
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
File: NpGJraGZWwIPq4bXdZjGDCl0d1U.mft (raw, json)
Hash identifier: Fb6qL+hM06qTGqf09mUSQy8CuH0bTyjuNklPNUXcHS8=
Subject key identifier: 0D:E9:48:DA:85:44:B6:2D:E2:66:CC:79:BA:86:ED:66:27:86:19:98
Authority key identifier: 36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55
Certificate issuer: /CN=A91EC167/serialNumber=369189ADA1995B020FAB86D77598C60C29747755
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
Manifest number: 10
Signing time: Thu 23 Jul 2026 11:09:27 +0000
Manifest this update: Thu 23 Jul 2026 11:09:26 +0000
Manifest next update: Thu 30 Jul 2026 11:09:26 +0000
Files and hashes: 1: NpGJraGZWwIPq4bXdZjGDCl0d1U.crl (hash: rPN/fVDEzBeXj1cmJDhJQFpxDiydiieUHc4mNC4gDIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl
rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC167, serialNumber=369189ADA1995B020FAB86D77598C60C29747755
Validity
Not Before: Jul 23 11:09:26 2026 GMT
Not After : Jul 30 11:09:26 2026 GMT
Subject: CN=6a61f667-de3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:74:7f:2f:9a:c8:68:83:06:d8:43:f9:1d:
30:87:d3:e2:ad:46:a5:0f:bc:bd:b5:7b:ec:c7:ce:
2c:2a:05:d3:77:da:38:08:da:14:6b:e2:80:37:4a:
bb:cb:8c:b9:82:81:87:d2:a1:e7:d3:17:d8:55:e0:
06:bc:a5:ba:7a:5e:10:6c:c4:04:62:60:af:30:e6:
a3:50:04:28:f7:dc:3b:1f:81:b2:30:07:96:cc:c2:
98:53:9d:8b:cc:aa:0c:d7:af:ac:ec:c0:e4:d6:0e:
82:fd:a7:bf:18:c5:c4:4a:87:b8:d2:03:be:0b:9e:
fd:5d:50:cb:42:a4:52:dd:9f:ac:80:f9:61:ac:18:
53:dc:6e:dc:17:91:12:cc:a8:19:be:d2:37:28:da:
0d:17:90:f8:82:a4:2b:d9:ff:29:89:47:93:12:03:
c8:ab:a2:81:aa:07:44:2e:e8:01:49:67:58:75:c6:
af:14:09:47:1e:3b:eb:83:65:8c:4f:9e:90:2a:95:
1c:3e:cd:ec:6c:31:54:98:1d:a7:44:47:0a:e6:91:
ed:d7:e7:19:31:2a:1e:eb:99:4e:02:a4:03:34:0b:
b0:a4:c0:0c:56:fc:9f:1f:94:4b:15:e4:e1:a8:11:
73:cd:0c:a7:95:26:90:1f:ea:88:c2:f7:bf:9e:05:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E9:48:DA:85:44:B6:2D:E2:66:CC:79:BA:86:ED:66:27:86:19:98
X509v3 Authority Key Identifier:
keyid:36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:94:48:00:c4:ae:77:c5:47:ca:10:ca:57:ab:29:4f:b4:d8:
b5:7c:2b:27:dc:1e:43:00:8e:05:b7:71:ce:a8:ca:0b:75:00:
1c:91:98:2d:5f:7d:2b:fa:1c:b5:f9:57:73:e9:7e:b1:fd:0a:
1d:05:58:43:5f:8d:65:e8:fb:ba:81:c1:72:d2:af:be:34:9c:
95:04:60:54:e7:a7:b1:96:4a:71:bb:b1:12:64:4f:79:7e:29:
a4:d1:dd:20:33:4d:a7:d8:7c:7b:e0:5e:84:fa:db:22:c3:6b:
7f:80:9d:a7:69:6a:5c:65:d7:cb:3b:46:a0:8b:ba:f6:91:1c:
10:4e:32:f1:07:07:10:28:c7:35:8d:d1:8c:12:ab:52:49:5f:
c0:b2:c0:29:a3:a6:2d:3d:06:a9:97:86:19:86:ac:0b:81:71:
e4:78:ce:11:0b:2c:15:4b:89:f0:70:3a:e5:92:34:93:02:4e:
e7:10:8f:72:2d:c2:b7:91:1f:31:86:f4:62:e1:20:98:43:6f:
13:f5:7a:60:0a:66:8b:37:88:55:85:05:16:16:44:72:e6:8c:
4a:78:0b:ae:41:77:c9:d7:f8:2f:ba:a1:0d:c2:d4:14:a7:02:
2c:c1:ff:f4:e1:30:88:74:3c:ad:68:ed:b5:ca:8c:fb:41:6e:
b3:af:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:37 2026 by rpki-client