
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json)
Hash identifier: 2/fVutk0y7uGSPUXeignE8O/6Gg3ToNSZSszUiXmqWQ=
Subject key identifier: CE:5A:24:51:71:D8:4F:E6:40:48:38:BB:82:10:39:5B:5C:8C:6D:97
Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1
Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
Manifest number: 01D0
Signing time: Mon 11 May 2026 03:43:11 +0000
Manifest this update: Mon 11 May 2026 03:43:11 +0000
Manifest next update: Mon 18 May 2026 03:43:11 +0000
Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: LABznqPJvxls2kheMYcE/3jDd4ySeREUK1SFK6PoVuU=)
2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: yviocZTIT/QN9ZH5Z7jImoFYZZ1ZtuGiFiBRlnTY9io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl
rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
Validity
Not Before: May 11 03:43:11 2026 GMT
Not After : May 18 03:43:11 2026 GMT
Subject: CN=6a01504f-9919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:b7:37:e4:1f:83:af:e8:1f:09:70:96:66:
0e:29:2c:ef:2c:28:47:61:dc:92:e3:50:37:7d:4e:
99:a5:aa:e8:c9:4f:b6:2a:d2:2b:98:9a:cc:9c:b0:
d4:da:fa:01:88:51:3a:65:1d:3a:49:f0:9e:45:c0:
bc:98:21:18:bf:a1:24:05:6a:05:d2:32:da:48:05:
1d:9d:54:a9:42:66:18:5a:19:ce:63:c2:65:95:75:
1e:94:ef:23:ab:64:f5:8b:ba:45:d4:80:1a:84:9b:
70:2f:2c:10:ee:57:5e:66:9c:68:91:6c:1f:ca:6f:
c3:e4:81:d5:c9:70:33:7a:2e:95:35:a4:d1:ac:df:
6a:f3:d8:75:3e:bc:d4:93:2e:79:63:b6:b0:2b:d5:
2b:eb:ce:33:a6:c4:36:76:20:e2:05:0d:c0:4b:14:
05:78:d7:52:df:e1:a7:bb:f6:ee:0d:33:37:4c:d9:
16:e9:38:c9:a8:3d:ee:d8:fb:02:ee:1d:0f:ad:71:
1c:45:16:5b:de:98:48:ae:09:21:57:9e:dc:81:47:
b7:c5:9c:f3:24:1b:09:44:04:f4:bf:32:fa:63:73:
57:e9:cd:4f:93:a3:9b:e4:0e:f6:13:f4:df:a1:f5:
4f:4a:97:87:30:4b:7e:87:74:33:5c:b3:02:6c:02:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5A:24:51:71:D8:4F:E6:40:48:38:BB:82:10:39:5B:5C:8C:6D:97
X509v3 Authority Key Identifier:
keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6d:c3:d1:95:d6:4e:b4:41:dc:02:a0:cb:93:b7:05:24:65:
7b:49:1d:e8:7b:e6:58:64:b5:e1:70:88:c9:f9:35:b3:2f:f3:
c4:28:da:1b:3b:b4:9d:77:bf:06:34:6f:75:8c:b5:62:37:75:
1b:d0:0a:92:7c:24:63:ef:f1:2e:07:90:73:29:11:be:7a:af:
49:f6:b2:a8:51:57:a8:f5:bf:61:2e:12:79:9d:30:cb:c7:89:
6c:ae:2d:a0:06:c8:6b:bb:d7:0c:e2:0a:4a:73:97:da:ee:72:
30:c7:49:2a:a4:ba:72:fd:ac:79:44:22:e7:7e:b4:1d:fa:cc:
7f:1e:e0:75:ba:91:0c:bd:25:d4:65:2a:f4:fd:e3:79:a4:36:
67:65:7d:b0:77:94:cb:86:83:c0:3e:20:d0:0b:4e:cd:39:3b:
18:ae:7d:0e:cc:55:f0:47:3b:2b:bb:77:c9:2f:13:f6:fc:13:
8e:3d:4d:de:f8:39:13:3b:59:52:c0:9b:3b:39:af:ed:a4:72:
0d:9d:47:0e:c7:6e:37:2d:f3:07:c6:37:db:a7:98:31:4c:e2:
69:84:e6:39:70:85:00:a3:55:f0:e2:e7:4f:46:f4:88:77:a1:
e0:4e:2e:33:89:9b:fb:79:ff:33:0e:13:29:5e:04:1e:31:51:
76:96:9d:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI4QzgxMTAvBgNVBAUTKDM2OUIzRTlCN0I2NkU4RjVCQjk3OUE2RTJGMkU3QUFD
RjUwMEQzRjEwHhcNMjYwNTExMDM0MzExWhcNMjYwNTE4MDM0MzExWjAYMRYwFAYD
VQQDEw02YTAxNTA0Zi05OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqHq3N+Qfg6/oHwlwlmYOKSzvLChHYdyS41A3fU6ZparoyU+2KtIrmJrMnLDU
2voBiFE6ZR06SfCeRcC8mCEYv6EkBWoF0jLaSAUdnVSpQmYYWhnOY8JllXUelO8j
q2T1i7pF1IAahJtwLywQ7ldeZpxokWwfym/D5IHVyXAzei6VNaTRrN9q89h1PrzU
ky55Y7awK9Ur684zpsQ2diDiBQ3ASxQFeNdS3+Gnu/buDTM3TNkW6TjJqD3u2PsC
7h0PrXEcRRZb3phIrgkhV57cgUe3xZzzJBsJRAT0vzL6Y3NX6c1Pk6Ob5A72E/Tf
ofVPSpeHMEt+h3QzXLMCbAK/GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5aJFFx
2E/mQEg4u4IQOVtcjG2XMB8GA1UdIwQYMBaAFDabPpt7Zuj1u5eabi8ueqz1ANPx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOC9DNDRDMDQ1MjhF
QzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQVzdsNXB1THk1NnJQVUEw
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjhDOC9DNDRDMDQ1MjhFQzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQ
VzdsNXB1THk1NnJQVUEwX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX23D0ZXWTrRB3AKgy5O3BSRle0kd6HvmWGS14XCIyfk1sy/zxCjaGzu0nXe/
BjRvdYy1Yjd1G9AKknwkY+/xLgeQcykRvnqvSfayqFFXqPW/YS4SeZ0wy8eJbK4t
oAbIa7vXDOIKSnOX2u5yMMdJKqS6cv2seUQi5360HfrMfx7gdbqRDL0l1GUq9P3j
eaQ2Z2V9sHeUy4aDwD4g0AtOzTk7GK59DsxV8Ec7K7t3yS8T9vwTjj1N3vg5EztZ
UsCbOzmv7aRyDZ1HDsduNy3zB8Y326eYMUziaYTmOXCFAKNV8OLnT0b0iHeh4E4u
M4mb+3n/Mw4TKV4EHjFRdpadRA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:04:35 2026 by rpki-client