
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json)
Hash identifier: 1AUvTPocHOOOeNfAJ31D5yjjvbHqFvRtjjjc451qihc=
Subject key identifier: FA:F4:39:C4:1C:0B:52:F8:FA:EB:CB:33:11:9D:C9:03:E7:4C:CD:C5
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial: 1228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
Manifest number: 11A8
Signing time: Mon 26 Oct 2026 17:11:05 +0000
Manifest this update: Mon 26 Oct 2026 17:11:05 +0000
Manifest next update: Mon 02 Nov 2026 17:11:05 +0000
Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: CV57+Kvb93d2rYcA/IwqMDvKJ85N7UGf1+AW0d1aMyo=)
2: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: tCQBUtYFoGYz0mkeelr2MTFt0PRYSbZ9klpLIVmb1oc=)
3: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: bAw2DJ5Kd887dPCmMIgU3xUTOQCR/psfXJJs57GhqSk=)
4: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: fzVldj66k6KXtgIRLEaGb66ZtwgbJga1awvd7qMV8+I=)
5: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: 3JBN2jyg46LmYUyUHhEZh4IoQyWfFsojDUHEe85wv/g=)
6: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: sm0eBXuJHpy/6GBiyFucIa3zwW7MRE4QJ04/eh2HAes=)
7: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: NHQV92FmnuARgeDDhUDewRl+rTj+thYHcs3GlrXraHk=)
8: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: aOutH14XqTU7CvFjZF4RAhY9j2C5Nrg3m1MQwiLdC9E=)
9: 52685F222E9111E999636910C4F9AE02.roa (hash: 4Ei9jmJLAQOoAToGpIrcLdsdG3+i6HRC8BOB0H1zkBM=)
10: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: lflQBr5KFU0YHST8ZC+CiZu1r2eTacXElo40hp/vo78=)
11: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: R3UXvxLGuAsLaHQCcYjq4jsLIsHsiVoo5zau0vUpLOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 17:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4648 (0x1228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Validity
Not Before: Oct 26 17:11:05 2026 GMT
Not After : Nov 2 17:11:05 2026 GMT
Subject: CN=6adf89a9-082f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d3:dd:80:00:cb:f7:07:43:49:36:b2:eb:1b:
cf:42:fa:9d:9e:e0:ca:d2:ba:56:c0:6c:e2:2e:ca:
ba:78:92:1d:d9:96:6d:4e:9d:bd:27:8c:0d:02:a9:
6f:25:0d:55:e0:7d:ac:56:6a:b9:2f:16:14:ca:27:
3f:da:a7:aa:c1:3b:a8:dc:57:a8:c1:6c:91:be:57:
1f:c3:2e:64:db:af:2a:97:dd:91:23:33:d5:e6:ea:
93:60:7b:0a:b4:16:e3:d3:73:29:94:db:f9:e6:c2:
52:20:f8:f4:13:d0:7a:35:19:65:9c:cf:be:92:34:
f2:fc:55:08:c9:6f:99:0b:f5:0a:5c:ac:4c:2b:d7:
f4:01:f2:27:16:23:d8:d9:d0:d1:bc:e8:30:e9:b4:
2a:61:3f:41:16:07:7c:9b:07:4b:b6:75:76:ac:3f:
41:31:ba:a8:ba:98:41:11:f9:e1:ff:57:09:69:f0:
f4:62:39:bb:b8:ce:96:44:62:5a:5c:e0:83:ba:c7:
07:65:c3:8e:73:f3:c4:73:04:c5:28:a9:ce:a3:8f:
23:f6:18:6f:11:0a:64:b5:c7:af:ca:a7:59:62:fe:
f9:a2:ed:95:cf:b0:29:83:2c:43:4b:8b:71:de:e0:
b8:65:3f:d8:c5:70:f3:4c:7e:2e:13:f1:07:e3:55:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F4:39:C4:1C:0B:52:F8:FA:EB:CB:33:11:9D:C9:03:E7:4C:CD:C5
X509v3 Authority Key Identifier:
keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:eb:80:5b:42:e9:b3:f9:e7:05:a6:fe:5c:00:21:2c:14:0d:
f4:3a:12:a0:f4:2a:fb:ca:f8:30:c5:0d:00:4f:fa:9d:7f:47:
b1:f8:b0:fa:75:65:1d:22:15:07:18:2a:d9:1c:fc:a1:bb:4d:
ad:18:42:05:b9:4e:96:8b:d3:ef:7a:e5:cd:94:78:27:dd:ba:
62:8a:49:25:34:0c:4c:01:51:e3:a9:90:fb:19:61:3c:da:a4:
b9:7e:9e:f4:26:88:09:90:f9:1a:51:2b:6c:18:fb:b7:8f:45:
40:0d:85:e1:cb:0e:c4:68:5e:e6:7b:65:b3:1f:c1:bc:f8:27:
f3:0a:21:9b:55:2b:28:aa:fe:1e:0e:1e:a4:2e:f7:2f:6e:7c:
86:c1:e8:da:be:9b:32:60:30:0b:4a:00:ee:c9:cf:e6:c0:d6:
16:9d:46:61:c2:b6:0e:39:81:93:80:08:ee:14:99:68:2e:b8:
ba:0d:d5:f4:de:00:ec:a8:89:f4:a5:bf:0f:41:40:03:18:9c:
bd:90:96:ff:b1:0d:0b:6a:c1:8e:35:3d:9d:83:2d:39:79:41:
0b:e7:5b:6d:43:0c:d6:7e:83:47:9a:02:9d:d1:72:1c:9b:6a:
7f:52:b7:8f:8a:5b:4c:ce:cc:b1:0c:04:ca:78:0c:7e:c2:11:
d2:af:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:37:39 2026 by rpki-client