
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
File: nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft (raw, json)
Hash identifier: mEAau3uKZLd4EPjOE4HYqSiKrA2RWnA4k3n6zFr07zQ=
Subject key identifier: A5:C0:C3:05:ED:1A:EF:7C:47:0D:08:53:08:94:EE:68:B5:C1:B6:D2
Authority key identifier: 9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5
Certificate issuer: /CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
Certificate serial: 08D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
Manifest number: 08CA
Signing time: Fri 04 Sep 2026 20:19:32 +0000
Manifest this update: Fri 04 Sep 2026 20:19:32 +0000
Manifest next update: Fri 11 Sep 2026 20:19:32 +0000
Files and hashes: 1: nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl (hash: nMqO1s8Mg8mNdYZ57rUbYxVayIG4xO6w/9mIFcZXXrA=)
2: 149009E6EE8111EAABC5C05CC4F9AE02.roa (hash: LUaN4gZzeCu+6hLjhK4iqrKCCaOku7QO2IiWVTIsojE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl
rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE8B4, serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
Validity
Not Before: Sep 4 20:19:32 2026 GMT
Not After : Sep 11 20:19:32 2026 GMT
Subject: CN=6a9b27d4-c1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:e0:56:a3:d7:41:f2:c8:ad:8c:f3:29:27:
03:a6:af:66:fd:00:03:40:0b:11:31:9f:df:5c:71:
30:85:95:16:3b:95:c2:dc:9d:29:07:ed:00:82:06:
6a:0f:d9:3c:42:94:0c:ff:94:bb:25:34:f1:ca:4c:
02:55:d6:b3:96:98:ff:c0:84:57:e7:13:18:41:07:
4d:b0:81:d3:44:29:f1:85:21:4a:3c:62:71:4a:23:
77:58:13:b8:cf:54:48:55:87:ed:b3:47:cf:4e:ee:
58:4b:fb:91:d0:29:79:51:8b:f0:d8:d7:02:db:12:
4c:7a:ce:8f:77:2e:b9:8b:d4:a8:83:f9:cc:44:ac:
29:d6:8f:cc:58:ba:c9:07:39:e6:3a:f9:34:4b:a8:
06:5a:74:9f:1f:61:09:94:fc:48:c9:b3:dd:58:e8:
15:32:eb:ff:c6:ff:4a:cf:52:9d:40:45:bb:56:c9:
5d:71:e8:0e:c8:c5:13:ee:06:98:4e:a6:92:40:41:
45:00:1c:1c:77:0e:d9:3c:1e:f8:87:19:5d:b0:11:
7c:c6:e0:ee:c0:04:7f:79:58:4e:9f:f3:dd:fe:f8:
21:1d:87:61:c5:8a:6e:c3:5c:77:f3:44:db:02:6c:
33:32:a7:70:9b:2e:55:df:ee:b8:e3:47:e2:4d:a6:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C0:C3:05:ED:1A:EF:7C:47:0D:08:53:08:94:EE:68:B5:C1:B6:D2
X509v3 Authority Key Identifier:
keyid:9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:c5:f4:8b:a4:1c:4b:60:ee:ba:ea:60:4d:f5:13:cf:d3:72:
73:a0:14:2e:70:0c:9c:07:65:c6:6c:3c:d6:8e:d8:d3:ba:04:
07:c0:ec:0f:4e:eb:ba:d3:0a:54:ee:7a:a0:cf:2c:ee:75:29:
ab:12:d8:a7:dc:3b:fc:bb:8c:7b:f3:fe:65:f7:3a:bd:1e:76:
4e:c8:ec:df:a9:2d:3c:29:fa:40:a2:16:e6:66:92:06:0f:72:
c3:11:b2:80:d9:c0:06:c2:bb:f3:5d:1c:a2:b7:62:ae:e0:cb:
f0:d1:b2:c8:29:1e:fb:59:be:7f:1d:99:33:55:ba:8c:36:29:
13:5a:40:ab:e9:63:15:c4:b1:ed:bd:f0:0c:7d:94:11:0a:08:
7e:17:85:16:dd:ac:d4:10:69:9e:82:cc:ac:b2:a3:62:4a:56:
0f:21:b8:fe:20:6b:3a:65:ed:8a:af:f0:f4:e9:b5:a8:c1:42:
88:62:d4:53:e9:5d:90:62:09:27:f3:16:02:9c:92:95:d3:b7:
c9:d1:12:0e:b7:73:74:42:b7:3b:cb:a9:dd:9e:ca:21:55:52:
10:2d:8a:34:31:6b:fb:18:32:30:da:fc:52:e1:a8:23:10:4b:
31:08:d8:cc:6e:54:31:af:18:67:05:6d:cc:24:8f:cc:3d:d9:
fb:d0:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:48:31 2026 by rpki-client