
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
File: NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json)
Hash identifier: /+VV29KDdrwkmDTDUbiLB1WW8rqqmazj5yuXq+Yoe/s=
Subject key identifier: A7:87:11:21:39:E9:97:BE:12:58:7C:FF:CC:F1:E4:F5:5D:B6:FC:19
Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
Certificate issuer: /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
Manifest number: D6
Signing time: Thu 23 Jul 2026 08:30:05 +0000
Manifest this update: Thu 23 Jul 2026 08:30:04 +0000
Manifest next update: Thu 30 Jul 2026 08:30:04 +0000
Files and hashes: 1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: URD4YQ3cNcPT1977TUn9liGw8q+L3YJED+Y7DQVy/BI=)
2: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: FsNpTkM6+3f8KZot7Stoju/dwRXl0OyRylfjVSJP04M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Validity
Not Before: Jul 23 08:30:04 2026 GMT
Not After : Jul 30 08:30:04 2026 GMT
Subject: CN=6a61d10d-b7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:4d:a7:69:a8:43:f5:69:ab:95:6d:1b:c1:
8d:77:9a:d2:33:cc:4a:e9:a8:e1:c3:6d:a2:6c:7f:
65:dd:a0:45:21:df:3c:d6:13:01:cb:bc:e9:5f:7c:
d9:ec:4d:27:47:14:06:99:95:91:2f:58:86:63:88:
a7:1e:ca:e7:dc:7d:89:4c:ef:2c:34:44:55:1e:06:
cb:93:ae:c7:ad:9c:2e:66:16:2c:26:55:8c:20:7e:
fc:36:bd:06:f7:69:91:6c:7c:68:ee:58:39:95:64:
75:61:44:55:f2:11:fb:f9:75:31:50:5c:6c:ec:c4:
ea:4f:a7:ec:b9:dc:35:cc:15:00:6b:2a:ff:d1:5c:
2b:36:bc:fd:40:35:86:d9:ee:3e:0c:ec:4d:96:5d:
d3:88:68:7d:c5:76:68:d5:cf:50:26:41:bf:a3:87:
fc:67:f6:10:73:62:1f:6f:54:51:4f:53:69:3e:d8:
aa:59:0b:e6:53:a5:c0:8b:14:4e:7d:79:df:c8:b3:
8f:3f:7b:a6:7a:5a:6a:27:23:13:9b:17:89:29:c8:
d1:da:f0:74:06:19:31:e1:e4:58:de:2e:6d:0c:01:
d7:94:0e:96:b9:7a:41:d4:f7:d8:5f:0b:9c:50:9f:
20:4f:20:28:97:68:ef:e6:1c:99:a5:19:4c:f3:06:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:87:11:21:39:E9:97:BE:12:58:7C:FF:CC:F1:E4:F5:5D:B6:FC:19
X509v3 Authority Key Identifier:
keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:db:ef:4b:35:e4:12:33:d0:0f:06:ec:76:f6:bf:e7:e8:91:
8a:22:d0:64:a6:ed:ac:e6:d8:d4:3a:d8:8b:28:a2:97:ca:49:
9c:04:0d:3d:5e:5a:a6:ca:44:65:72:c3:00:62:c8:24:55:cc:
43:08:a4:bc:b8:18:86:fd:67:1f:cb:ff:1d:9c:6b:42:39:0c:
7c:f3:57:55:86:5f:d1:8b:63:1d:73:80:67:ac:5e:db:cb:29:
bf:c2:eb:fd:25:eb:46:62:e4:e2:0d:e0:6d:88:13:f0:cb:09:
9e:41:63:52:5c:f5:2a:28:e0:ac:e5:9e:52:af:82:9c:06:e8:
ab:7e:11:02:56:dc:e5:51:3b:af:bf:ec:a9:74:39:5b:f2:a1:
16:8f:14:47:e4:67:c0:16:0f:3f:19:51:01:0d:72:68:ca:24:
da:12:13:a4:bf:d9:48:31:cf:d0:14:d0:e7:bc:c4:a9:7a:c3:
f8:f7:0e:69:50:b1:ae:01:3b:17:0b:ab:7c:ea:b7:91:6a:ef:
26:be:20:d1:50:ca:37:d6:cf:69:bb:3b:c8:57:2b:26:da:cd:
f3:b9:6b:f6:b6:ec:ae:4d:bd:80:05:3b:56:0f:b3:fc:06:c5:
44:17:04:3f:c7:00:4a:05:1e:46:41:e4:12:96:b2:d6:8c:ce:
18:03:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:44 2026 by rpki-client