48:4c:50:7a:c3:3e:13:19:6c:e1:08:d4:
1e:52:76:79:90:81:7d:68:cf:30:53:71:d2:d1:19:
b5:1a:ac:e9:0a:b7:78:01:02:cf:83:2c:84:ec:0d:
9f:fd:89:45:96:c8:73:36:2b:be:03:c7:35:7b:96:
b2:c9:da:3a:37:a9:1d:f9:b3:3d:40:89:74:78:7e:
1a:b3:4e:49:ab:b4:69:86:33:5c:e1:e2:b4:73:1a:
f9:23:86:20:39:49:f1:bb:e3:8a:68:ad:71:c5:00:
5d:ed:b1:67:3c:5f:d4:5e:24:c3:4b:67:7c:48:5d:
8f:47:73:01:56:03:3c:b4:8d:37:7f:66:13:5c:a6:
32:b7:d2:76:2c:bf:37:4b:84:ce:7b:21:f7:ef:85:
a1:b1:93:00:13:02:af:2f:31:86:33:bc:26:05:73:
ac:14:09:d3:a7:a7:17:1e:4c:7e:54:5b:90:1a:fd:
ee:59:11:e4:24:0c:aa:e7:af:84:aa:06:5a:cc:2b:
05:f7:47:24:16:ea:6f:59:b7:95:4d:6b:0b:65:02:
da:cc:d4:d5:a7:73:85:d5:77:2a:0c:7c:91:93:59:
9d:6b:b0:01:ba:18:35:c2:c2:a7:92:3f:3a:8a:32:
8b:17:6d:24:ed:d9:7d:00:cd:d0:51:e1:bf:cc:a0:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:16:35:B0:74:15:F5:57:68:1C:B9:0E:57:83:0A:F4:2E:65:08:D3
X509v3 Authority Key Identifier:
keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:e5:06:d3:30:5b:d7:f6:0e:21:91:72:04:a6:de:49:31:c4:
9d:db:44:ba:b2:15:b7:70:55:db:f3:4d:4c:32:e2:9f:99:77:
28:2d:49:84:60:f9:fd:07:ed:0b:8c:8b:2b:b7:f1:17:02:db:
38:ac:f8:94:aa:6d:4f:f5:32:a6:6b:19:52:e8:a7:8c:b8:12:
42:42:39:56:ba:36:cf:ca:64:44:02:51:ec:47:91:22:c0:50:
1d:f9:2b:24:5f:ff:9f:96:c4:2d:12:24:76:81:85:1d:57:49:
a2:31:94:71:c3:f0:2e:7f:75:c1:6b:7b:bd:ab:f9:bd:7f:8e:
6c:c2:dd:a8:e0:c3:55:fa:25:f8:61:51:95:57:cd:e2:7b:04:
86:a2:9a:cb:55:6b:d5:b7:e9:71:1b:e3:10:ab:fd:ac:37:f8:
1a:b7:df:70:fb:1e:10:9f:d4:57:b3:93:d1:fe:af:06:47:4a:
49:3b:3e:93:ab:00:80:27:2f:4b:28:15:46:60:fa:79:bd:28:
c6:73:8e:2e:54:e1:65:a7:70:2c:39:44:65:66:d1:e7:96:32:
2f:f7:49:26:39:81:be:5b:b4:82:60:70:ee:b0:7c:a0:e1:e1:
e9:66:dd:84:71:31:64:40:5b:85:d0:84:17:3e:f2:e9:9c:46:
13:39:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:43 2026 by rpki-client