
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
File: nLbmSsdFgpqjwVQHs-QCsgahrxk.mft (raw, json)
Hash identifier: cA+PDbovqma7JVZTRr1OjNOmyMEQnhIW0BPZXvdTfsI=
Subject key identifier: 43:4D:E1:74:DE:66:E6:5C:58:74:E7:EF:C0:90:41:64:EE:C2:D9:12
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Certificate issuer: /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
Manifest number: 0E
Signing time: Wed 13 May 2026 09:14:41 +0000
Manifest this update: Wed 13 May 2026 09:14:41 +0000
Manifest next update: Wed 20 May 2026 09:14:41 +0000
Files and hashes: 1: nLbmSsdFgpqjwVQHs-QCsgahrxk.crl (hash: Z3850D8vpumvo5eAO06EDSf+REnS2CHISI9mzvp9sB0=)
2: 6A7A4C9A3E1711F1A511DF78B0833773.roa (hash: HR3Bw4cs3A87KRfcRVJWreHgQBXYrEw5cctSabHCe08=)
3: 6B0AC84C3E1711F1A511DF78B0833773.roa (hash: TJJKG9BrNls63ox4QV7qWwE0OnJEumnAFR/LmFcDwfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Validity
Not Before: May 13 09:14:41 2026 GMT
Not After : May 20 09:14:41 2026 GMT
Subject: CN=6a044101-bbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:8a:df:74:64:45:34:9e:00:8a:fb:66:23:
69:f1:0e:ff:c9:48:67:88:fe:a3:4f:d6:db:5d:9e:
fe:94:9e:8c:21:a5:eb:25:08:1e:3e:e1:91:c2:02:
06:88:a1:76:5c:65:de:bb:87:42:2d:1c:9a:63:bf:
ed:92:7b:b7:a9:12:30:3d:bd:f3:e0:51:49:eb:c6:
3c:a4:8a:39:06:9b:66:67:ab:0d:40:c4:02:68:31:
39:15:28:ca:27:65:c0:d8:5b:82:ec:8f:c9:ef:56:
d5:1e:51:6d:43:6e:a0:07:34:a9:8b:48:37:3e:a2:
91:68:60:b5:ff:0c:23:1d:13:1b:a0:c2:de:58:0b:
74:98:84:19:7d:e0:fc:d2:b9:25:69:a5:70:c7:9c:
a6:75:51:48:bd:47:ab:ac:2d:28:e1:d6:c6:b7:77:
96:27:b7:d7:53:1f:67:d7:09:f2:db:61:b0:25:0f:
e3:dc:32:1c:18:e9:68:43:1a:47:ab:69:f0:1a:89:
10:cd:66:b4:0f:89:1f:f9:86:12:1f:1b:a8:86:dd:
9a:6d:58:40:f1:2d:ec:f3:53:ae:f9:85:4f:b0:44:
3e:8d:3e:38:62:21:67:11:7d:e0:fa:82:b0:33:8b:
e4:e7:7f:fd:5b:7d:19:5e:f1:9c:03:f7:75:01:97:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:E1:74:DE:66:E6:5C:58:74:E7:EF:C0:90:41:64:EE:C2:D9:12
X509v3 Authority Key Identifier:
keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:19:8b:4e:30:cd:b1:d1:20:3d:84:fc:3c:5d:72:e3:c8:8b:
16:02:3f:62:87:32:74:76:38:a4:18:7e:48:1a:63:73:1b:21:
bb:c7:6b:9e:30:df:58:59:12:14:09:85:e2:c8:0b:8b:93:85:
c3:f7:e5:d1:fe:e0:29:18:6b:8b:f5:ea:be:a9:ef:92:80:07:
59:c3:68:19:ad:1d:d7:79:1f:46:18:49:b4:21:0e:86:4b:24:
b8:26:29:d1:f0:c3:d7:d5:ff:94:28:b3:92:c7:d3:f0:64:91:
a3:b2:51:96:8c:60:14:93:57:95:6d:5f:e5:c9:75:7a:08:92:
e3:2a:75:9f:82:3e:b2:2c:88:7f:98:6a:b1:ce:48:86:10:31:
e2:ee:e9:b7:ca:0f:7f:3d:d0:69:ca:6f:f8:d5:85:1c:1a:0d:
c3:7a:f5:58:cb:f5:a3:4a:d5:80:74:b9:6f:34:bc:a8:b6:4a:
92:1a:fc:31:6b:1e:75:9d:77:f5:db:5b:f6:9a:bb:1d:76:2e:
ea:b9:17:89:00:c1:b7:21:db:1e:aa:b4:2c:c3:4e:f8:3c:1b:
c6:46:a7:1a:bc:73:46:ed:47:da:2f:3a:0e:f4:3d:0d:f6:02:
7a:6c:dd:bb:fb:25:98:83:01:31:09:d2:b8:ec:e3:c5:f8:48:
bb:84:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:04 2026 by rpki-client