
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
File: nxMMOdAwdvSok0-jNJXO2TfiMKs.mft (raw, json)
Hash identifier: p8EOP95yEcYdAa74KkutDv29RbaZN8uiL9XJQpe0Z8c=
Subject key identifier: AB:4B:16:99:DE:50:3E:C3:51:B9:10:A7:F9:AA:DE:ED:28:2A:B8:14
Authority key identifier: 9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB
Certificate issuer: /CN=A91430D6/serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
Manifest number: A5
Signing time: Thu 21 May 2026 07:23:53 +0000
Manifest this update: Thu 21 May 2026 07:23:52 +0000
Manifest next update: Thu 28 May 2026 07:23:52 +0000
Files and hashes: 1: nxMMOdAwdvSok0-jNJXO2TfiMKs.crl (hash: l3V3i99iDT61ZtxTk4xeSl0ae8OtPgJUpTv0veg8Q8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl
rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91430D6, serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB
Validity
Not Before: May 21 07:23:52 2026 GMT
Not After : May 28 07:23:52 2026 GMT
Subject: CN=6a0eb309-769d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f4:e8:55:be:66:56:8f:d7:45:d4:90:7a:fd:
8d:b0:7a:ee:1e:67:0c:41:70:bf:ee:7f:e8:b7:c9:
db:ac:c5:b1:de:53:54:e3:d2:2b:36:2f:18:68:ed:
0a:53:5e:1c:01:b0:da:1e:8e:86:a9:3f:7c:62:7a:
aa:2a:bc:3c:b9:9c:5b:49:cd:5c:d6:f0:27:86:b2:
89:10:8c:31:df:c8:66:3e:b8:3e:71:b5:f9:31:98:
da:ed:80:9a:07:9c:03:96:6c:9e:b3:65:5f:0f:45:
f1:50:a0:cf:7a:4a:cb:51:6e:e9:e8:3b:dd:b2:08:
82:42:9c:00:a6:be:37:bc:ed:b5:fe:3d:05:d3:d2:
c3:97:9e:3c:b2:ea:3d:b6:39:75:a4:3b:d2:e6:3e:
0e:86:67:4c:7a:48:a1:5c:3c:19:1e:64:ee:6b:91:
4c:8f:ef:bf:d3:fc:ed:0b:d2:c3:66:ac:c4:db:93:
60:9d:31:ee:d8:6b:74:ee:4d:b2:b1:3f:a9:41:d8:
e9:2e:1b:0f:af:c1:1a:93:05:da:41:bb:a1:53:2c:
e5:a0:a7:36:5f:6e:99:66:05:ca:28:c9:8b:13:0b:
52:ce:58:e6:c9:13:f2:03:96:38:ad:f7:96:47:e3:
52:7c:8c:69:a1:b4:db:36:ac:73:04:92:26:c4:bc:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4B:16:99:DE:50:3E:C3:51:B9:10:A7:F9:AA:DE:ED:28:2A:B8:14
X509v3 Authority Key Identifier:
keyid:9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:c5:ff:e6:dd:17:68:28:12:8f:d7:b9:be:17:bc:7d:40:fb:
14:be:a5:10:0c:2e:45:24:47:77:d9:e8:d2:e4:71:e4:d0:ed:
37:27:03:2e:f1:5e:ad:41:9d:3a:c9:1b:ac:81:e1:ce:cd:0e:
3f:d5:db:26:50:3c:4d:71:6a:7e:ca:83:10:ed:10:93:22:fe:
75:e4:91:a2:0b:65:b5:e7:05:fe:55:08:66:ea:aa:1f:b6:11:
6f:65:d6:68:b2:48:c9:15:f8:6c:eb:20:53:9d:d3:96:2a:d4:
45:97:a8:18:59:67:8f:fc:1c:9c:fa:5e:62:dd:8b:12:f7:74:
89:b8:1e:41:9f:ac:3f:dc:08:b7:1e:4e:ab:d2:cd:65:ff:22:
0f:13:a8:89:24:92:4c:8f:df:c1:73:7b:3b:0a:d9:83:2c:30:
6d:51:94:ba:2b:db:0f:97:e6:98:38:b1:18:a0:b9:9b:15:d2:
a6:8c:c3:21:db:18:1b:de:e9:f1:79:a8:94:69:70:74:d6:ed:
fa:84:da:93:9c:fe:f1:63:6f:1d:2b:a4:3e:5b:db:74:bb:ce:
9a:61:9a:ff:82:c2:66:43:9c:c1:06:b0:82:f8:28:8e:82:80:
db:b2:f2:1c:e4:80:77:dc:92:67:56:64:ce:6f:4d:38:4f:78:
d1:cc:25:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:15 2026 by rpki-client