
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier: 7dRaH0gxIkYJLAHJrLXptI0QyJUM99NomJV/MTbWhcc=
Subject key identifier: 6A:6B:E6:2F:D9:EC:BB:7D:50:DB:EA:59:30:0E:3E:19:46:E0:22:B7
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number: 01E8
Signing time: Tue 29 Sep 2026 04:13:11 +0000
Manifest this update: Tue 29 Sep 2026 04:13:11 +0000
Manifest next update: Tue 06 Oct 2026 04:13:11 +0000
Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: Gn4BuIbdJpVH4czPaZ5On84OW+I5TJpZ92yX/r0XNko=)
2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: b4+csE685B8vXmBeYhE1afbxpZz6mNZMcg0Inl+/Jyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 04:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Validity
Not Before: Sep 29 04:13:11 2026 GMT
Not After : Oct 6 04:13:11 2026 GMT
Subject: CN=6abb3ad7-4929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:e3:27:4e:e7:fb:ec:85:5b:85:2f:9b:89:
14:51:ae:20:63:76:5f:12:98:ed:80:03:a8:04:49:
b3:e5:16:03:e3:87:32:10:12:21:b1:00:f2:1d:55:
58:a2:37:ca:a4:ac:29:8e:ac:2a:31:98:ab:0e:71:
b6:29:3f:69:c9:f1:d3:a1:e8:9e:a1:55:a4:7d:83:
f0:9d:ae:36:5e:76:e2:74:4b:ec:ff:86:b4:73:ec:
c2:92:db:24:64:88:3c:2b:32:8e:db:19:16:82:a8:
9a:f9:7a:35:b8:3b:6b:a9:45:05:87:73:dd:04:73:
24:d1:7e:87:d4:e7:de:6b:39:0a:6e:bf:24:4d:1f:
89:ea:ec:4d:5b:fd:93:f0:4e:94:4a:ca:c7:d4:22:
28:d5:d3:15:0c:46:3c:e3:08:d3:7e:ca:dc:e0:fb:
be:67:7d:83:30:b3:e8:28:61:45:47:6d:47:1c:24:
f2:95:7b:25:c2:c2:97:84:a2:e1:2f:d0:4c:61:a4:
0d:ea:4a:1e:e2:72:18:17:43:85:95:2c:22:69:fe:
bb:3e:27:c8:8a:a6:0b:b2:99:37:dd:9e:be:c9:04:
86:21:d7:07:6b:8c:a0:7b:a7:74:dd:11:37:17:c9:
18:a8:0a:c7:e9:55:d4:7e:52:da:b6:3d:4e:80:ac:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6B:E6:2F:D9:EC:BB:7D:50:DB:EA:59:30:0E:3E:19:46:E0:22:B7
X509v3 Authority Key Identifier:
keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ba:bc:d6:d6:aa:e6:28:d4:da:16:f2:c7:ac:45:a9:85:9c:
84:28:9c:4a:35:aa:76:20:62:c4:1a:5b:8d:98:e4:1c:70:3b:
e6:a3:89:72:d6:aa:c4:f5:b2:da:da:67:b2:06:af:9d:d1:84:
5c:44:9f:8b:17:e7:50:63:7d:68:31:8c:a7:22:4d:70:4a:e3:
a0:ba:e2:b6:31:27:4f:26:0e:46:4b:b2:98:84:31:31:16:a7:
e5:e8:5d:13:c9:81:c7:8e:21:bd:4b:f4:cd:6c:b8:4e:34:d7:
88:d2:83:09:be:62:71:29:9a:1b:0c:97:85:ef:64:1f:9d:0e:
09:42:b8:61:50:19:b7:a3:36:22:12:54:61:9a:93:30:9c:b1:
d9:2e:bc:e5:81:5e:67:01:4b:48:5b:76:f3:79:a5:00:0a:5e:
32:81:d7:e4:23:09:42:96:ef:d3:57:63:31:bc:67:ee:ce:8d:
19:8c:bc:12:f2:5c:53:c1:ec:93:6c:91:7a:df:7c:ad:d6:7e:
d7:1f:5e:28:23:13:46:e2:a9:1a:b8:72:98:02:df:74:1a:c9:
f0:9d:f7:14:ee:9a:f1:fd:e6:25:e8:8e:e3:ac:8b:9e:90:27:
0b:f0:a4:35:26:cf:d2:7e:82:24:42:c8:d0:88:2e:05:fe:fe:
77:6c:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:16:57 2026 by rpki-client