
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
File: nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json)
Hash identifier: kZcojXnYwVjZDhXN/k2BOGZUjQ3h+NMTgkPXwM69o7Y=
Subject key identifier: BF:75:76:3D:5A:E5:6A:E2:7A:18:F9:FA:B7:0F:F6:4E:53:BA:B3:70
Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A
Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
Manifest number: EC
Signing time: Fri 09 Oct 2026 07:11:12 +0000
Manifest this update: Fri 09 Oct 2026 07:11:11 +0000
Manifest next update: Fri 16 Oct 2026 07:11:11 +0000
Files and hashes: 1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: b8Eu3V55gz35O53psWnexS75yTQeRHrY5z+v8nR1yik=)
2: 8C538C5AEFCF11F0889DE39E746F56BC.roa (hash: IYXOhXL6bJ68pYNK/kTrLKmd+mngJz9PldPbItCSzvQ=)
3: 224FBC52EFCF11F0A018F59D746F56BC.roa (hash: mEE2s8TFrbg3u/2M8DQXMANj0UbWZqDl7u6JBf6OnyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl
rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A
Validity
Not Before: Oct 9 07:11:11 2026 GMT
Not After : Oct 16 07:11:11 2026 GMT
Subject: CN=6ac89390-4c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:5f:66:38:22:1b:e1:42:ab:9f:e9:f0:f8:
53:bc:a1:c2:cc:0f:45:95:a3:db:56:00:41:d2:a4:
f4:40:a3:3d:61:a8:0f:71:f0:09:66:8c:60:3d:2c:
b5:2e:4d:4a:6e:1b:39:1f:ab:1a:cc:89:71:38:86:
31:a0:a5:cc:93:96:c2:5f:96:9c:5c:f7:fd:c2:d5:
b4:5c:8e:0a:cf:7d:52:8b:7b:4e:15:e9:a0:a9:7d:
ad:a0:47:c5:0e:d5:9b:3c:31:0e:22:c0:6a:a6:7a:
fe:d4:50:73:b0:cd:ff:f7:7c:d3:1b:31:8b:e3:70:
2b:84:17:f7:11:5c:e9:cb:38:c3:f2:d9:af:33:e4:
17:42:9d:01:cb:e3:ab:15:75:39:0d:88:cf:1d:c9:
b8:92:02:12:7f:f1:2a:e6:5c:2a:76:30:62:52:69:
03:c2:70:a5:8e:e3:64:4e:5c:8b:20:43:f6:08:6d:
e7:44:cb:ad:5d:e4:b1:d9:a9:cf:21:85:57:7a:a2:
cb:15:5e:51:0f:d7:d9:49:b3:5e:d8:0b:33:8d:af:
46:b2:e6:dd:cf:4b:92:2a:48:af:3c:b4:34:da:f1:
26:cc:32:6b:26:6e:69:28:43:87:01:de:bd:31:0d:
39:c5:28:e5:e3:c4:e4:8f:26:92:f7:57:27:3b:5f:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:76:3D:5A:E5:6A:E2:7A:18:F9:FA:B7:0F:F6:4E:53:BA:B3:70
X509v3 Authority Key Identifier:
keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:ab:32:21:c6:59:42:ac:1d:29:57:31:42:3c:72:a2:ce:ae:
37:44:35:c5:13:22:04:7d:85:6e:ff:c2:38:01:f7:1f:cd:72:
86:21:9d:3e:26:7e:4e:cf:9f:ba:23:02:4d:24:ab:54:e3:bd:
c5:84:a3:22:65:da:1f:99:af:39:b9:24:6d:b3:97:d6:38:9a:
7e:6a:cd:83:d2:3c:96:11:b7:b2:29:e3:87:53:f6:5a:99:5d:
28:16:6e:70:cb:84:7e:6f:58:86:aa:3f:85:c0:88:59:03:78:
3a:e6:b6:e5:da:f6:0f:e0:18:d5:ab:6c:53:80:55:e8:5a:11:
66:82:ff:fe:17:e6:fe:8e:4f:91:58:df:8b:36:ce:af:19:87:
74:d5:04:b9:8d:7d:b7:de:f4:eb:ba:61:75:ef:81:3b:2e:1a:
e1:c9:1e:d5:ae:79:ad:2c:d1:3e:27:3a:59:65:fd:0b:43:eb:
4c:ea:e5:8e:0d:60:af:a3:74:d3:15:80:e6:7f:1d:cb:88:57:
e9:58:2d:fa:1c:bd:e7:f4:49:ec:59:bc:b8:f1:84:8f:a3:1d:
7f:44:2d:1f:7d:a7:a5:2e:a3:98:b0:10:52:b9:c5:5a:0f:bd:
7c:b3:e8:af:08:17:c7:9c:fd:a7:15:bf:12:36:c2:b8:bf:da:
2b:ff:62:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI1QzMxMTAvBgNVBAUTKDlFQkRBMTIzRDlFRTgzMDk0MzA1QTExODBDMkEwODA1
N0ZFNTQwNkEwHhcNMjYxMDA5MDcxMTExWhcNMjYxMDE2MDcxMTExWjAYMRYwFAYD
VQQDEw02YWM4OTM5MC00YzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovZfZjgiG+FCq5/p8PhTvKHCzA9FlaPbVgBB0qT0QKM9YagPcfAJZoxgPSy1
Lk1Kbhs5H6sazIlxOIYxoKXMk5bCX5acXPf9wtW0XI4Kz31Si3tOFemgqX2toEfF
DtWbPDEOIsBqpnr+1FBzsM3/93zTGzGL43ArhBf3EVzpyzjD8tmvM+QXQp0By+Or
FXU5DYjPHcm4kgISf/Eq5lwqdjBiUmkDwnCljuNkTlyLIEP2CG3nRMutXeSx2anP
IYVXeqLLFV5RD9fZSbNe2Aszja9Gsubdz0uSKkivPLQ02vEmzDJrJm5pKEOHAd69
MQ05xSjl48TkjyaS91cnO1+3vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL91dj1a
5Wriehj5+rcP9k5TurNwMB8GA1UdIwQYMBaAFJ69oSPZ7oMJQwWhGAwqCAV/5UBq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yMzI2QzYzRTY2
MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3bERCYUVZRENvSUJYX2xR
R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFHby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3
bERCYUVZRENvSUJYX2xRR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkqsyIcZZQqwdKVcxQjxyos6uN0Q1xRMiBH2Fbv/COAH3H81yhiGdPiZ+Ts+f
uiMCTSSrVOO9xYSjImXaH5mvObkkbbOX1jiafmrNg9I8lhG3sinjh1P2WpldKBZu
cMuEfm9Yhqo/hcCIWQN4Oua25dr2D+AY1atsU4BV6FoRZoL//hfm/o5PkVjfizbO
rxmHdNUEuY19t97067phde+BOy4a4cke1a55rSzRPic6WWX9C0PrTOrljg1gr6N0
0xWA5n8dy4hX6Vgt+hy95/RJ7Fm8uPGEj6Mdf0QtH32npS6jmLAQUrnFWg+9fLPo
rwgXx5z9pxW/EjbCuL/aK/9iRg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:02:46 2026 by rpki-client