
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File: nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier: MbTie7IFmvqsKV7JFPNQdav0nnReVIp6uEFphFDReog=
Subject key identifier: D3:0A:D4:51:62:BD:B5:01:92:D5:C2:C0:9B:0D:3D:1D:2B:A7:18:A3
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer: /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number: 011A
Signing time: Mon 11 May 2026 05:55:46 +0000
Manifest this update: Mon 11 May 2026 05:55:46 +0000
Manifest next update: Mon 18 May 2026 05:55:46 +0000
Files and hashes: 1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: fySQ1eoyeXY7j8dVbWoF7/ryvrMHfNGmKjTK8F0QybI=)
2: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: LHp91fXfeBiyI0BufwwluadyAI7a4YTkgVgUF+ihiuI=)
3: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: 6sYXn011K9g2scrf7jey3FtY3PeEY3hVRse65pK5m0Y=)
4: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: TSc9nhEhWmbGRApAQE13+JucrQxfGC8N0706Bmj46MQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Validity
Not Before: May 11 05:55:46 2026 GMT
Not After : May 18 05:55:46 2026 GMT
Subject: CN=6a016f62-f79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f7:5a:5f:8c:6c:e9:9f:45:da:e4:1b:84:82:
1d:9c:07:37:d2:13:3b:00:ac:c3:8d:04:dd:aa:85:
e3:f5:62:bc:e5:e0:db:e9:34:22:f5:4f:fb:d8:7e:
36:ed:38:6c:2b:87:72:32:4b:10:5b:ca:a2:c2:65:
53:b6:f6:97:1a:5b:4f:e9:18:b6:c4:f4:8c:20:80:
ea:79:79:1f:11:ce:e1:56:bb:03:8a:0c:89:63:3d:
20:f5:b0:90:cc:d7:96:e2:a2:e9:cd:58:16:8d:ae:
6e:39:9a:8b:03:72:8d:56:27:56:79:c5:8f:58:8d:
c4:e6:53:37:c4:cd:08:b4:1a:b1:4b:0b:75:49:38:
99:3f:28:48:c8:01:0c:24:6c:7f:be:7b:f3:a0:e2:
03:40:75:f2:9c:e3:b8:c0:0f:0c:f1:30:a4:84:2a:
2e:13:7d:1c:55:86:fe:11:25:26:8e:2f:f3:9c:5d:
1b:3d:a6:bb:31:2d:82:b5:e5:ac:03:b4:12:8e:58:
23:41:d7:14:e7:69:04:e2:2b:7e:17:53:c9:31:6f:
1d:13:b7:5c:62:00:8b:27:f5:71:12:d0:d6:70:51:
42:d0:6f:2e:e9:af:10:41:a1:53:a5:38:cf:6d:97:
21:61:16:cb:41:1f:3a:32:bf:43:88:5d:7a:77:59:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:D4:51:62:BD:B5:01:92:D5:C2:C0:9B:0D:3D:1D:2B:A7:18:A3
X509v3 Authority Key Identifier:
keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:75:5b:01:6a:83:27:b2:5b:a8:e1:bd:7e:e5:bc:7c:b2:e7:
4a:d7:d4:9c:68:38:5f:90:55:dc:ca:04:04:67:86:9c:1a:1e:
53:64:38:1c:df:e9:67:88:88:e7:04:0d:1a:b6:1b:b2:b9:31:
d3:58:67:95:00:6b:b1:b9:1d:b5:51:a1:f7:7e:91:92:e0:a1:
45:6b:ca:bc:2e:82:94:6d:4b:fd:f1:25:ce:f7:f3:eb:79:ce:
34:71:ad:4a:ce:e3:60:4d:f9:5e:8c:fd:0b:8d:fc:cd:89:85:
ec:81:f4:e7:40:b2:90:02:ea:5b:8f:c2:40:d3:ac:e9:1d:cc:
b1:93:78:47:80:be:31:90:07:83:4b:1d:02:77:8f:a1:70:a7:
0c:b0:1e:59:5d:d3:b9:23:2f:3d:69:6a:91:ac:d4:38:14:0a:
d5:06:90:20:8f:cc:0d:49:cc:c6:b1:58:f3:1c:16:d5:59:f6:
a4:97:92:90:07:80:5d:4f:74:9b:d8:09:05:ab:ce:06:55:75:
a1:38:21:54:71:c1:a9:43:50:f6:33:b0:64:0d:7e:b1:17:07:
00:8d:fd:9e:39:33:28:b9:92:16:34:ac:4d:5a:cb:d7:4d:c7:
19:72:ab:e7:ce:71:24:40:53:7a:d9:6f:e4:2a:80:4f:57:99:
34:dd:5a:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZGMjExMTAvBgNVBAUTKDlDRERGQUVBQkM2NEJDQ0Q3ODg4Mjk2MjkxMEVDMTky
QTJEMjI4MzgwHhcNMjYwNTExMDU1NTQ2WhcNMjYwNTE4MDU1NTQ2WjAYMRYwFAYD
VQQDEw02YTAxNmY2Mi1mNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3fdaX4xs6Z9F2uQbhIIdnAc30hM7AKzDjQTdqoXj9WK85eDb6TQi9U/72H42
7ThsK4dyMksQW8qiwmVTtvaXGltP6Ri2xPSMIIDqeXkfEc7hVrsDigyJYz0g9bCQ
zNeW4qLpzVgWja5uOZqLA3KNVidWecWPWI3E5lM3xM0ItBqxSwt1STiZPyhIyAEM
JGx/vnvzoOIDQHXynOO4wA8M8TCkhCouE30cVYb+ESUmji/znF0bPaa7MS2CteWs
A7QSjlgjQdcU52kE4it+F1PJMW8dE7dcYgCLJ/VxEtDWcFFC0G8u6a8QQaFTpTjP
bZchYRbLQR86Mr9DiF16d1nWzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMK1FFi
vbUBktXCwJsNPR0rpxijMB8GA1UdIwQYMBaAFJzd+uq8ZLzNeIgpYpEOwZKi0ig4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyMS9GRTM3RTNFQ0Ex
QUMxMUVGQjY3NTg1NDhDNEY5QUUwMi9uTjM2NnJ4a3ZNMTRpQ2xpa1E3QmtxTFNL
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25OMzY2cnhrdk0xNGlDbGlrUTdCa3FMU0tEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NkYyMS9GRTM3RTNFQ0ExQUMxMUVGQjY3NTg1NDhDNEY5QUUwMi9uTjM2NnJ4a3ZN
MTRpQ2xpa1E3QmtxTFNLRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARHVbAWqDJ7JbqOG9fuW8fLLnStfUnGg4X5BV3MoEBGeGnBoeU2Q4HN/pZ4iI
5wQNGrYbsrkx01hnlQBrsbkdtVGh936RkuChRWvKvC6ClG1L/fElzvfz63nONHGt
Ss7jYE35Xoz9C438zYmF7IH050CykALqW4/CQNOs6R3MsZN4R4C+MZAHg0sdAneP
oXCnDLAeWV3TuSMvPWlqkazUOBQK1QaQII/MDUnMxrFY8xwW1Vn2pJeSkAeAXU90
m9gJBavOBlV1oTghVHHBqUNQ9jOwZA1+sRcHAI39njkzKLmSFjSsTVrL103HGXKr
585xJEBTetlv5CqAT1eZNN1adQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:17 2026 by rpki-client