
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier: iWsaE09jhVJd30dDjSgs2kuD5oYd3aUxIx3tkXKwqMs=
Subject key identifier: 2C:41:4B:B8:91:E7:96:33:14:91:31:74:17:F7:E3:CB:B2:55:E6:57
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 062E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number: 05F7
Signing time: Wed 04 Nov 2026 23:22:10 +0000
Manifest this update: Wed 04 Nov 2026 23:22:09 +0000
Manifest next update: Wed 11 Nov 2026 23:22:09 +0000
Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: MTBS9FDeaT4elbBWjBqhWMmvmw3exCx2V+H2fp4Dir4=)
2: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: R/DzMjbYB54y2rkjmUsgsoLgRWXNAeACRn32JhxPtuw=)
3: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: LLTLXt6xDjIK6bwOGJSxN6DvTteHHSfn+cjpk7hZfWk=)
4: 16E5C10AB7F111F1822D02F36C11F970.roa (hash: NAuwVFPMVi/o7id+n2MznAJbrCME2oLq3tAwIhHcyZY=)
5: 10F4AD9C81DC11F1A817832770A30FBC.roa (hash: MovtHAK/PsupbFCkYS7og2K1pP0+N2V4b/xbXPJc89s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 23:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Nov 4 23:22:09 2026 GMT
Not After : Nov 11 23:22:09 2026 GMT
Subject: CN=6aebbe21-eed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:cf:43:c9:36:b3:d3:4e:d1:70:c3:b9:ee:
26:49:b5:ae:c8:45:e7:e1:ee:dd:9d:c3:5d:fa:f8:
b2:37:f8:9c:a8:ff:ef:92:ed:26:0e:c7:d8:91:b1:
73:14:4d:15:71:16:be:eb:85:ac:5d:28:75:1c:b0:
fa:b0:94:84:3c:26:20:64:73:d8:b7:a0:a2:60:86:
28:a9:69:1b:ed:63:0b:99:51:2a:45:c9:00:70:7f:
8f:7f:1b:1b:85:ee:cd:33:09:c8:1b:23:f6:19:92:
60:c7:c9:d5:c7:b2:e3:af:5e:75:60:a1:fb:e9:6d:
1c:28:f4:ff:67:49:09:a9:02:01:cb:c3:73:fa:10:
99:5c:48:54:03:75:a6:eb:7f:45:3c:e1:da:4d:84:
00:dc:4f:ad:73:de:9a:f2:7e:e1:66:95:d8:1b:26:
c6:e1:0c:41:19:3b:ed:4d:c1:61:29:c6:1f:15:c4:
99:05:8f:16:00:b1:f0:ae:38:c6:eb:d6:20:10:08:
00:a2:cb:10:3b:ea:aa:6f:db:a7:42:b2:18:99:3f:
58:22:b3:42:10:03:36:42:52:fd:cc:8c:93:4c:54:
9d:ee:f6:48:7e:21:f2:6f:6c:b1:c8:ff:11:c8:a3:
89:aa:e1:8f:39:f4:a1:a3:09:74:ba:58:db:71:4b:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:4B:B8:91:E7:96:33:14:91:31:74:17:F7:E3:CB:B2:55:E6:57
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:e1:2f:f7:72:d7:57:ae:a9:82:1a:24:4c:74:50:9d:6c:df:
4e:98:0b:c1:5c:f4:e3:70:47:d1:bd:5c:d4:f1:8c:ca:8f:48:
a9:2b:5c:24:c4:5c:f7:da:41:77:24:14:1c:3b:f6:20:04:1c:
29:34:08:ee:a2:dc:67:a8:45:d0:91:f4:be:fd:39:e6:33:7e:
cd:cb:73:9d:a5:ad:e0:1c:7c:0e:eb:f6:25:2e:cc:91:3d:0d:
3b:e4:6f:5b:72:58:61:4f:ef:28:a0:43:24:c0:0b:d6:1a:ae:
4a:15:87:81:4d:f6:e4:0f:70:aa:73:0c:f3:86:2e:fa:4b:a7:
aa:b1:77:3c:63:99:b3:09:65:83:d0:cf:02:84:71:47:96:9a:
cd:5d:db:14:d6:7a:53:47:54:92:6e:83:91:98:1f:2c:52:fc:
ab:e6:16:3f:87:ba:fa:5a:5a:a8:1c:6a:a5:aa:51:96:07:5a:
cc:15:37:68:7c:5e:a3:c1:85:5f:37:2d:09:dc:2c:f8:14:25:
87:c4:88:f9:d0:66:43:4d:2e:6f:fd:90:c1:cc:5f:84:a0:7a:
91:fe:ca:14:a4:71:25:15:5b:a6:01:d3:af:05:ad:17:42:c9:
13:41:c8:f0:2b:ab:de:43:40:3a:ae:c2:6c:c2:21:e0:7b:06:
51:49:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:23:18 2026 by rpki-client