
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json)
Hash identifier: Bdf+ogpiem4I9YrSatp0Gwf6gygLaVuE6tv7p/OjAx0=
Subject key identifier: A3:AE:8D:5D:09:46:7E:4A:E2:DF:62:F0:6B:65:48:4D:E5:D4:2C:71
Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Certificate serial: 0E15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
Manifest number: 0DF9
Signing time: Mon 20 Jul 2026 18:03:47 +0000
Manifest this update: Mon 20 Jul 2026 18:03:46 +0000
Manifest next update: Mon 27 Jul 2026 18:03:46 +0000
Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: Ktv9LgCtDYUFBfiqY2bJEBBQBFsJaQeDMSLcw2xv3EQ=)
2: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: z7n2Ro4Gkp0kvswymZ3NmSJNOHu0kHCX/BYv3spailI=)
3: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: /XXsn5P+CzGOi6w4JWRUAkj1a3bzJJfkjs3Rtf98gFg=)
4: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: CG6vYgZ1e3/8dZN64pHrnStSPG3URxAwT0J40lVEYis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 18:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3605 (0xe15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Validity
Not Before: Jul 20 18:03:46 2026 GMT
Not After : Jul 27 18:03:46 2026 GMT
Subject: CN=6a5e6302-055f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:ff:d3:3d:b6:6c:db:45:c9:2f:19:f6:78:
32:17:83:da:3e:ba:f8:6b:62:3b:e2:fa:75:bd:97:
27:fb:10:40:e4:a9:ad:66:76:34:e2:d0:08:ef:cd:
da:4b:20:e3:c2:a2:05:7b:86:1e:2e:e5:63:a7:1e:
c0:bb:86:95:88:83:3a:6b:7f:60:fa:90:77:8c:87:
4d:ee:23:85:fc:7d:bf:89:ac:01:3a:6e:2f:4e:f1:
58:53:69:ec:af:ea:dd:aa:df:77:db:d4:0e:f4:bf:
64:3f:b8:19:5f:0b:22:b4:4b:e0:03:31:31:75:1f:
3b:be:9c:97:93:e5:7f:c6:02:7d:f8:5d:4c:16:27:
52:67:54:b4:73:a5:01:a9:1a:3f:93:38:6c:c7:2a:
9c:40:95:93:7a:9c:41:45:de:b0:33:a7:dd:19:62:
d3:a3:e7:98:c5:38:bc:70:f9:79:b1:7d:4d:92:62:
b9:10:76:9c:65:7f:6c:c6:90:ca:4b:81:40:c6:60:
8c:d2:6d:4b:17:b2:ec:71:4b:0d:e2:f5:49:a5:a5:
88:94:aa:0d:1d:ff:fd:ae:ba:62:3d:60:9a:5d:ec:
4a:a5:4c:f5:3a:46:3b:e8:18:08:c7:cc:5b:fa:78:
28:2d:db:97:58:ba:4f:fe:d2:c7:d4:6b:ca:da:0e:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AE:8D:5D:09:46:7E:4A:E2:DF:62:F0:6B:65:48:4D:E5:D4:2C:71
X509v3 Authority Key Identifier:
keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:be:6e:c0:0a:c1:37:db:74:5f:37:28:18:60:b5:a9:46:c5:
5f:f6:40:6f:89:26:90:22:30:76:44:ea:70:71:f7:23:14:22:
db:21:0c:6a:50:07:1a:b9:dd:da:47:67:1d:71:4e:58:cf:ea:
43:14:8e:ce:03:57:76:b5:44:7d:70:ae:e3:ba:26:78:fd:87:
34:28:e0:74:39:56:f2:49:df:cb:5b:0a:84:7d:bf:c9:94:73:
2c:48:ae:f3:d0:33:c0:b8:0f:b3:fa:87:0c:3e:95:c1:04:88:
fe:97:73:1e:c2:9d:1f:27:1f:be:d0:ec:86:78:7a:2f:fa:be:
f1:80:ca:ff:0c:a4:67:5c:ee:ed:dc:1e:a3:ba:f1:5b:66:3c:
16:da:6d:65:4f:05:24:47:d3:cd:f3:b9:5b:d5:b9:f4:6a:ed:
1b:84:b2:a6:18:ad:35:73:64:65:57:86:5c:56:6e:4b:29:40:
6c:a2:72:c3:70:15:53:20:54:42:45:f8:d8:e3:56:fa:6a:d0:
94:98:31:2a:a7:08:67:7f:fa:b4:78:db:d4:b7:94:00:b4:ea:
d6:00:38:35:47:27:15:59:51:34:0d:19:dc:b3:d2:84:f7:0e:
e6:ef:7e:e8:fd:fb:c2:12:15:7b:b8:e9:3b:25:9a:f7:41:16:
c7:54:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:23:47 2026 by rpki-client