
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
File: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json)
Hash identifier: KHK4RpxQ7W+jAsAB2r0AH/oFnTxu8xm/wHVMKauehas=
Subject key identifier: 4C:5B:89:19:1F:1C:19:AF:78:B7:DA:1F:4E:D5:6B:04:02:A5:52:C8
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial: 0FC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
Manifest number: 0ED0
Signing time: Mon 02 Nov 2026 17:54:02 +0000
Manifest this update: Mon 02 Nov 2026 17:54:02 +0000
Manifest next update: Mon 09 Nov 2026 17:54:02 +0000
Files and hashes: 1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: DG+lYoTdmc7lm9lyYqdXsYUpnw99tB/csrj3iFEtsc8=)
2: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: IEzFe4BPkAZ0NzJZL6yH2kjj+JWlwA9NjN+OrbuWGN8=)
3: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: /lqE0fcVtZNviMtzF6KcdvDYxyFd2WfKbqPkhxIQA0g=)
4: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: NI9ztI/dUr8wepd6qEzurrTRw6jIjbbQY+3nIC256Cg=)
5: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: FRg/vpc/AMBGrvMjIcOoVz1j/708E2nJzNJ2bFS2Beg=)
6: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: VF5Ihkgss3eEF0eF0RXv99yvFaNnXbi4F1C1EW0C81k=)
7: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: zlI1hG7GiNHiVUCacl+MGSO9NxzvZc+dp6nf+cN3YqQ=)
8: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: rOBLE6A0EIALDzqcM8ydFc2oovMN2wtUd1p0AWxIOoE=)
9: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: 1f2phcqQmmi3QewwHTntymoXxlY1vaGBHZf4d83qpRc=)
10: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: 7ySchihxHfebU2ZhU1CGMeKuJprNHeKF8ZvTEPQm+Ps=)
11: B066E5B6C5C111F0BD9B1831C4F9AE02.roa (hash: nNxHt9F+p6KI/XxX/IHOQ6Ohaw9Mn/6bqQ8JgTffC8o=)
12: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: 4Dur1jIx3Py+FV9GnftEwHBIoGYO+qrpeIHWnQl1eg4=)
13: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: wLoXAFA4bLf19b9jPn3a1aNAYCXtzzCyZRCHGXoGTTs=)
14: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: YFagb40AbqmE67WpsPHQQlwPOv44QLtDjwGBLFO+SMg=)
15: 03774914696211EC8A05D115C4F9AE02.roa (hash: 529ic9qz0jYOTL+Y9hkAcJ9upS4aOt6qG85i+oz5nlY=)
16: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: DvevpJu7vWFY5EjSZxts3Sc7D51eP/pW+05crk3lgB0=)
17: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: dpkimmBVqBA7Hxpk3m2+4JsPBW+BiPPwqR13NATbL1g=)
18: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: CPQelJmSoQmrjckxju62zT4kF0v4K2A3XLdBMFmD/A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 16:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Validity
Not Before: Nov 2 17:54:02 2026 GMT
Not After : Nov 9 17:54:02 2026 GMT
Subject: CN=6ae8ce3a-6a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:ef:41:33:6a:d1:38:bd:dd:3f:f7:22:c2:
dd:a1:8c:44:1a:35:5e:3c:a9:40:f0:9e:8a:ef:39:
6e:dc:57:f6:77:01:cb:64:4a:9c:cd:de:71:a0:07:
3b:6a:e3:9c:0c:3d:91:d3:b4:19:c1:c8:b4:62:35:
6f:90:b4:fe:09:b9:b3:32:e3:42:d8:39:d1:2a:de:
ae:db:f1:df:d2:ee:6b:8b:32:f0:e6:d1:8e:c0:4e:
0b:23:55:e1:73:49:4d:3c:1f:d7:9a:36:47:ce:4b:
e2:fe:f5:eb:f3:87:b1:a4:fb:10:d8:50:0b:d2:fb:
bf:d6:82:89:97:59:98:94:fc:79:b8:cb:96:36:a6:
40:68:5c:49:57:4a:0f:06:23:f8:1d:89:db:27:40:
f4:2d:93:8a:51:d9:3b:b8:83:e8:88:ba:28:87:8e:
3d:45:de:39:91:f5:32:0e:2f:e1:61:f1:b2:d3:ad:
65:46:ca:07:19:f5:a5:44:25:81:a8:f8:59:96:c2:
a8:1d:86:60:09:57:dd:4a:dd:e8:80:c2:92:46:42:
e9:34:12:85:f3:b0:2c:e6:ee:32:ac:40:99:07:66:
a4:f8:4d:2b:62:cd:40:9a:43:66:52:79:28:97:2c:
75:6a:e7:a2:df:05:d5:15:30:c9:e1:e0:2f:f1:5d:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5B:89:19:1F:1C:19:AF:78:B7:DA:1F:4E:D5:6B:04:02:A5:52:C8
X509v3 Authority Key Identifier:
keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fa:e7:9a:6c:76:d7:53:3b:b7:3e:37:2e:87:03:6a:4b:4c:
f7:b0:d4:72:8b:28:3b:d6:46:9b:90:68:88:59:5a:9c:0f:45:
73:27:10:95:3a:cc:23:8a:e2:58:16:ea:23:e1:9d:2a:94:f7:
ae:bc:5a:34:0f:48:8e:15:ac:4d:db:3a:7a:2b:89:70:3a:8f:
d4:5c:1f:60:bc:9d:57:3d:bd:1e:4e:3f:5c:bd:1a:6b:b0:1a:
13:1f:c1:3c:53:d8:17:ad:bf:b7:ca:43:b4:84:12:ff:b4:d9:
e0:84:b4:9b:92:e1:53:d8:5d:cf:12:b6:7c:aa:82:6b:28:c3:
89:1a:22:ef:36:f9:d9:7e:82:8d:62:01:37:8c:a2:c9:99:8d:
57:be:b8:a3:56:d0:e2:a6:b9:17:cf:de:6c:94:18:58:c6:54:
73:91:64:1c:97:d0:8b:c4:07:6c:69:06:c7:58:26:90:ea:1f:
df:68:5f:53:48:5a:af:9f:b6:a7:dc:a8:de:ad:60:97:c7:fa:
db:f5:e2:97:93:d7:c3:f0:f3:00:a0:79:49:83:10:a4:b4:6c:
f2:b5:7b:2f:63:6f:a4:92:31:d5:48:52:12:de:7f:b6:e1:ac:
f2:04:a5:e7:df:3c:31:f7:7a:b8:d1:f5:d0:35:e9:a1:e6:f9:
07:36:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:53:39 2026 by rpki-client