
$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier: uwW7ZW/oJiVq/w8WduEFtGtD1EA4pG1YNfiVV8oHcTo=
Subject key identifier: 1F:0F:4D:8A:16:9B:93:3B:BE:88:BE:A4:A7:6D:53:DB:48:CC:51:09
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial: 063F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number: 0638
Signing time: Wed 20 May 2026 22:47:25 +0000
Manifest this update: Wed 20 May 2026 22:47:25 +0000
Manifest next update: Wed 27 May 2026 22:47:25 +0000
Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: W5DYvq637URpgOBPT/UM+VD+/0xq+ZVl0bZeKLepkoo=)
2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: PwomU+D7WSzTyKJbENDcuXSXxZUfrB5PjKw8Vn35Qbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Validity
Not Before: May 20 22:47:25 2026 GMT
Not After : May 27 22:47:25 2026 GMT
Subject: CN=6a0e39fd-76cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:7a:59:ca:ef:64:4e:52:1e:c2:56:c2:96:
96:b5:9e:85:39:13:eb:ca:fe:c4:58:f9:5e:50:97:
45:57:a1:1c:9d:65:17:45:e7:5f:49:42:81:6f:0b:
00:a8:f1:2c:10:39:bf:88:65:27:5f:cf:30:da:9b:
6c:f7:a0:3c:c1:ec:0c:23:51:fb:3c:5c:f1:06:30:
61:55:e8:f3:57:0a:57:17:55:b4:dd:bb:3a:af:9f:
28:27:b4:0a:5c:71:68:7b:2c:17:40:8a:fa:2f:08:
31:f5:04:6b:8a:c1:d5:9b:f5:95:07:52:85:33:90:
e1:52:d5:9d:2b:87:66:03:5b:16:c9:4e:c7:fb:95:
9b:33:86:a9:2a:f9:1e:6b:19:f3:a3:78:bf:f4:2a:
de:d2:71:1f:06:a0:52:4f:18:ea:b0:d7:55:41:2a:
a8:81:fd:5a:c1:59:c9:67:e4:af:95:6f:f6:63:d3:
01:73:78:1d:58:2c:16:dd:31:21:49:7a:6d:80:a4:
41:40:fd:dc:27:e4:22:a9:93:7e:b9:42:0a:75:8b:
ab:27:c6:81:ce:19:d5:5f:78:f9:6e:5e:7a:a6:58:
55:92:5d:e4:8b:45:db:01:48:ab:e1:c9:a3:c7:5d:
e6:d2:27:0b:9a:15:4b:49:c4:8a:36:00:54:3d:52:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0F:4D:8A:16:9B:93:3B:BE:88:BE:A4:A7:6D:53:DB:48:CC:51:09
X509v3 Authority Key Identifier:
keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:e1:5a:d8:4a:f4:6e:85:14:2e:44:ec:b8:4d:f6:a9:72:0d:
7b:e8:0c:cb:47:ef:55:95:e3:36:44:53:74:04:6f:3b:fc:0d:
c8:14:13:ef:2f:0a:67:7a:f8:04:8b:66:45:af:74:b3:13:46:
2e:53:8d:9d:e1:5e:99:11:71:8f:4b:6d:9c:90:08:7e:dd:2d:
dc:0b:fd:82:12:d7:a3:8b:e1:42:b9:0a:0c:e4:2e:dd:90:d7:
fc:43:ac:1b:56:3a:d2:6a:94:ba:4e:0b:f0:f4:84:1e:88:f0:
50:d9:10:15:d6:2c:15:02:35:17:00:49:76:5e:a5:94:0c:01:
0f:c7:93:6a:f8:84:c0:a3:62:28:d0:7b:b7:ce:ed:09:60:ca:
19:92:db:4d:bf:f2:fe:3e:66:a2:87:e6:09:b6:f3:ee:8b:1c:
d0:c7:9b:b1:56:47:2a:fc:3d:46:6d:a5:6c:5d:89:36:86:e7:
4d:1a:b1:6b:77:8d:dc:62:4a:60:4d:a2:53:d6:ad:c1:80:7a:
d0:70:dd:1c:67:8d:06:86:c1:5f:cc:c3:4c:20:7b:5e:d7:7a:
32:9f:9c:23:eb:57:d0:49:6d:c1:26:0a:51:1e:7a:62:fa:b4:
92:c6:1d:d7:85:0b:ab:75:ab:65:36:48:27:96:27:6a:db:01:
d3:9e:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:42 2026 by rpki-client