
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json)
Hash identifier: PJsLNj386Jkp+3uNpfnKK46aOYjodCobOPxjQUV2nuQ=
Subject key identifier: CE:F4:80:91:6E:54:8E:3C:20:E9:0F:93:42:21:1F:70:8A:30:CF:3D
Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Certificate serial: 065B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
Manifest number: 0643
Signing time: Tue 22 Sep 2026 22:23:58 +0000
Manifest this update: Tue 22 Sep 2026 22:23:57 +0000
Manifest next update: Tue 29 Sep 2026 22:23:57 +0000
Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: yq4bJDn1jFlVKjasvwzX665ZGFTTB83jEvra2DkDmyA=)
2: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: ps3uP3bdfTWHCJtuqapXsSdfwHZEG6iHNID4DsV8ynw=)
3: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: kd4W++lLTGLrW1TRbIqGEK/K3cCDQGLohESs97YdNDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1627 (0x65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Validity
Not Before: Sep 22 22:23:57 2026 GMT
Not After : Sep 29 22:23:57 2026 GMT
Subject: CN=6ab2fffe-888a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:f2:c6:ff:36:50:81:df:bd:33:86:3c:42:
a4:e4:2f:f3:d7:f2:f0:3a:10:a9:6b:e2:f4:08:4f:
b5:73:01:ee:e0:85:08:0e:b9:d4:b0:c1:66:c4:dd:
17:82:57:d2:7c:c7:95:c4:cd:c9:61:3d:3a:5b:ef:
35:4e:0c:aa:ce:13:0b:7b:56:a0:a5:3b:06:e5:36:
8a:01:3b:01:e8:f0:0b:7d:bb:ed:fe:94:38:40:34:
25:85:04:3f:ce:91:31:fa:81:3c:d2:61:17:fb:a6:
d0:90:18:b8:1b:96:fa:90:ec:22:50:88:48:e1:65:
ae:62:6c:20:dc:95:e2:29:75:1f:40:ef:3b:db:14:
8c:e3:2a:dc:b0:62:70:77:ca:b9:85:e0:40:01:be:
23:0e:02:40:31:e4:ad:a3:82:a7:17:56:6d:c8:98:
35:a0:57:65:99:85:d4:0f:b4:b9:7e:f6:ec:f9:3e:
7f:2f:13:13:74:35:6f:51:d3:12:72:60:33:cc:d5:
31:e0:c4:dc:15:e5:bd:38:2c:50:73:a2:1d:26:c1:
f7:74:08:dd:79:b2:d3:f6:4d:82:db:1b:4a:08:07:
f0:68:94:31:b9:58:b2:7d:8f:35:2f:31:26:cd:03:
77:85:5b:1f:5c:51:7a:21:d2:18:75:b1:67:70:0b:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:80:91:6E:54:8E:3C:20:E9:0F:93:42:21:1F:70:8A:30:CF:3D
X509v3 Authority Key Identifier:
keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e3:56:0f:f5:88:7d:0c:c3:ce:86:43:48:94:51:14:c0:78:
7f:07:f3:d6:6a:54:ba:f0:26:4c:39:31:55:91:2f:63:75:99:
ca:c8:4c:2d:4a:65:3d:c9:a9:8c:61:f6:6d:ca:52:41:48:bd:
51:76:13:b8:37:ef:7b:30:11:5d:4c:62:ab:1e:fb:d9:e8:d2:
4c:8e:1f:9a:3d:92:f6:d0:a1:02:5e:35:5a:d4:45:20:23:0c:
db:29:9e:79:76:65:10:32:40:b2:2d:f7:24:9d:ac:71:f2:ff:
fd:a4:c7:e4:f5:9b:02:40:06:89:11:28:ac:a4:eb:e5:73:1f:
69:2c:db:b7:44:e3:09:f0:4f:92:00:ae:0f:16:19:79:bc:f1:
98:42:e0:27:40:fa:f7:4f:7b:57:25:de:3e:7a:af:65:61:d1:
70:2c:2c:81:83:3b:0c:4c:50:e9:2d:c1:6e:39:33:37:3c:30:
21:d7:7b:27:16:4d:c2:8c:0e:64:a9:6c:33:31:4a:d7:e2:69:
0a:3d:49:de:bc:1c:c2:80:e7:14:c3:4e:01:1d:88:84:1a:ba:
4a:63:19:58:f5:82:40:d0:b7:c8:84:63:90:cc:2f:50:11:6f:
8f:d2:67:62:8c:be:d9:fa:56:76:28:2b:03:1b:81:ed:5b:ce:
d9:3c:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:11:11 2026 by rpki-client