
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json)
Hash identifier: 7+8B50XJwYypGiF+/yhh9z+3Z+bGyHBCSazyRwNQRhw=
Subject key identifier: 6A:ED:4E:6A:4F:A1:36:DD:6D:8E:33:BF:79:B1:83:CA:91:DA:99:97
Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Certificate serial: 03DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
Manifest number: 03D7
Signing time: Wed 25 Mar 2026 00:12:23 +0000
Manifest this update: Wed 25 Mar 2026 00:12:22 +0000
Manifest next update: Wed 01 Apr 2026 00:12:22 +0000
Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: CHIZtcSYlBAD4sJua6bCRL5iFCaS9iNZms/75dl8gws=)
2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: nCTovFi354+ZfaPTQ0ztwkkd94a5/Uc+5BEDc/vwPfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Validity
Not Before: Mar 25 00:12:22 2026 GMT
Not After : Apr 1 00:12:22 2026 GMT
Subject: CN=69c32867-2916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:c2:97:df:a3:90:89:13:43:16:fb:39:06:
e8:24:62:69:83:e3:48:12:b8:f3:91:c9:e6:99:75:
48:63:99:ce:ee:35:1e:aa:8f:84:66:22:0a:de:0e:
20:80:67:80:52:96:7e:65:40:b9:25:b6:73:f6:93:
a6:07:2a:5d:b1:fc:0a:2a:f2:3c:60:ca:fd:76:98:
bc:1c:d3:ca:5b:ea:92:2c:bd:a5:07:94:c6:32:8b:
d0:f0:dd:6f:37:32:58:8f:18:95:43:bb:c7:61:9d:
af:41:cd:5f:c7:65:8b:0f:94:77:3b:29:35:de:23:
3c:3d:49:a7:5e:88:fb:75:6b:0f:8b:27:3a:ec:53:
37:d4:61:4d:da:3e:9d:94:df:b1:39:b9:1e:77:66:
0f:b1:53:fd:98:3d:a6:68:63:f6:5e:cd:4b:d1:f7:
09:f4:ae:28:60:09:bf:e3:d2:18:58:ff:96:3d:5c:
4b:8f:25:5b:ab:e8:6a:fa:87:89:c6:11:db:dc:a3:
db:8f:ae:ad:66:33:67:b2:0b:22:80:4a:06:45:26:
bc:8c:d4:7c:40:95:3a:27:13:23:61:52:37:1a:79:
a4:e8:9d:f6:e3:f4:40:b2:34:22:ae:3e:19:0a:16:
b7:33:69:23:7c:42:7a:f0:85:4c:7f:39:1a:08:05:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:4E:6A:4F:A1:36:DD:6D:8E:33:BF:79:B1:83:CA:91:DA:99:97
X509v3 Authority Key Identifier:
keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:92:2c:6a:59:37:6b:5f:8e:d4:3a:57:8e:55:a8:dc:ad:20:
d0:49:77:dd:6c:77:61:82:75:8c:09:72:64:72:ee:63:4e:8b:
51:22:a7:d0:86:da:d2:f8:71:a3:4a:40:e9:c5:ca:83:a4:99:
32:4c:4d:d2:70:20:59:f4:bb:ca:de:4b:bb:f3:bd:d1:12:5e:
3f:71:32:45:49:34:7f:18:13:2c:22:6b:74:52:60:fe:ff:e0:
c0:aa:5d:5b:3e:d5:97:bd:80:0a:4b:6f:17:64:f0:90:48:2e:
34:91:45:b6:f3:67:05:83:77:1c:78:e8:be:cd:f7:ea:37:e8:
ca:de:9d:ab:bf:4e:52:d4:62:5f:80:a8:51:8d:d0:c0:fe:2d:
a4:06:ed:c7:67:fa:4e:78:d5:9d:69:fb:d2:14:25:b5:f0:b8:
78:5b:bd:f0:53:e2:54:13:7c:42:ca:82:82:9b:89:47:fe:19:
22:da:51:9b:4c:b8:bc:3c:cb:dd:71:5d:c6:1d:82:34:21:fe:
29:56:fe:41:dd:e4:ab:15:c9:e4:57:a9:fc:fa:26:04:86:d2:
62:3f:db:c5:30:86:4e:17:00:6d:34:30:5c:6f:72:da:c4:80:
92:0b:51:bf:1b:b0:01:1c:18:39:a8:a9:40:c2:fe:05:96:e3:
ae:e8:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:17 2026 by rpki-client