
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier: /gt0PoBEXnmqh1AOPBK6mptyQVjg77cnsLikWe4QPvQ=
Subject key identifier: 6E:D1:EF:D1:A9:36:4F:62:C0:FB:BD:80:79:F7:7E:A4:37:55:1A:DE
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 05BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number: 058C
Signing time: Sun 26 Apr 2026 23:19:39 +0000
Manifest this update: Sun 26 Apr 2026 23:19:38 +0000
Manifest next update: Sun 03 May 2026 23:19:38 +0000
Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: lCpjXn0g02S6quo3JD8jz0qfNkfjo5XKVFRkByQV+7g=)
2: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: Q6qYKHjV9NmhmzxqH8ayk30H8rtTg6j37bugDkJvn/Q=)
3: FBBECF1A694111F08D368069C4F9AE02.roa (hash: HO1DGtNQx+OH3SloGIt02Rz1EoCoy8/3rF9m0kcImEQ=)
4: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: xb+uRHoHsQjZ3bcCgpJzZNIAPd4nFn7kpkaspAVlz/c=)
5: 53B4619407CB11F19B0357131B3D8C67.roa (hash: FE2rPrjsmUgohHBi/GpAcZVW0Hos/Z/JQQ5dDQAETOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 23:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1466 (0x5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Apr 26 23:19:38 2026 GMT
Not After : May 3 23:19:38 2026 GMT
Subject: CN=69ee9d8b-0ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:ee:02:37:d6:95:70:c1:cf:f7:88:99:93:
a1:4c:03:49:43:e9:e8:c1:ed:3d:82:cb:a3:b6:3d:
c2:fd:a4:34:a6:af:20:13:7b:81:d6:52:62:84:aa:
b8:d0:f7:c0:2d:00:59:9a:87:99:30:43:5c:97:47:
82:df:51:52:c6:33:8b:23:9b:a0:9f:7c:9b:9e:ea:
76:56:cc:19:f1:9f:b9:7d:3d:e6:e6:60:68:db:7a:
b0:11:2b:92:9d:d1:84:80:4c:65:2d:42:d2:ff:d6:
c7:77:ed:c3:0e:3b:50:5e:d3:84:e1:05:63:7e:a1:
90:a3:cb:1b:7f:1c:b9:85:06:af:7a:b2:10:22:42:
78:db:3c:74:8d:1c:a6:aa:36:b7:c9:28:dc:ca:99:
52:9f:a9:b9:9d:29:00:4e:28:db:c3:00:af:ae:d0:
64:59:ed:1d:ba:8e:f3:67:73:04:11:3a:90:7e:c5:
40:0d:2d:0f:31:9d:c9:e2:8d:8d:b3:20:77:eb:47:
c5:e6:3f:c1:e3:bc:fd:96:65:53:ff:e7:c9:b4:7f:
c1:c1:d5:c0:54:c7:57:98:e5:62:84:d1:f6:e2:1f:
bc:45:12:31:24:bf:42:bf:8a:f0:99:ec:93:be:16:
0c:a1:de:23:77:60:08:9c:3e:f3:31:57:02:53:7c:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D1:EF:D1:A9:36:4F:62:C0:FB:BD:80:79:F7:7E:A4:37:55:1A:DE
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9d:d0:57:64:d9:e6:63:dc:bc:ad:9b:81:57:3d:3c:41:2e:
5d:82:03:c7:aa:56:27:ab:1e:75:0d:2c:79:c9:77:20:db:35:
6b:99:a2:8a:21:24:b2:d4:94:cc:54:2e:e0:2c:c3:c8:98:2a:
fe:dc:cd:31:a1:44:f8:e3:ed:de:ff:b7:6b:40:aa:4f:38:1e:
35:99:e3:ee:f2:fe:1b:c9:cc:11:80:9c:27:e7:60:59:21:e1:
00:7c:d5:51:a4:88:db:db:71:40:86:6a:71:ee:d9:f4:a5:84:
8b:1e:48:19:55:58:f1:26:f4:9f:ef:cf:57:91:31:1c:6f:91:
fd:5b:e9:94:9a:d9:76:e9:ab:b1:bf:ad:ab:a4:86:99:e1:f3:
f1:f8:fd:ca:c6:8b:39:e3:3b:b5:9a:83:1d:79:a6:5e:c5:3c:
27:3a:18:2e:10:23:8f:08:18:cc:32:27:ea:c8:87:e2:cc:86:
94:f1:0d:68:cd:3d:e6:b5:bc:98:c4:4e:b8:29:aa:d9:cf:d7:
db:c3:88:b6:54:c3:bc:94:ab:cb:bb:8c:f5:d2:8b:5a:df:51:
58:94:db:bf:a1:a6:1e:94:02:7f:10:b0:f0:64:ad:df:2c:7c:
77:fb:d3:4d:53:ef:43:9e:34:b2:a5:66:2c:9b:c3:12:d5:5d:
f1:86:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:09:27 2026 by rpki-client