
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
File: Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json)
Hash identifier: LX4QQjfYkA3Gosln2WFbCkLWYSk1t2xLmSZXEiuoXgE=
Subject key identifier: A9:C0:C2:65:E0:32:8D:6E:58:BB:3C:B0:21:8F:AB:C4:FA:29:A2:A9
Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
Manifest number: F8
Signing time: Wed 13 May 2026 06:28:11 +0000
Manifest this update: Wed 13 May 2026 06:28:10 +0000
Manifest next update: Wed 20 May 2026 06:28:10 +0000
Files and hashes: 1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: NRykbpLp1fuyRCStV3sbpdw95jbUaCEmC7qQqgVY4co=)
2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: Nuy8wkTfNQsDA+tWgvTQcyjhbo91R+mIegI98+xjZxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Validity
Not Before: May 13 06:28:10 2026 GMT
Not After : May 20 06:28:10 2026 GMT
Subject: CN=6a0419fb-f71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:18:68:81:3e:60:51:24:ef:33:dc:8b:ee:
1f:33:5e:34:d0:60:7d:8b:d0:81:65:42:7a:93:21:
0b:46:93:3a:2a:e3:35:7b:1f:67:2d:76:c0:dc:d8:
67:65:13:53:f8:cc:3d:73:6a:5b:d4:a6:e6:94:93:
f8:2b:c7:0f:40:83:0a:2d:5a:c8:0e:2d:50:6e:ed:
c7:24:be:b2:56:4c:6d:79:61:24:8d:12:d1:f3:42:
a9:ba:02:85:ca:13:58:24:64:d1:3b:20:9c:66:85:
db:3b:42:d9:fd:d9:8a:c3:6a:35:82:39:37:ee:8b:
c7:9c:62:13:10:18:54:44:a3:f5:cd:9c:47:36:44:
e0:6f:db:4f:f0:52:00:c5:3d:f8:49:2f:63:6a:fa:
7d:a0:22:4f:3b:a2:f7:ac:14:f3:2a:ef:06:20:3d:
41:00:75:72:09:db:a8:01:19:81:17:2b:ad:18:44:
c7:12:29:09:4e:6b:cc:02:15:32:31:71:4b:c0:e3:
1e:68:48:48:47:b8:1e:c7:62:89:24:c8:61:1d:07:
e1:62:b1:7f:df:8a:6f:64:db:2c:00:01:c6:25:e3:
5a:8a:1e:b0:08:c2:1f:e2:49:75:53:07:9a:c3:46:
52:bb:ee:40:86:38:00:46:b8:ec:3d:d4:d9:d5:da:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C0:C2:65:E0:32:8D:6E:58:BB:3C:B0:21:8F:AB:C4:FA:29:A2:A9
X509v3 Authority Key Identifier:
keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:29:c1:ea:12:e4:dd:c3:99:39:e4:5f:97:55:89:67:05:21:
b6:34:2e:cc:4b:41:97:bb:f1:0f:d7:9e:0d:14:d1:f4:f1:0b:
46:39:75:3c:33:ad:43:c0:b0:2c:78:09:b3:07:60:19:68:77:
e6:f3:23:40:f8:14:f3:fd:0e:28:1d:bb:45:b2:06:0b:5c:17:
24:30:b6:95:92:80:6b:ac:f4:b9:35:9c:74:f1:16:bd:5a:3e:
52:01:fa:09:b2:d5:da:3a:be:04:55:70:5f:68:11:0f:b2:2c:
09:67:77:af:46:60:5b:a1:5b:49:47:20:e3:f1:d2:be:95:62:
b2:7b:c3:c9:00:41:c0:75:1d:c9:df:a0:c9:1c:7b:4a:c9:de:
9c:da:5c:9d:18:af:73:66:41:69:17:ff:4d:d6:16:66:ce:f5:
21:50:31:f1:7c:92:ea:52:24:25:3c:ae:c0:34:f5:50:b2:1a:
30:97:fc:2c:06:40:3b:75:0c:f3:5e:d4:0b:93:cd:da:46:d6:
3c:d5:85:c1:10:52:33:0f:49:b3:35:7b:a1:9c:c0:32:45:31:
d4:02:c1:03:09:fa:5d:26:a6:5e:43:3a:d0:38:6c:95:93:15:
7c:e1:09:5b:54:34:43:88:df:c4:7a:a3:b8:8b:14:a0:3f:f7:
c9:72:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:14:36 2026 by rpki-client