
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json)
Hash identifier: VprYjTofzHxUOcY2TkDDub6RbKrQq1sSmCNE6kobsxc=
Subject key identifier: 89:B5:66:32:EC:17:E8:36:0A:6B:33:10:DE:CB:64:14:8E:F1:2F:3A
Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74
Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
Certificate serial: 0A61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
Manifest number: 0A52
Signing time: Tue 12 May 2026 19:45:19 +0000
Manifest this update: Tue 12 May 2026 19:45:18 +0000
Manifest next update: Tue 19 May 2026 19:45:18 +0000
Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: dUDFsQRaurNco+xFIes1X6FNj6gsby0TGCp2bVxg2jY=)
2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: hntqZR06bEi96YIe77PYhaN+w+8+mUWcyue+uEJX0V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl
rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2657 (0xa61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
Validity
Not Before: May 12 19:45:18 2026 GMT
Not After : May 19 19:45:18 2026 GMT
Subject: CN=6a03834f-7176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:6f:68:fa:31:a8:1c:9d:3f:c9:96:7c:78:
88:e0:3e:f4:cd:9d:bd:89:e5:38:39:0f:06:94:29:
b0:cd:56:28:75:08:ba:36:35:31:1c:11:43:39:75:
48:08:ee:3f:9e:2a:00:e5:ed:56:b8:02:e5:9f:b7:
45:b4:f1:1d:94:99:f3:e9:3b:91:25:ab:1a:82:76:
e1:c5:ed:49:85:9c:4d:dd:e5:38:19:98:40:64:42:
de:17:7b:cc:fb:a4:ba:95:a0:09:2d:1b:ef:e9:4c:
d8:89:3b:63:07:fd:91:4f:c4:bf:22:1a:c9:98:3e:
fd:eb:70:fe:1f:40:62:b6:9a:6a:3b:38:1a:d7:e4:
d0:2e:8c:a3:ed:c6:93:fd:6b:ec:6f:9e:32:ab:29:
b1:43:b1:27:85:5e:ed:5a:6a:04:00:3a:01:96:87:
fd:da:7b:6d:d4:a1:af:cc:bf:b8:fb:8d:eb:3f:8c:
a7:11:c9:a5:ca:9d:81:dc:20:2b:6a:76:0b:c6:08:
28:b6:c9:79:ab:9a:1d:1f:bd:cf:33:7e:1d:f1:48:
16:cf:30:5f:0d:a9:2f:54:ce:7e:69:4e:d9:29:15:
f7:c3:9a:13:b8:2a:3f:ea:79:ad:20:52:21:a3:27:
cb:bd:0d:df:06:1c:d4:72:70:72:43:01:a9:8e:fc:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:66:32:EC:17:E8:36:0A:6B:33:10:DE:CB:64:14:8E:F1:2F:3A
X509v3 Authority Key Identifier:
keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:3a:73:32:22:f2:ff:9c:a3:04:9f:44:65:61:17:dd:dd:
ad:fd:ce:58:a1:ba:97:c7:b7:8e:41:e2:ed:3c:07:1a:56:0e:
ac:6b:06:f9:44:a7:5d:c7:6b:c9:14:d7:b6:27:d5:02:53:f7:
fa:d0:4a:40:cb:2c:df:7c:0d:c3:a6:0a:5c:8c:3b:86:e7:ea:
ea:e3:10:fe:91:4e:cd:34:66:87:ce:46:8f:24:7c:32:57:84:
48:49:a3:d1:00:3c:aa:2c:7c:7e:d1:59:e8:45:17:82:fa:3b:
e9:e0:35:ea:2a:49:26:01:46:11:8c:1e:d4:2a:c1:32:38:1f:
c6:69:76:c7:90:47:a2:b5:31:ba:96:2c:c5:81:5a:a0:e1:86:
c1:d2:b9:5e:82:2f:49:08:27:42:b7:49:9b:39:c0:34:0b:9c:
b5:d6:cd:c0:9c:70:86:37:77:b1:9d:1d:84:d0:65:52:1e:4f:
59:be:00:e2:d2:15:77:2d:dc:e4:d9:52:30:c0:a9:73:cc:a8:
c9:97:86:35:49:f1:03:19:b5:92:cd:5c:ed:4f:40:12:77:70:
6b:76:dc:1b:b7:59:df:7c:1c:cf:5c:fe:20:22:2f:4b:89:ed:
8f:c1:10:2b:e3:11:12:82:f2:03:47:26:1c:f4:7a:4f:0f:d3:
9a:7d:96:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:50 2026 by rpki-client