
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
File: Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft (raw, json)
Hash identifier: WoICtl1fInIJk2mwlANnrgfzr48cqp/jj5GiJGGEp3E=
Subject key identifier: 88:24:85:A1:E1:0C:1C:72:C9:24:77:76:11:74:DA:EB:21:8C:29:51
Authority key identifier: 36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
Certificate issuer: /CN=A9110B36/serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
Manifest number: 5B
Signing time: Mon 05 Oct 2026 08:36:23 +0000
Manifest this update: Mon 05 Oct 2026 08:36:23 +0000
Manifest next update: Mon 12 Oct 2026 08:36:23 +0000
Files and hashes: 1: Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl (hash: ISFhU6ZN8pcquSI+RA0JnyPjURKF1D+j0oC606TdNGE=)
2: 49C3A0F43AAD11F18ABD7390C4833773.roa (hash: M3Bb6K66672mLJWoFirlzgaQZknuy9ibLFZWuZIc970=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110B36, serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Validity
Not Before: Oct 5 08:36:23 2026 GMT
Not After : Oct 12 08:36:23 2026 GMT
Subject: CN=6ac36187-490a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:a2:72:2d:71:6f:69:45:1a:bf:c0:b5:93:
c5:a9:cb:47:84:22:90:2c:60:b2:9b:96:fe:fd:42:
f8:17:95:3b:c3:0b:20:b5:78:d6:e3:a1:ed:55:f9:
3a:1a:8e:30:39:b4:6a:86:f8:54:56:7e:3e:44:19:
45:d4:db:9c:27:f6:d4:57:4d:4d:19:3b:8d:8f:8c:
93:88:73:90:48:5f:c2:84:fd:5d:6a:b8:7f:02:51:
54:b1:23:af:b3:a7:8c:58:10:1c:e6:3a:25:66:a2:
98:75:3b:23:8b:2b:c8:2e:0f:59:3e:df:d3:98:42:
6b:20:dd:6b:46:08:09:dc:56:9d:7a:ed:f7:f0:ed:
49:4c:2e:35:16:17:e4:10:f7:0f:81:f6:b5:b9:60:
a1:00:a8:97:13:c8:31:99:85:a0:6f:e6:df:85:38:
80:5e:bf:79:72:d7:10:ac:da:89:ea:8a:f5:4c:2b:
cf:71:0d:91:cc:9a:e2:cd:8d:11:f5:06:1a:d0:58:
bd:d4:e4:09:86:19:2e:ef:c5:26:ba:81:98:b4:a7:
93:55:07:31:ef:12:4a:30:52:41:91:63:5a:6e:90:
69:55:23:54:4f:96:df:c8:8b:c1:a3:c1:a1:59:67:
23:df:eb:f4:86:a5:df:d2:3c:e2:14:ed:35:23:94:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:85:A1:E1:0C:1C:72:C9:24:77:76:11:74:DA:EB:21:8C:29:51
X509v3 Authority Key Identifier:
keyid:36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:b5:51:b9:55:c2:b8:b0:06:b6:65:8b:10:65:d2:e8:03:16:
b8:6e:84:60:c3:80:50:2c:8f:f7:c5:45:10:45:26:d4:3f:e9:
64:e5:25:55:c7:a8:c7:d9:c5:fc:81:dc:a2:77:50:13:a2:d6:
4d:c4:88:49:f6:7a:82:15:1e:cd:5d:ec:e8:4c:b3:3d:26:b3:
fc:bc:9d:aa:58:00:56:2a:d5:e0:16:14:ac:2c:68:25:ba:3f:
f7:b7:4d:87:e5:ce:67:8b:d2:dc:48:d8:2f:a9:a8:93:b9:ec:
fe:7a:aa:5c:b8:8b:d6:8d:19:32:18:1d:89:35:b3:d7:40:8f:
30:3b:8e:9e:54:c4:01:b4:6a:41:86:7a:f5:c4:da:1c:ee:5e:
0a:da:26:be:f6:a8:9a:5e:a1:cc:b9:d7:c3:92:e2:c3:f8:f3:
cf:2d:2b:ba:de:94:8f:84:0e:72:16:23:77:4e:49:0a:c4:1d:
23:d7:97:47:07:61:82:97:f9:ee:49:27:1c:46:fc:4c:86:1a:
76:c5:c6:c3:a3:a6:48:49:78:f6:68:2a:ea:9e:31:21:37:e3:
69:e8:63:96:fc:26:22:66:b1:dd:fa:b9:7b:66:83:fe:dd:46:
56:d0:7a:93:cf:eb:1e:d0:ba:fc:e0:40:34:b7:08:07:5c:39:
17:e8:f6:c3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MEIzNjExMC8GA1UEBRMoMzZGRDE2MzRDOTRGNTdCNDc1M0Y5NzNENUU4NDVEMjhD
QUJDRkQzRDAeFw0yNjEwMDUwODM2MjNaFw0yNjEwMTIwODM2MjNaMBgxFjAUBgNV
BAMTDTZhYzM2MTg3LTQ5MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/T6JyLXFvaUUav8C1k8Wpy0eEIpAsYLKblv79QvgXlTvDCyC1eNbjoe1V+Toa
jjA5tGqG+FRWfj5EGUXU25wn9tRXTU0ZO42PjJOIc5BIX8KE/V1quH8CUVSxI6+z
p4xYEBzmOiVmoph1OyOLK8guD1k+39OYQmsg3WtGCAncVp167ffw7UlMLjUWF+QQ
9w+B9rW5YKEAqJcTyDGZhaBv5t+FOIBev3ly1xCs2onqivVMK89xDZHMmuLNjRH1
BhrQWL3U5AmGGS7vxSa6gZi0p5NVBzHvEkowUkGRY1pukGlVI1RPlt/Ii8GjwaFZ
ZyPf6/SGpd/SPOIU7TUjlOIlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiCSFoeEM
HHLJJHd2EXTa6yGMKVEwHwYDVR0jBBgwFoAUNv0WNMlPV7R1P5c9XoRdKMq8/T0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQjM2LzAxOUYxOThBM0FB
QzExRjE5NDA0MjI1NEMzODMzNzczL052MFdOTWxQVjdSMVA1YzlYb1JkS01xOF9U
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTnYwV05NbFBWN1IxUDVjOVhvUmRLTXE4X1QwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw
QjM2LzAxOUYxOThBM0FBQzExRjE5NDA0MjI1NEMzODMzNzczL052MFdOTWxQVjdS
MVA1YzlYb1JkS01xOF9UMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAxtVG5VcK4sAa2ZYsQZdLoAxa4boRgw4BQLI/3xUUQRSbUP+lk5SVVx6jH2cX8
gdyid1ATotZNxIhJ9nqCFR7NXezoTLM9JrP8vJ2qWABWKtXgFhSsLGgluj/3t02H
5c5ni9LcSNgvqaiTuez+eqpcuIvWjRkyGB2JNbPXQI8wO46eVMQBtGpBhnr1xNoc
7l4K2ia+9qiaXqHMudfDkuLD+PPPLSu63pSPhA5yFiN3TkkKxB0j15dHB2GCl/nu
SSccRvxMhhp2xcbDo6ZISXj2aCrqnjEhN+Np6GOW/CYiZrHd+rl7ZoP+3UZW0HqT
z+se0Lr84EA0twgHXDkX6PbD
-----END CERTIFICATE-----
Generated at Tue Oct 6 04:03:27 2026 by rpki-client