
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
File: nLbmSsdFgpqjwVQHs-QCsgahrxk.mft (raw, json)
Hash identifier: 83RzBoOLvVT7Hzbm/fCTqC4wdnyMuH7THWXmCfCrCv8=
Subject key identifier: DD:CD:1A:68:2F:8F:DF:B7:7B:41:88:C5:BA:40:3C:F0:13:86:4A:59
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Certificate issuer: /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
Manifest number: 30
Signing time: Thu 23 Jul 2026 10:41:25 +0000
Manifest this update: Thu 23 Jul 2026 10:41:25 +0000
Manifest next update: Thu 30 Jul 2026 10:41:25 +0000
Files and hashes: 1: nLbmSsdFgpqjwVQHs-QCsgahrxk.crl (hash: X01GIqNoNBOyl2XaiL4cCpviFNUZB13PjAzm0dFtwSA=)
2: 6A7A4C9A3E1711F1A511DF78B0833773.roa (hash: HR3Bw4cs3A87KRfcRVJWreHgQBXYrEw5cctSabHCe08=)
3: 6B0AC84C3E1711F1A511DF78B0833773.roa (hash: TJJKG9BrNls63ox4QV7qWwE0OnJEumnAFR/LmFcDwfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Validity
Not Before: Jul 23 10:41:25 2026 GMT
Not After : Jul 30 10:41:25 2026 GMT
Subject: CN=6a61efd5-ccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:27:0c:86:1f:17:34:a8:a4:9a:1c:4e:e2:1d:
96:3e:8a:db:eb:85:bb:8f:63:c0:f4:01:02:75:1e:
51:31:eb:d5:67:f4:9f:a0:0d:1e:f9:54:cf:44:a5:
25:9c:48:f0:5f:53:0b:ff:2e:a5:8b:d9:85:b2:ae:
14:e2:09:c8:00:5e:25:85:77:c9:d1:6d:16:f3:8a:
55:d5:b6:1d:ec:e1:47:08:8c:16:52:06:e5:94:db:
e6:39:55:27:e7:ec:89:70:6b:d8:56:20:6d:85:31:
8b:48:0b:ca:6c:4f:92:4d:32:49:13:b1:32:df:fe:
4a:b1:d8:65:78:4d:27:8f:75:6e:8c:45:4b:4d:b5:
98:7e:cc:6f:8d:76:33:7b:75:33:1c:fd:85:dd:e5:
9c:bb:ad:49:c8:f9:9e:0f:6a:44:0f:dc:08:5d:8b:
62:a5:92:47:86:36:f8:47:9a:51:5f:1f:8c:61:71:
92:95:03:dd:e0:29:ef:b7:7b:ab:65:95:ee:60:e1:
8f:45:bd:3a:47:e5:fe:62:3b:a4:ac:bc:77:64:88:
5c:41:13:07:1e:78:88:84:5c:83:3a:54:25:04:9e:
9a:57:a8:83:e7:ff:5d:da:00:7f:87:8a:c8:2b:84:
5f:7f:1e:43:3d:c9:b1:80:1e:10:a2:60:86:fa:b3:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CD:1A:68:2F:8F:DF:B7:7B:41:88:C5:BA:40:3C:F0:13:86:4A:59
X509v3 Authority Key Identifier:
keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:1c:34:15:e6:c8:c7:50:5d:e4:88:2d:08:f3:83:f7:28:4e:
e5:01:e9:b5:3e:72:3c:4a:45:cb:79:64:0b:dd:69:a9:9b:46:
cb:6f:c9:66:82:5e:b6:27:c1:ee:43:f2:01:17:eb:ed:a7:c6:
4e:ed:99:44:ec:e8:89:de:ec:6f:0d:74:d3:89:17:c7:73:47:
cb:a8:20:56:c1:8f:6a:a3:d1:7b:d1:38:43:2e:94:29:68:08:
12:40:17:71:b4:74:d3:c2:d1:4e:cf:67:ea:f6:fe:ed:62:44:
8d:1e:df:79:a9:41:5d:a9:96:d4:a1:8e:52:2b:0e:06:3b:a3:
98:2b:3d:16:00:78:d7:de:eb:d9:94:38:e1:a0:67:8f:45:3b:
82:17:a8:0f:27:1c:d6:a7:22:0a:1c:e3:c7:7e:e8:a1:8d:25:
2c:31:c9:8c:33:ff:27:70:71:ab:a5:c6:07:57:32:1d:a0:e0:
82:92:c9:51:10:c8:af:95:d9:83:c2:d0:b9:ac:0d:ae:f5:14:
64:94:df:1d:d6:07:ce:56:b4:37:82:9d:b9:1f:4e:39:23:dc:
eb:a6:c3:ef:75:42:f7:cd:8f:16:5e:93:8f:f8:8a:e5:ae:eb:
09:88:a3:c0:2e:a4:bd:b7:7a:a6:2d:57:05:f9:41:f3:8c:91:
ad:5d:e0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:41 2026 by rpki-client