
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
File: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json)
Hash identifier: n7Ng+lbm+MRP7JggnsLXEgBLKEhxnXssmxBixadWj2E=
Subject key identifier: ED:FB:3D:A7:23:B6:12:A6:3D:73:C8:FC:57:48:9B:21:1F:15:0E:52
Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
Certificate issuer: /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
Manifest number: 37
Signing time: Fri 17 Apr 2026 08:17:15 +0000
Manifest this update: Fri 17 Apr 2026 08:17:14 +0000
Manifest next update: Fri 24 Apr 2026 08:17:14 +0000
Files and hashes: 1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: 29KQ0bUVAHVZlVIUAjTR4Dkb0EHIwbAJBWHkABpyAsA=)
2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9
Validity
Not Before: Apr 17 08:17:14 2026 GMT
Not After : Apr 24 08:17:14 2026 GMT
Subject: CN=69e1ec8b-1d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:52:16:2b:27:4a:5d:af:9b:14:db:9f:2f:
ff:c7:80:1f:94:c9:6b:7b:bc:f5:e1:62:0b:4c:71:
12:7f:d9:b3:f9:c8:90:b7:02:ab:aa:5b:d2:a2:de:
b0:82:d0:da:27:d9:b2:31:d8:9a:99:9e:3b:d7:c4:
d1:41:50:b1:f6:10:50:f6:67:eb:06:26:25:d9:b7:
49:5b:89:f2:9b:0d:eb:56:02:38:39:65:b4:44:c7:
14:52:d5:8a:95:85:37:60:0d:34:10:2c:a9:39:a4:
c5:67:80:14:f4:34:f7:61:12:4e:13:3b:18:da:b9:
77:41:4a:1f:eb:15:0c:d7:c0:18:f6:a0:6d:15:e5:
38:38:fa:d2:44:3a:62:78:c4:b5:5a:ad:21:43:1a:
ed:34:fb:07:d6:93:95:a0:14:86:72:36:32:20:90:
20:79:54:70:f2:c0:fa:c2:0c:be:b4:de:6e:4b:c6:
b5:38:02:17:d2:26:70:20:6d:06:6d:19:bf:eb:63:
84:6e:38:e9:d8:6a:c9:0f:57:dc:e6:29:14:cc:d8:
01:5a:0a:fb:da:a3:57:c8:b5:36:0a:59:30:0d:a3:
0b:90:6b:72:1e:4f:72:b2:8c:c3:97:e8:53:ef:9d:
f2:dd:5b:1e:5d:0f:29:49:46:fb:eb:20:48:aa:23:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FB:3D:A7:23:B6:12:A6:3D:73:C8:FC:57:48:9B:21:1F:15:0E:52
X509v3 Authority Key Identifier:
keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:f8:88:b6:c0:7a:8c:80:85:b0:01:a9:9a:45:55:5d:a5:1d:
21:0b:99:d1:e0:ef:bf:7d:ca:95:cd:79:ec:73:bc:26:7d:61:
9b:71:b4:8c:d3:d7:b7:49:c9:07:74:80:55:be:c9:a3:c9:6f:
29:4e:12:9b:94:0b:9c:a7:d4:28:f1:0f:ce:b0:dd:25:0a:d9:
da:b2:56:db:d1:13:e3:93:39:4d:29:df:36:55:e6:e1:85:93:
75:28:e7:6c:db:44:5e:46:26:67:c4:55:91:ba:9e:cc:c3:31:
f2:d1:d2:fe:60:fd:12:83:73:2b:03:d4:4c:28:ba:9a:81:57:
94:10:92:a9:5f:37:f9:42:b9:e7:d2:d0:7b:ab:24:44:ce:27:
75:44:cb:77:3b:3b:b4:dd:b5:80:ea:92:d1:cb:ab:b1:ed:11:
8a:78:f3:ce:70:31:b2:00:92:8a:33:f9:0e:e0:91:16:17:64:
ec:5f:5d:67:4e:11:7b:55:b8:40:63:37:af:de:ce:af:ae:3e:
c8:64:73:d3:ad:c8:e7:ed:86:40:91:77:c9:b0:c9:a1:b0:3d:
d3:67:1a:de:37:7c:8f:78:cd:95:18:02:4c:da:df:10:6c:c4:
73:eb:12:7c:be:a7:ff:3f:73:5c:28:e6:92:f3:2a:5a:46:cb:
c1:47:32:67
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MjlERjExMC8GA1UEBRMoOUU2Q0ZBQUI5NEI0MkIyMTc2MDFFMTMzMEEwMjc4MjJC
OUNBMUZCOTAeFw0yNjA0MTcwODE3MTRaFw0yNjA0MjQwODE3MTRaMBgxFjAUBgNV
BAMTDTY5ZTFlYzhiLTFkMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDENVIWKydKXa+bFNufL//HgB+UyWt7vPXhYgtMcRJ/2bP5yJC3AquqW9Ki3rCC
0Non2bIx2JqZnjvXxNFBULH2EFD2Z+sGJiXZt0lbifKbDetWAjg5ZbRExxRS1YqV
hTdgDTQQLKk5pMVngBT0NPdhEk4TOxjauXdBSh/rFQzXwBj2oG0V5Tg4+tJEOmJ4
xLVarSFDGu00+wfWk5WgFIZyNjIgkCB5VHDywPrCDL603m5LxrU4AhfSJnAgbQZt
Gb/rY4RuOOnYaskPV9zmKRTM2AFaCvvao1fItTYKWTANowuQa3IeT3KyjMOX6FPv
nfLdWx5dDylJRvvrIEiqIwTjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7fs9pyO2
EqY9c8j8V0ibIR8VDlIwHwYDVR0jBBgwFoAUnmz6q5S0KyF2AeEzCgJ4IrnKH7kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOURGL0UyN0M5M0FFRUQy
RTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lGMkFlRXpDZ0o0SXJuS0g3
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbm16NnE1UzBLeUYyQWVFekNnSjRJcm5LSDdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy
OURGL0UyN0M5M0FFRUQyRTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lG
MkFlRXpDZ0o0SXJuS0g3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5+Ii2wHqMgIWwAamaRVVdpR0hC5nR4O+/fcqVzXnsc7wmfWGbcbSM09e3SckH
dIBVvsmjyW8pThKblAucp9Qo8Q/OsN0lCtnaslbb0RPjkzlNKd82VebhhZN1KOds
20ReRiZnxFWRup7MwzHy0dL+YP0Sg3MrA9RMKLqagVeUEJKpXzf5Qrnn0tB7qyRE
zid1RMt3Ozu03bWA6pLRy6ux7RGKePPOcDGyAJKKM/kO4JEWF2TsX11nThF7VbhA
Yzev3s6vrj7IZHPTrcjn7YZAkXfJsMmhsD3TZxreN3yPeM2VGAJM2t8QbMRz6xJ8
vqf/P3NcKOaS8ypaRsvBRzJn
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:43 2026 by rpki-client