
$ rpki-client -vvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft
File: NaA6oUeNBoHAZxl2yftD9pMTgr4.mft (raw, json)
Hash identifier: VdgGNkwmUfo1mlZ03ZOwt7IelA3d0fK57bgl6Ig7MWQ=
Subject key identifier: FC:3D:71:44:0E:2F:DE:3B:53:B7:42:48:5A:79:F8:B7:BA:C0:05:5C
Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE
Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft
Manifest number: 05
Signing time: Fri 17 Apr 2026 08:53:42 +0000
Manifest this update: Fri 17 Apr 2026 08:53:42 +0000
Manifest next update: Fri 24 Apr 2026 08:53:42 +0000
Files and hashes: 1: NaA6oUeNBoHAZxl2yftD9pMTgr4.crl (hash: F8ywwU6pxsdTJZMUWyy7KJkuVGPFHJWH1+u5Eov6dtk=)
2: 9C495BB2350211F18A0989F29B833773.roa (hash: Lmv32oZY3NRP9K5M+STvV+c8q6SioI1nyA5nw3Qh/DE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl
rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE
Validity
Not Before: Apr 17 08:53:42 2026 GMT
Not After : Apr 24 08:53:42 2026 GMT
Subject: CN=69e1f516-e983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f5:d9:15:f6:a0:9c:d3:a6:38:3b:55:70:a1:
94:60:eb:3f:1e:99:a9:40:66:c4:b8:bd:5d:71:44:
12:85:76:36:b0:5e:3e:a5:48:fd:da:8c:b8:64:9e:
32:f0:28:9d:6e:10:0a:2c:64:d9:0a:5b:33:dc:a5:
70:ec:b8:9f:1c:25:e0:5b:c3:34:5a:46:88:dd:38:
c5:c3:0d:15:58:33:c9:3a:1f:a3:ea:77:55:0a:08:
43:d3:a3:1d:15:4d:f4:9e:6b:80:42:f3:c7:d8:02:
d6:7b:aa:af:01:ae:26:3a:51:66:11:d2:50:fa:ef:
e5:01:02:2d:98:51:a7:32:a5:38:eb:02:35:d2:f4:
1b:6b:e2:eb:15:aa:a3:bd:75:e6:8b:18:a0:eb:d5:
34:58:7b:2e:79:24:b4:a2:60:44:46:09:19:6e:ec:
49:8f:c4:54:29:cc:1c:bf:25:66:7a:24:bf:3e:9a:
4b:11:b9:a1:9b:e5:d7:41:12:9a:a1:6f:28:5d:41:
99:bb:fd:a2:14:15:9b:90:97:05:b4:e9:b0:4e:79:
79:0b:46:ff:27:3b:25:3c:41:80:c2:5f:d6:7e:13:
32:78:6d:b8:11:84:b0:d6:6d:a2:fa:a7:9f:56:0f:
af:7d:e1:a4:ff:23:be:51:98:67:d6:21:2d:12:23:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:71:44:0E:2F:DE:3B:53:B7:42:48:5A:79:F8:B7:BA:C0:05:5C
X509v3 Authority Key Identifier:
keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:17:cb:25:9d:3d:12:6e:ca:03:87:cc:ce:4a:cf:2d:e1:4d:
26:0d:bf:8d:d3:97:f8:16:35:84:c8:8e:7b:b5:61:f7:c0:ba:
de:26:8d:25:cf:a6:aa:7c:12:5f:09:6a:25:74:87:f7:fe:2e:
08:0a:9f:f1:e3:23:ee:e5:e6:08:ef:17:a2:2d:32:70:4f:50:
b7:e4:26:33:b1:a0:a6:12:b3:50:4f:b8:48:83:1f:81:41:09:
21:f9:78:af:21:f4:36:c5:81:59:53:c5:98:78:0e:46:ce:74:
46:e4:5b:de:bc:b5:66:be:dd:40:44:9e:e7:30:27:c4:08:94:
03:4d:97:fc:90:96:48:30:e5:72:a1:a3:09:78:d5:6a:e2:f9:
c4:53:5e:53:84:73:26:a6:72:40:42:ef:f7:3e:b8:39:46:87:
72:bb:87:4c:1b:7c:19:2f:7e:73:f5:d7:cc:20:cb:d0:fc:9c:
8d:5c:4b:ee:fa:5e:f8:6e:83:e1:94:33:93:8d:05:19:ec:a3:
c8:56:0a:72:49:21:95:9a:58:15:32:b7:18:21:3b:46:9f:d5:
7d:a9:ae:18:48:43:ee:a3:e6:34:12:30:0a:ff:d2:d3:36:8c:
a2:f3:2c:ff:47:e8:18:4e:9a:90:c2:d0:23:63:00:0b:3f:52:
03:dd:14:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 20:58:44 2026 by rpki-client