
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
File: N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json)
Hash identifier: RY2S5+yKnwxkph2kZXBldMx9tuQF+LKx7UqT/cfQqS4=
Subject key identifier: 8C:CB:A8:6B:8C:C1:84:AB:09:53:F6:C6:FD:5C:7F:01:5E:7F:B5:AE
Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
Certificate issuer: /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
Manifest number: 0161
Signing time: Sun 05 Apr 2026 04:23:24 +0000
Manifest this update: Sun 05 Apr 2026 04:23:23 +0000
Manifest next update: Sun 12 Apr 2026 04:23:23 +0000
Files and hashes: 1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: +ld15TFUopiNhmqNfYbuCDP56RL+uDMFUBAMpaXrYNs=)
2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: WF6w/HKO6UZ72c8ORFF3ZA3mUk6+CxEAfEJ2u/IKs9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Validity
Not Before: Apr 5 04:23:23 2026 GMT
Not After : Apr 12 04:23:23 2026 GMT
Subject: CN=69d1e3bb-1b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:6e:46:8f:60:6c:dd:a1:4b:7a:77:bd:10:
e2:37:78:99:db:bb:38:6b:85:c5:80:14:9b:5e:66:
e3:5d:83:fa:38:b9:25:e5:ce:8c:08:48:f0:a0:13:
27:b6:86:80:79:eb:15:c0:b6:58:51:31:fe:57:a8:
f9:3d:1c:c5:02:b1:ab:fa:07:7e:81:db:aa:ea:c3:
27:3b:71:36:a4:71:1c:a5:9a:9d:ad:90:ee:1b:19:
9f:c6:13:45:0e:67:6b:7b:28:58:52:24:d3:cd:f6:
22:1d:4c:f8:40:b1:b8:fb:56:b3:aa:91:3d:7e:1a:
4e:1b:15:cc:a2:c4:7e:6c:59:ff:77:39:bb:f1:48:
c0:80:ec:94:e3:5f:9f:e7:5c:fd:74:5c:f4:2b:e7:
c0:af:1f:4a:55:96:e9:ac:fb:63:c6:f3:89:76:9b:
96:41:0b:e9:a2:86:d8:a3:f9:4f:0f:a3:67:6b:d3:
1c:79:ec:83:d6:51:15:97:4b:b7:f2:33:5a:91:1f:
6d:e6:3e:23:41:3c:2a:39:1d:c0:63:ae:3e:68:d6:
e9:37:d2:8d:e6:8f:7f:79:55:ff:98:cb:83:ac:2a:
0b:b0:5a:37:1a:88:ee:09:0c:3c:d5:7a:a7:6f:99:
52:f8:8f:2a:55:ed:02:e5:b0:82:30:7b:86:8b:b5:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:A8:6B:8C:C1:84:AB:09:53:F6:C6:FD:5C:7F:01:5E:7F:B5:AE
X509v3 Authority Key Identifier:
keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:12:12:59:79:74:7c:8c:85:48:7b:ba:f8:eb:80:8f:8a:ad:
e5:a8:f2:30:40:65:e6:ef:2d:31:c3:32:89:31:7a:74:fe:6c:
ce:09:c6:6b:7f:d0:6b:7a:f6:2d:b2:4e:84:25:6e:a3:ae:20:
4f:46:00:09:b6:d4:e0:55:37:e2:4b:67:27:0d:a2:6e:7a:c4:
65:fd:1b:7a:e8:b1:d5:dd:76:3f:80:87:7e:30:fb:5a:47:a0:
39:b4:2f:a4:ad:dc:c1:02:f8:a1:7f:cf:45:d2:ac:d3:92:a2:
90:53:bf:ac:bf:be:35:11:a2:12:9d:96:01:40:0d:38:4e:5e:
8a:d7:b4:d1:95:8e:95:68:b9:af:8c:a2:7a:0d:07:ec:81:ab:
e0:ed:0f:ad:29:dc:05:ad:b4:30:c1:6d:d0:4a:2c:ba:2e:03:
89:7f:ec:8e:af:a3:51:99:60:53:7f:02:09:4e:92:09:1d:3e:
b2:7a:a7:ed:f1:f5:c1:cd:00:1b:7e:25:d6:73:01:2c:16:cf:
04:12:1b:0e:c4:0e:9c:a5:04:75:6a:2d:51:c0:d7:73:1c:42:
dc:9f:aa:6a:44:82:0f:52:15:47:56:36:22:e9:68:20:eb:6d:
7d:56:b8:92:04:41:40:8d:f2:0a:ba:9c:34:cd:80:d6:60:7a:
2a:87:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:28 2026 by rpki-client