
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
File: nNdxObeuQMY2CS0SiGlE3j8a_-I.mft (raw, json)
Hash identifier: 0jpdKDPgDHaD4cRWk3SE8vvUiWk6LYWJqqb6LcHTuug=
Subject key identifier: 22:6D:2A:12:A9:84:56:9D:9E:43:08:32:60:4E:0F:A6:0E:60:1B:52
Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2
Certificate issuer: /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
Manifest number: 69
Signing time: Wed 22 Jul 2026 18:31:03 +0000
Manifest this update: Wed 22 Jul 2026 18:31:02 +0000
Manifest next update: Wed 29 Jul 2026 18:31:02 +0000
Files and hashes: 1: nNdxObeuQMY2CS0SiGlE3j8a_-I.crl (hash: 8tRKMqqDGUsWpbZTaSiM8ox8z8qbzX8COop1idtS/QM=)
2: 0FFE750C1EAF11F195BB007D1D3D8C67.roa (hash: BrK0FrMPMwFevxo3blKFfc/tytf2FzSWadOgigE4AiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl
rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2
Validity
Not Before: Jul 22 18:31:02 2026 GMT
Not After : Jul 29 18:31:02 2026 GMT
Subject: CN=6a610c66-ceb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:5c:d5:bf:a1:e3:9e:c1:d1:d9:84:65:0c:
32:cc:80:0e:de:a6:be:cf:f6:c8:9e:f7:f3:43:f2:
43:33:2b:75:94:52:49:f4:a9:de:f0:ce:f0:07:02:
72:61:e2:78:17:12:1d:ef:52:4f:53:93:35:95:26:
5f:cf:71:45:da:20:8b:2e:c5:23:27:3a:73:db:0d:
c3:e4:4e:fe:ed:41:03:62:22:da:46:83:11:28:0a:
51:c0:50:8b:fc:25:82:65:74:08:d0:fb:4e:13:42:
6a:49:e7:4e:9f:81:01:6c:f3:3f:35:76:2c:51:cd:
77:31:b9:47:36:8d:bb:5a:01:c4:2a:95:09:99:2b:
e7:f1:cf:c5:45:31:36:fd:31:34:89:c9:21:29:c0:
00:89:00:b9:ee:1e:e7:23:29:c3:88:aa:f0:38:e5:
54:1d:40:56:a5:91:f5:db:7a:08:ad:2c:b9:22:77:
7c:48:af:0b:9d:ce:7c:97:74:e5:df:cf:f5:0c:81:
df:c7:cc:2c:52:89:86:cc:82:b1:31:33:89:47:94:
8c:37:4a:75:c0:d6:dc:7d:a8:66:58:ce:c5:44:1c:
c0:33:81:1b:52:b0:58:cc:25:5d:d3:dd:a7:2b:be:
22:4b:f1:8c:d2:a2:cb:04:89:49:44:7c:c4:aa:67:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:2A:12:A9:84:56:9D:9E:43:08:32:60:4E:0F:A6:0E:60:1B:52
X509v3 Authority Key Identifier:
keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6a:ee:dd:98:84:b3:de:a1:98:e9:f3:15:77:93:2e:58:da:
ca:90:9e:17:44:02:2c:7f:2a:05:2a:14:62:b0:00:2e:17:99:
03:27:a2:28:d9:12:9b:be:be:aa:76:3a:b8:31:42:f6:37:ae:
5e:d7:55:0c:a8:92:70:2d:69:8b:ea:43:3d:6c:1e:8a:b6:be:
f9:79:a1:17:8c:3b:68:2f:2b:b8:dd:71:85:71:14:af:01:4e:
43:14:1a:f3:05:a6:67:2d:f1:ab:d2:6e:d0:35:5f:79:f3:af:
5a:3f:17:6b:f7:03:85:e2:b4:32:0c:d0:90:73:ed:72:e6:5f:
c3:af:dd:2c:f9:b9:ea:47:da:e3:d2:7f:00:74:c9:91:59:fb:
02:13:e5:f0:46:0f:a6:d0:0d:a2:28:6e:b2:30:dc:00:08:e4:
7a:2f:d4:26:ec:cf:c6:ed:fd:71:d3:c8:75:7f:c6:64:58:f7:
90:cb:cf:13:36:e7:48:e1:d8:49:77:c7:0b:60:01:fe:f9:10:
16:d0:43:13:86:3f:9c:4e:31:76:18:59:22:de:b8:77:d9:fb:
17:87:46:28:98:e0:10:25:73:10:7f:76:f4:ce:c3:8d:0f:54:
01:31:68:ca:e5:f3:17:90:45:cd:21:1e:bf:e7:b7:30:5a:6f:
2d:80:7b:30
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
M0JERTExMC8GA1UEBRMoOUNENzcxMzlCN0FFNDBDNjM2MDkyRDEyODg2OTQ0REUz
RjFBRkZFMjAeFw0yNjA3MjIxODMxMDJaFw0yNjA3MjkxODMxMDJaMBgxFjAUBgNV
BAMTDTZhNjEwYzY2LWNlYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCLUVzVv6HjnsHR2YRlDDLMgA7epr7P9sie9/ND8kMzK3WUUkn0qd7wzvAHAnJh
4ngXEh3vUk9TkzWVJl/PcUXaIIsuxSMnOnPbDcPkTv7tQQNiItpGgxEoClHAUIv8
JYJldAjQ+04TQmpJ506fgQFs8z81dixRzXcxuUc2jbtaAcQqlQmZK+fxz8VFMTb9
MTSJySEpwACJALnuHucjKcOIqvA45VQdQFalkfXbegitLLkid3xIrwudznyXdOXf
z/UMgd/HzCxSiYbMgrExM4lHlIw3SnXA1tx9qGZYzsVEHMAzgRtSsFjMJV3T3acr
viJL8YzSossEiUlEfMSqZ0uzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIm0qEqmE
Vp2eQwgyYE4Ppg5gG1IwHwYDVR0jBBgwFoAUnNdxObeuQMY2CS0SiGlE3j8a/+Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQkRFLzZGRjIzQjkwRjAx
NzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1ZMkNTMFNpR2xFM2o4YV8t
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbk5keE9iZXVRTVkyQ1MwU2lHbEUzajhhXy1JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz
QkRFLzZGRjIzQjkwRjAxNzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1Z
MkNTMFNpR2xFM2o4YV8tSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCLau7dmISz3qGY6fMVd5MuWNrKkJ4XRAIsfyoFKhRisAAuF5kDJ6Io2RKbvr6q
djq4MUL2N65e11UMqJJwLWmL6kM9bB6Ktr75eaEXjDtoLyu43XGFcRSvAU5DFBrz
BaZnLfGr0m7QNV95869aPxdr9wOF4rQyDNCQc+1y5l/Dr90s+bnqR9rj0n8AdMmR
WfsCE+XwRg+m0A2iKG6yMNwACOR6L9Qm7M/G7f1x08h1f8ZkWPeQy88TNudI4dhJ
d8cLYAH++RAW0EMThj+cTjF2GFki3rh32fsXh0YomOAQJXMQf3b0zsOND1QBMWjK
5fMXkEXNIR6/57cwWm8tgHsw
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:00 2026 by rpki-client