
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json)
Hash identifier: +u0nH1aGln50rZjyi3fsIt76hE5xIeZaMXCb4eVsmoo=
Subject key identifier: 3E:04:18:1D:B7:98:87:C8:25:A2:FA:2A:C2:E4:2D:A5:73:D7:76:CF
Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Certificate serial: 041B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
Manifest number: 0414
Signing time: Thu 23 Jul 2026 01:13:17 +0000
Manifest this update: Thu 23 Jul 2026 01:13:17 +0000
Manifest next update: Thu 30 Jul 2026 01:13:17 +0000
Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: ZeUZ0BLlx8ywMZTl4NZt8ZHT4qmRadDpahgk1R3nc1U=)
2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: nCTovFi354+ZfaPTQ0ztwkkd94a5/Uc+5BEDc/vwPfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Validity
Not Before: Jul 23 01:13:17 2026 GMT
Not After : Jul 30 01:13:17 2026 GMT
Subject: CN=6a616aad-3655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:2b:b7:9f:d3:77:42:84:30:27:a1:16:18:
9b:71:9a:b6:a7:1e:c9:c8:65:ae:d1:8b:df:8e:b0:
87:ac:8f:e2:32:c8:98:e1:6a:88:7a:c7:ad:cb:99:
00:66:b0:51:ba:12:63:16:15:dd:eb:20:e5:50:5b:
88:53:13:87:a6:51:06:dc:bb:47:0d:34:e2:ef:48:
1d:e3:38:d2:0b:fc:8b:9b:f7:ed:83:03:89:50:1f:
fa:5f:33:83:d2:59:a9:7c:8f:89:39:7d:db:6a:7a:
34:71:1f:58:ee:6a:50:55:92:b8:95:a9:39:d2:58:
8d:d8:6b:39:07:80:6f:8c:d8:68:80:41:76:90:9d:
57:f9:a7:1a:aa:dd:55:90:6e:d8:ea:80:45:7f:74:
ef:b6:b3:45:f1:7c:2a:2f:45:b2:af:ac:8f:ac:f6:
db:c2:da:1a:9c:67:b8:e7:26:c5:57:02:b6:b7:cd:
60:b0:54:ef:8e:6c:d2:39:a0:21:df:cf:1e:bb:58:
58:44:74:4e:51:d6:64:00:7f:78:90:d5:d0:b0:0b:
b0:5b:3f:9a:a4:f7:9b:54:8e:61:73:49:4f:1a:84:
3c:15:be:a4:33:ca:18:9e:54:e3:28:58:29:a4:38:
c4:4e:e7:12:70:08:02:d7:17:94:16:ba:84:99:c4:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:18:1D:B7:98:87:C8:25:A2:FA:2A:C2:E4:2D:A5:73:D7:76:CF
X509v3 Authority Key Identifier:
keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:f1:43:cb:a5:51:c5:36:c3:25:bf:8e:1e:e0:27:d6:25:82:
26:86:59:09:04:5a:47:7a:8a:6f:00:55:ce:d0:52:74:4f:e9:
6e:d5:c5:cc:e7:2f:35:a8:5f:7c:de:fe:e7:64:e4:60:c6:03:
75:2e:73:29:6d:67:f9:77:cd:5c:65:7b:19:47:da:67:ab:04:
12:90:cc:3e:4c:2e:21:61:5a:80:2f:6a:76:06:48:e0:a5:21:
04:1e:93:ad:7d:df:31:c1:23:98:11:0f:c5:7c:cd:73:a4:c0:
d0:b7:2c:98:d7:f7:7a:b8:0b:f3:cc:20:1c:74:d1:69:32:f8:
b7:e9:c9:9e:ec:91:bc:16:1b:4f:ee:c8:61:78:68:f4:11:52:
8b:20:bd:d9:b5:c8:6d:e6:65:cd:24:44:45:05:1c:3b:92:7f:
4c:62:83:de:22:06:85:c8:4d:92:68:b9:c9:54:6f:60:14:24:
36:2b:df:08:9a:6d:a8:a4:64:b0:d3:07:7b:ae:b7:02:68:78:
51:93:b1:bf:a4:c0:ae:ec:6d:3d:44:ed:8d:6b:b9:5e:23:51:
69:60:be:48:88:93:69:c7:48:e9:00:cc:22:e7:87:47:20:33:
89:e0:40:0d:24:7c:ff:9c:8b:de:ee:e4:57:17:09:31:39:e3:
64:01:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:46 2026 by rpki-client