
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
File: nxMMOdAwdvSok0-jNJXO2TfiMKs.mft (raw, json)
Hash identifier: c2p7X2enKynC2c6chLS7MqsU6WbaRF2dI6UrH0mYPdI=
Subject key identifier: EC:E1:DC:DE:CB:76:20:BD:80:E5:05:D4:B1:0B:A5:69:4F:C7:31:0B
Authority key identifier: 9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB
Certificate issuer: /CN=A91430D6/serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
Manifest number: 8E
Signing time: Sun 05 Apr 2026 06:56:21 +0000
Manifest this update: Sun 05 Apr 2026 06:56:21 +0000
Manifest next update: Sun 12 Apr 2026 06:56:21 +0000
Files and hashes: 1: nxMMOdAwdvSok0-jNJXO2TfiMKs.crl (hash: sjoovAv0yb6su9EyZB8pfaJFcRDu2iz3OIpL4wM/0PU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl
rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91430D6, serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB
Validity
Not Before: Apr 5 06:56:21 2026 GMT
Not After : Apr 12 06:56:21 2026 GMT
Subject: CN=69d20795-5371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:89:70:29:09:43:e3:d5:cb:9f:e9:97:ac:
be:bd:4a:9f:21:74:a5:d4:9f:a7:a7:87:68:1f:32:
08:97:ae:8a:3d:e7:02:53:09:fb:12:5c:be:e5:2c:
b3:89:b7:e6:c6:cf:1c:fe:f5:f1:84:c8:07:99:21:
7f:5b:c2:b6:14:93:33:af:60:17:cb:bc:8a:fc:e9:
cd:51:0d:71:41:99:67:b0:26:cc:51:61:ea:3e:b3:
d2:ee:7e:75:a2:e6:80:65:89:52:95:e6:93:93:80:
f8:fc:c6:a0:2e:56:5a:17:02:27:ea:f4:4f:04:88:
bd:8e:23:0d:fa:7c:24:78:09:0b:d0:a0:29:15:fe:
b6:1b:ee:36:d7:21:1c:00:d3:64:b3:53:97:44:0c:
0e:76:60:04:8c:c3:d3:11:b1:24:cc:73:91:d3:8f:
62:ed:28:28:dd:0f:46:55:a5:a4:b2:10:d8:b9:44:
6a:91:09:86:ce:b7:fc:5c:83:3a:0f:99:e0:c7:fb:
3a:5e:f2:4e:93:69:45:cd:17:74:a2:dc:fe:06:db:
eb:4d:10:20:6b:a6:2f:ad:9e:79:4d:d8:47:78:fd:
d2:5d:0b:db:68:f0:a3:77:8a:13:43:15:65:37:b6:
90:d6:1b:4a:6d:38:ea:64:be:cc:2a:49:e2:06:81:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:DC:DE:CB:76:20:BD:80:E5:05:D4:B1:0B:A5:69:4F:C7:31:0B
X509v3 Authority Key Identifier:
keyid:9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:99:8c:27:de:01:58:18:57:34:bf:e9:08:85:c1:df:29:25:
db:44:b7:8f:f2:f6:e2:cc:7c:df:97:f2:75:46:34:53:4f:d2:
db:4e:d5:cd:ed:6b:6e:db:a8:ed:78:7d:9b:67:d8:4c:bc:05:
42:76:1c:df:60:58:67:31:c3:17:2b:a7:84:2a:2a:87:c9:63:
70:a9:0b:d4:be:82:b0:f7:cf:28:74:ae:4b:8b:a7:09:12:39:
73:62:0a:f2:84:f6:bd:46:e2:b7:5f:7c:81:01:65:9e:59:7f:
c7:35:30:44:d5:be:1b:f1:28:ae:7d:a3:7f:18:8e:a0:ff:d4:
fb:5e:16:96:15:a7:7d:c9:29:d6:b7:04:5b:aa:e2:8e:13:d1:
25:93:db:44:fd:37:57:52:97:d9:fb:51:e4:4c:41:c4:59:e7:
b1:68:5a:93:54:79:20:84:af:e0:85:37:b7:3a:54:0f:cd:fc:
6e:b3:9e:30:db:0d:f4:64:27:97:a3:de:08:8c:20:f0:49:6c:
e3:60:e3:a8:7e:16:be:85:65:a8:98:23:b7:63:8b:73:be:d3:
51:02:23:27:27:ba:a7:72:39:e0:8f:5e:12:e4:25:d1:c1:08:
f3:84:62:01:e1:18:9d:33:fe:5c:37:f1:c8:f3:56:ca:25:a2:
96:b8:ae:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMwRDYxMTAvBgNVBAUTKDlGMTMwQzM5RDAzMDc2RjRBODkzNEZBMzM0OTVDRUQ5
MzdFMjMwQUIwHhcNMjYwNDA1MDY1NjIxWhcNMjYwNDEyMDY1NjIxWjAYMRYwFAYD
VQQDEw02OWQyMDc5NS01MzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyLeJcCkJQ+PVy5/pl6y+vUqfIXSl1J+np4doHzIIl66KPecCUwn7Ely+5Syz
ibfmxs8c/vXxhMgHmSF/W8K2FJMzr2AXy7yK/OnNUQ1xQZlnsCbMUWHqPrPS7n51
ouaAZYlSleaTk4D4/MagLlZaFwIn6vRPBIi9jiMN+nwkeAkL0KApFf62G+421yEc
ANNks1OXRAwOdmAEjMPTEbEkzHOR049i7Sgo3Q9GVaWkshDYuURqkQmGzrf8XIM6
D5ngx/s6XvJOk2lFzRd0otz+BtvrTRAga6YvrZ55TdhHeP3SXQvbaPCjd4oTQxVl
N7aQ1htKbTjqZL7MKkniBoElbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzh3N7L
diC9gOUF1LELpWlPxzELMB8GA1UdIwQYMBaAFJ8TDDnQMHb0qJNPozSVztk34jCr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzBENi8yMEY5RjNCMDVG
RTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9ueE1NT2RBd2R2U29rMC1qTkpYTzJUZmlN
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL254TU1PZEF3ZHZTb2swLWpOSlhPMlRmaU1Lcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzBENi8yMEY5RjNCMDVGRTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9ueE1NT2RBd2R2
U29rMC1qTkpYTzJUZmlNS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB5mMJ94BWBhXNL/pCIXB3ykl20S3j/L24sx835fydUY0U0/S207Vze1rbtuo
7Xh9m2fYTLwFQnYc32BYZzHDFyunhCoqh8ljcKkL1L6CsPfPKHSuS4unCRI5c2IK
8oT2vUbit198gQFlnll/xzUwRNW+G/Eorn2jfxiOoP/U+14WlhWnfckp1rcEW6ri
jhPRJZPbRP03V1KX2ftR5ExBxFnnsWhak1R5IISv4IU3tzpUD838brOeMNsN9GQn
l6PeCIwg8Els42DjqH4WvoVlqJgjt2OLc77TUQIjJye6p3I54I9eEuQl0cEI84Ri
AeEYnTP+XDfxyPNWyiWilriuVg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:24:08 2026 by rpki-client