
$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json)
Hash identifier: GTijyCRDLZ9+RQlekCf1/UtF47J+ZCrkN4FUiwEM4/k=
Subject key identifier: 02:5D:AC:39:2B:6C:FF:2E:93:55:4A:68:03:B2:F1:8A:B5:51:F4:E1
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial: 1A57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
Manifest number: 1A34
Signing time: Mon 20 Jul 2026 16:26:36 +0000
Manifest this update: Mon 20 Jul 2026 16:26:36 +0000
Manifest next update: Mon 27 Jul 2026 16:26:36 +0000
Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: UUsc5uvZxdgsh8aDavwHbr5ZxE0t2PoK+bBstJYb2fs=)
2: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=)
3: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=)
4: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6743 (0x1a57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Validity
Not Before: Jul 20 16:26:36 2026 GMT
Not After : Jul 27 16:26:36 2026 GMT
Subject: CN=6a5e4c3c-98c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:cc:f5:e9:40:dd:68:f6:b5:7f:82:7a:54:
97:57:5d:8c:76:41:42:01:db:54:b8:e7:6d:5f:d6:
ee:c9:51:df:82:80:dc:e0:98:a9:ee:38:1c:af:b3:
62:67:41:3d:59:8f:db:e9:44:a0:e6:d4:71:b3:96:
c3:12:e3:da:d3:82:c6:37:4d:a8:f3:08:f9:3a:53:
85:f2:69:85:ad:1c:d0:0f:c5:ec:34:29:b2:cf:9e:
b2:03:c6:ea:10:0a:c9:b3:6e:6d:e9:b0:6d:ab:cf:
9c:18:0c:63:6e:08:21:81:f3:6e:f6:5a:ec:e5:35:
4b:4f:d4:84:49:65:6f:b6:3d:12:3b:58:ea:76:81:
3f:ae:70:9f:b8:36:15:20:80:63:09:c4:63:bc:6b:
74:d8:35:13:e9:49:13:17:8d:e9:79:87:34:28:d9:
a1:d9:17:15:61:b6:74:37:39:bf:44:9b:1f:fd:46:
41:9c:cd:9d:b8:b2:ac:2c:03:8c:6e:9e:65:3f:e8:
a8:d2:74:a6:d0:e0:20:29:98:17:81:08:cd:ad:f4:
be:1b:ed:c7:42:9d:0c:a1:74:83:80:11:b8:6c:5a:
d4:bb:f9:a5:1c:39:d6:99:60:71:f1:25:85:63:7a:
14:8c:9b:f3:c5:4c:87:ee:a8:c8:14:da:35:3a:00:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:AC:39:2B:6C:FF:2E:93:55:4A:68:03:B2:F1:8A:B5:51:F4:E1
X509v3 Authority Key Identifier:
keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:9a:7a:87:47:e2:02:af:3f:87:36:9e:3b:0a:f8:02:20:b6:
c2:82:bc:ea:a5:53:76:6e:b8:0d:3b:48:22:de:25:f9:74:09:
55:d1:ce:ca:75:48:6a:73:5a:29:85:a4:77:03:6f:24:e2:fb:
7e:00:80:cd:7f:d6:51:55:81:86:0d:a2:c7:3b:e2:9a:e8:36:
57:e6:cd:06:48:b0:5c:48:7a:23:11:3c:d4:d8:be:e8:bb:fe:
3b:95:83:c6:95:b0:26:35:34:05:b1:d1:e9:78:21:9b:da:71:
2f:ce:bc:c1:50:3d:40:6b:62:93:7e:2a:96:72:8a:a2:a8:dc:
4e:59:28:fd:88:c3:5a:df:8c:4f:6c:79:7e:42:2e:7f:60:d5:
ee:7f:50:6a:b4:8b:a2:ee:d2:fe:7b:a2:fc:e7:c3:45:38:cf:
0d:5c:e0:48:36:e8:51:8e:30:5a:6a:bb:3f:82:c3:97:7b:cc:
79:68:bf:d5:08:7e:9e:da:43:1b:f9:2a:e1:75:ca:90:21:89:
19:10:93:63:a6:eb:e9:88:e5:41:24:e7:0a:30:48:aa:37:d1:
e4:a8:5e:bc:31:98:bd:41:2f:1d:e6:06:b7:86:31:a3:41:0c:
1e:72:ff:ed:42:0c:9d:67:9a:12:0c:a9:49:2c:fc:91:93:e3:
27:19:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:36 2026 by rpki-client