
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
File: Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json)
Hash identifier: GRx+oNz6Nr1zku5Gxcp7asHxChVNIiyE5FjFQy+BdVs=
Subject key identifier: A9:E6:14:49:B6:88:4C:A9:F3:C2:D0:CB:21:1E:15:37:52:9C:65:D0
Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
Manifest number: 011B
Signing time: Thu 23 Jul 2026 07:37:25 +0000
Manifest this update: Thu 23 Jul 2026 07:37:25 +0000
Manifest next update: Thu 30 Jul 2026 07:37:25 +0000
Files and hashes: 1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: C1LcBrCXzuMnrj2TQVd8KA3Qy7K0U/+uu+QWKDmtwjE=)
2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: Nuy8wkTfNQsDA+tWgvTQcyjhbo91R+mIegI98+xjZxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Validity
Not Before: Jul 23 07:37:25 2026 GMT
Not After : Jul 30 07:37:25 2026 GMT
Subject: CN=6a61c4b5-9c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:9c:43:e5:64:c7:15:b4:1f:2b:91:b8:0e:
af:ab:dc:86:41:b9:86:03:c3:6c:21:69:b9:0b:1f:
6b:52:4c:f7:15:99:43:d9:56:f8:24:fc:9b:c7:0f:
6d:6a:3b:46:ca:8a:4d:15:2b:1f:c4:fc:7f:72:2c:
15:9f:a3:ea:bb:18:09:a9:0a:21:68:bf:2e:a6:a4:
66:93:e6:8a:39:1c:21:1b:8b:79:10:b9:21:bc:53:
89:3a:e0:01:1c:87:96:10:cd:19:78:28:c6:5c:39:
ce:4d:64:84:60:a9:95:d4:e8:83:92:b5:52:b5:7b:
b1:38:df:21:da:b1:55:3b:df:76:a5:46:5b:95:b6:
a8:16:3f:14:4d:ee:fc:60:96:66:9b:30:f7:1a:6e:
68:4a:6b:4a:0b:81:d5:ac:81:c8:2c:6c:20:c6:e6:
72:b4:01:f8:c0:aa:c9:65:08:d8:91:82:91:d7:80:
d3:70:db:e9:2f:04:ad:26:d2:ec:9f:ea:15:3c:4d:
39:a4:e3:39:92:ed:c6:78:9a:1b:2e:44:42:7b:0c:
15:61:3a:fc:7b:9f:e2:73:80:92:55:68:23:4d:20:
d9:b6:b9:12:f1:65:fc:e7:e2:46:ce:62:c4:f0:c6:
10:83:97:04:99:ea:5f:9a:85:46:ad:c9:07:2f:3b:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:14:49:B6:88:4C:A9:F3:C2:D0:CB:21:1E:15:37:52:9C:65:D0
X509v3 Authority Key Identifier:
keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:7d:69:e9:7a:3b:47:98:1a:3d:17:92:3e:fa:5e:1e:02:78:
8a:69:7e:0c:3d:50:a2:b9:f4:38:a1:fa:4d:2d:29:fd:68:fc:
de:21:6d:5e:60:8a:b8:b3:d8:9f:1c:20:15:e4:ae:d0:fd:71:
53:2a:af:e9:4f:ac:33:4d:d4:63:99:8a:d7:94:8b:a2:79:71:
fc:97:4a:0b:97:28:65:41:46:c9:58:11:f1:fd:bc:72:52:77:
33:2b:89:e5:15:8f:55:1f:73:ba:b7:1e:a7:88:ac:28:76:c3:
b7:69:a1:fd:be:ed:4f:4a:54:ca:52:9c:d6:9f:f7:43:92:fe:
b1:47:4c:61:64:5a:80:3f:5c:78:83:e2:41:60:18:be:8c:c7:
c4:fd:55:9a:2d:12:14:cf:ab:77:3f:3e:68:d5:1f:76:94:11:
16:62:0b:1a:7e:a1:c4:31:11:bd:c7:bd:bb:41:98:ac:a8:75:
63:a9:57:45:23:c4:a1:ee:82:57:17:55:87:d9:aa:f7:f8:7f:
db:48:50:ea:c1:fb:5a:63:e3:8b:78:97:d3:86:cb:72:eb:3c:
ff:60:a4:8a:e5:12:ae:a5:c1:57:64:f1:50:3a:94:12:86:5a:
97:de:8a:c0:13:4b:3d:8f:4f:bf:20:40:01:90:5a:e5:68:48:
78:18:5a:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzNTcxMTAvBgNVBAUTKDM2MUZBREEyRTBBODhDRjI4N0Y0Q0U2Q0MzQjQ0NjJD
OTEzMzBCRkMwHhcNMjYwNzIzMDczNzI1WhcNMjYwNzMwMDczNzI1WjAYMRYwFAYD
VQQDEw02YTYxYzRiNS05YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm3ycQ+VkxxW0HyuRuA6vq9yGQbmGA8NsIWm5Cx9rUkz3FZlD2Vb4JPybxw9t
ajtGyopNFSsfxPx/ciwVn6PquxgJqQohaL8upqRmk+aKORwhG4t5ELkhvFOJOuAB
HIeWEM0ZeCjGXDnOTWSEYKmV1OiDkrVStXuxON8h2rFVO992pUZblbaoFj8UTe78
YJZmmzD3Gm5oSmtKC4HVrIHILGwgxuZytAH4wKrJZQjYkYKR14DTcNvpLwStJtLs
n+oVPE05pOM5ku3GeJobLkRCewwVYTr8e5/ic4CSVWgjTSDZtrkS8WX85+JGzmLE
8MYQg5cEmepfmoVGrckHLzva3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnmFEm2
iEyp88LQyyEeFTdSnGXQMB8GA1UdIwQYMBaAFDYfraLgqIzyh/TObMO0RiyRMwv8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xNEE3OEYyQ0RG
OEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQS0g5TTVzdzdSR0xKRXpD
X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNfdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODM1Ny8xNEE3OEYyQ0RGOEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQ
S0g5TTVzdzdSR0xKRXpDX3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1H1p6Xo7R5gaPReSPvpeHgJ4iml+DD1Qorn0OKH6TS0p/Wj83iFtXmCKuLPY
nxwgFeSu0P1xUyqv6U+sM03UY5mK15SLonlx/JdKC5coZUFGyVgR8f28clJ3MyuJ
5RWPVR9zurcep4isKHbDt2mh/b7tT0pUylKc1p/3Q5L+sUdMYWRagD9ceIPiQWAY
vozHxP1Vmi0SFM+rdz8+aNUfdpQRFmILGn6hxDERvce9u0GYrKh1Y6lXRSPEoe6C
VxdVh9mq9/h/20hQ6sH7WmPji3iX04bLcus8/2CkiuUSrqXBV2TxUDqUEoZal96K
wBNLPY9PvyBAAZBa5WhIeBhaMQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:23:59 2026 by rpki-client