
$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json)
Hash identifier: AFG/rLuRrjd0gFlfX3FBe6bU6GNlyrD23v0k1nx8ovA=
Subject key identifier: 25:93:D6:D1:71:7C:D9:85:62:67:32:93:36:B6:E3:EC:FC:64:10:AF
Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
Manifest number: 0150
Signing time: Sun 05 Apr 2026 04:30:36 +0000
Manifest this update: Sun 05 Apr 2026 04:30:36 +0000
Manifest next update: Sun 12 Apr 2026 04:30:36 +0000
Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: N4B86ina4Kx1DcbZn27smeBSmlNTwX9IH1HS6owstqQ=)
2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: FBy/Fi1xvUfnfAxAR0ZUPXTTqpzKg6d+uNZAfN6uq6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl
rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
Validity
Not Before: Apr 5 04:30:36 2026 GMT
Not After : Apr 12 04:30:36 2026 GMT
Subject: CN=69d1e56c-de56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:78:55:d7:f9:9c:60:1e:82:44:0c:b5:f9:
9a:6e:34:88:04:cf:ff:93:3b:cb:cd:3b:90:90:e0:
e0:e1:e4:c1:e3:cc:62:1e:e1:a9:73:d8:cb:51:dc:
00:db:aa:d5:47:5d:44:a1:10:b3:9c:1d:0a:e5:1d:
d5:0c:02:50:0d:d7:4b:20:69:38:d9:16:66:f4:28:
d6:b7:8b:53:b8:36:8b:91:22:cd:f0:f5:29:84:27:
c8:64:94:2d:c0:2b:75:6d:1c:79:11:ab:f5:3f:d7:
0a:39:86:30:b3:ce:5b:05:28:54:56:e1:56:af:fc:
3b:6c:4c:20:2c:01:e4:dd:1e:7c:c7:71:63:bd:53:
e5:34:9a:82:1d:34:8f:e1:ea:f3:48:04:b3:27:2d:
8f:f6:98:fa:3f:a0:8f:0b:ed:0b:b2:88:eb:1c:9c:
f2:a4:d2:4f:d4:81:2d:c1:51:79:08:49:60:2f:ce:
00:c6:6d:2d:ad:56:17:1a:49:76:18:f0:de:ec:84:
3f:a2:34:4b:d5:36:1e:e6:58:7f:39:5f:75:cd:29:
fd:d2:a1:2a:21:ed:0d:7c:14:03:fd:09:81:9a:2c:
24:4a:c3:7c:23:58:74:1a:a1:6e:b9:6f:cc:07:8c:
05:c1:a9:10:1e:b4:98:49:6e:e3:7b:43:c7:d5:b9:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:93:D6:D1:71:7C:D9:85:62:67:32:93:36:B6:E3:EC:FC:64:10:AF
X509v3 Authority Key Identifier:
keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:83:5e:50:ae:e3:2c:c1:ec:45:27:db:59:79:36:77:a8:83:
43:a2:d4:16:46:d5:59:63:ca:08:60:ce:ef:0a:a8:b1:c4:f7:
5e:87:1b:ed:28:df:64:55:03:89:ad:88:66:1c:97:fe:d1:47:
29:e3:eb:d1:f1:85:ef:f2:9e:07:30:88:c7:e3:d6:77:00:5d:
57:5c:ad:aa:d1:26:4d:5c:0a:b9:34:f9:fd:64:d9:54:df:b9:
14:d5:6c:a0:8c:b9:1d:1b:7a:b9:5b:53:70:27:43:f4:96:31:
05:da:a8:ac:08:7b:2b:39:94:96:8d:01:37:3b:94:f9:e8:71:
1c:23:ac:e5:59:5f:6e:89:9f:99:35:25:9e:45:fe:67:4b:2d:
33:3b:89:ce:bc:41:f1:5f:1a:9d:24:1b:7b:c3:ef:06:c9:23:
fd:84:d9:ad:d2:f2:a1:2b:6c:df:68:fa:b8:e6:c4:6b:a1:00:
18:59:27:a2:ec:a7:34:2b:59:20:70:2f:5d:41:bf:93:49:06:
0c:39:c5:5c:40:ec:66:e7:d2:8a:5e:74:a5:8d:72:1c:3f:e6:
fa:bc:56:a6:18:75:34:e6:6f:ef:4e:c4:74:97:b8:58:65:77:
17:da:81:bd:45:67:8d:61:13:89:95:15:c9:60:0f:03:66:e6:
2b:79:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:43 2026 by rpki-client