
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json)
Hash identifier: FraBKEQFqWDtfx4QGcwZ9NKv+34bF6YqbouWHKSgggw=
Subject key identifier: 56:B7:F2:55:C9:FD:9B:0D:FB:21:3D:A3:63:1A:09:4F:47:71:2B:A2
Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
Manifest number: 01F2
Signing time: Fri 25 Sep 2026 03:52:19 +0000
Manifest this update: Fri 25 Sep 2026 03:52:18 +0000
Manifest next update: Fri 02 Oct 2026 03:52:18 +0000
Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: YNOHjmvCdV9dDmtZg9ZVTNx6zgCNSjreeSlY1is+D2A=)
2: UvM_rQ0kUKCbTjsTrzhHaoT0tco.asa (hash: qbLrr8nHVN0hPefgqkS7zyRLd13bpru8nRDGyVM6x6c=)
3: 6CFCC5EC8F4D11F1B986D3494611F970.roa (hash: DIzsgSR5GwxTp5MHAgczXy9dfk2cq7Ie4lXeoFdLBeg=)
4: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: N7d2kdSjz/jwSyQEPzpDvWGJTq/1G0TljCkUhHZagrM=)
5: DFB06F1E8C4411F1B3F3C3C65411F970.roa (hash: m3C4Ne1JUnCi+zYe3q0erjOJOltliP8iGbvHB8vQzRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Validity
Not Before: Sep 25 03:52:18 2026 GMT
Not After : Oct 2 03:52:18 2026 GMT
Subject: CN=6ab5eff2-14ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:4d:ce:6f:3a:33:9d:eb:00:50:12:83:e3:
d8:bd:93:a2:4e:18:22:a5:b2:b2:33:55:b7:09:5c:
f9:f7:a0:45:80:fc:6c:63:da:6c:78:06:82:ab:5c:
3a:8f:63:2e:a8:fd:fb:bb:ae:7b:43:c7:66:dc:a0:
cb:cc:63:b3:9e:45:f9:a6:91:21:fe:d5:0f:c0:77:
72:56:df:b7:6d:6a:73:b1:47:3f:0d:4e:e7:7b:04:
ed:d3:6c:46:07:49:90:76:aa:12:e4:7a:2f:55:bb:
44:d6:fd:11:51:44:5c:dc:26:51:8e:c5:c1:b9:d9:
9c:92:77:a2:03:6c:77:eb:11:f7:7a:cf:ce:38:d7:
4a:93:98:b9:d9:2f:a2:db:50:43:91:72:47:c1:2c:
2f:cf:11:08:89:20:57:49:4c:97:e9:d3:ea:7d:49:
ee:fd:2d:04:1b:80:74:41:3d:f2:ef:98:bd:45:c7:
7b:11:8b:6d:a2:c9:9f:4e:b6:56:79:57:c0:09:bb:
f7:bb:74:2c:99:79:2d:82:f2:0b:70:32:a4:21:9d:
ee:9f:c1:1a:6b:38:3e:b9:53:77:d9:aa:88:46:21:
f3:d6:b5:fc:8b:80:a5:f8:eb:ff:e5:fa:17:55:57:
c0:86:1f:90:5d:bf:22:9e:de:82:8f:42:82:e9:d5:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:F2:55:C9:FD:9B:0D:FB:21:3D:A3:63:1A:09:4F:47:71:2B:A2
X509v3 Authority Key Identifier:
keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:cc:10:3f:68:82:eb:87:c9:58:0c:ef:96:07:9a:19:b4:f6:
88:9f:e5:70:d8:3d:bd:29:1e:6a:69:6e:9e:fe:ff:bf:f2:b9:
e5:5f:ef:3c:d2:5e:c1:56:7e:aa:3e:83:e8:65:d8:26:60:25:
02:cb:bf:ba:70:04:32:30:ba:b6:fa:5b:0f:fd:f7:a3:22:34:
fc:56:af:ca:70:24:b4:db:d1:c7:92:64:6c:6e:79:71:39:f5:
ab:45:d4:42:fd:09:e9:08:82:e3:4f:bd:5e:08:e4:a1:98:fb:
f5:77:20:8a:e7:5d:09:16:1c:30:04:7a:b4:58:ac:d8:61:52:
18:cc:1d:85:23:e1:3c:b9:f5:ab:ff:c5:c8:f9:a5:f6:38:2d:
3a:f5:c7:c4:7a:4b:41:f9:65:74:c9:40:11:08:d5:6e:90:80:
d8:cc:af:ce:cc:59:8f:37:30:a8:89:31:c4:47:19:9e:1a:13:
32:ab:02:a0:c6:5c:6f:f9:c5:df:07:a5:e0:7c:02:ef:78:7a:
e8:92:75:5d:54:16:65:b2:0d:85:ad:a6:9c:22:4f:e4:8f:d7:
b7:61:f6:c7:11:55:76:38:25:cc:6b:10:31:df:41:90:1f:ae:
74:45:f8:8e:fe:ba:d8:fc:32:c7:49:e8:18:01:50:01:3c:f2:
44:8c:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:41:27 2026 by rpki-client