
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json)
Hash identifier: 5OyUdDuYsOxpAyJbSt5Q7kEWix7DyXChzG56k6COXjU=
Subject key identifier: 7A:90:C5:E3:D0:73:D1:B3:FD:93:09:30:D4:3D:AA:A2:6A:1C:C5:75
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 120F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
Manifest number: 1080
Signing time: Mon 20 Apr 2026 17:29:57 +0000
Manifest this update: Mon 20 Apr 2026 17:29:57 +0000
Manifest next update: Mon 27 Apr 2026 17:29:57 +0000
Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: qzSIvQp7CLkMScpVTrCUET0GawuGAwrDthMajMxDA4g=)
2: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: RdnFjFlQSbXhKdwY5kMqtzBzkUycrU7RuwuLidB948U=)
3: C2356A948FE811E98B967A66C4F9AE02.roa (hash: Spu6ueKiAix7Vx1bbz3QuH8zuY42SfhsOYEFzJ/3W4o=)
4: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: 0xacdRxIlt6XlMYC4ytgm5Wnpkb/XtvJrzfDYrQNkow=)
5: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: jAhN4tezvJPwZDVpGZejWw4TU5H1Av+GZW6zZMmb67I=)
6: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: Dy3vf2brgO7ffq8geCJNrRWY4aeeqFaFWyK7H7SMUrk=)
7: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: SwqLx1ykNlWfnGxIgnnplctUN2Uh69BTnr1sDfxJRlM=)
8: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: m9D73VL27f9lVIbOReJ6AOP2zRgFJFj+KEXEimjyt7I=)
9: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: VlAWA5/d+uBjOMZi4UPagGvqPim5oPM3SxEdySpg39I=)
10: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: k1IfgBcHOoF2DvAmPhMFiueaAUbhFvWp7b5AsEN0aGA=)
11: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: KmEu0JXVBtwzMz7EetZKwa8KqrgE2kj5+Y9cCaXraFo=)
12: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: wW2NNDoiiggQLts6yoRWeEta8EfkfmkpuQXd4IRvuj4=)
13: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: J+oM/GM4p3/6d6pclXs1NjnCH5p34XNUGcl5IM3ZZ78=)
14: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: Yra/cySrBt0zcZ3P5GOXeK6swd+KmGvdWYxnM5VydGA=)
15: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: t0lrWYbEsDKRavSA+NYxahXVuuhYWwqHsIgE48/DyB8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 17:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4623 (0x120f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Apr 20 17:29:57 2026 GMT
Not After : Apr 27 17:29:57 2026 GMT
Subject: CN=69e66295-b450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:42:a5:92:9d:18:1e:3d:0f:46:63:33:da:
2c:a9:10:8b:94:36:61:a5:b8:01:de:f2:6d:61:6f:
1d:43:59:aa:c5:83:ec:87:9d:85:6f:bd:87:5e:41:
f0:09:15:25:9a:23:69:61:31:ba:3d:c5:98:5d:50:
71:39:5d:e6:13:4d:99:b2:41:8f:67:f9:6f:f1:2a:
a4:20:3e:cb:1e:2e:37:44:45:72:ec:14:c9:16:92:
f1:03:f6:3c:26:6f:be:a8:73:d7:98:8a:0c:fb:e9:
4e:0a:65:e3:bb:06:e0:dd:3f:0c:b3:48:13:a6:53:
b9:41:f6:46:d7:39:0c:06:1a:a5:cb:1f:58:2a:fa:
0b:43:6c:f5:ac:b6:c3:e0:f6:c6:81:5d:64:30:cf:
17:6e:f3:b9:e5:22:76:90:ca:05:2d:18:fb:0c:1d:
b4:bb:2c:94:9b:aa:d0:5f:8d:7b:e6:a8:36:77:ec:
f7:56:75:01:cf:20:3f:e7:92:15:ee:bf:8d:53:f1:
c4:e9:61:9f:20:6c:d6:36:ee:6b:22:b8:7a:44:3b:
9c:47:0f:93:8d:37:42:67:86:70:74:34:c5:0c:b9:
77:62:d4:bd:56:e3:85:c7:01:df:5e:e3:17:9d:df:
5a:26:98:b6:a9:ab:f8:66:ab:21:8c:b5:e8:d1:0a:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:90:C5:E3:D0:73:D1:B3:FD:93:09:30:D4:3D:AA:A2:6A:1C:C5:75
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:78:fd:67:54:63:66:c3:8c:c0:4c:da:82:b9:c7:82:66:06:
b7:f9:2a:fd:fe:1e:63:94:6c:be:99:14:34:e8:fc:0c:83:20:
fc:23:18:c1:6c:55:60:4a:38:01:ae:84:db:8b:63:55:60:cf:
26:a7:e7:6e:95:10:df:5d:14:84:33:d3:9f:69:13:66:5a:be:
5f:a1:e7:e7:ca:f9:fd:ce:a9:a9:3b:be:d2:e9:99:1e:5f:96:
df:92:5f:f6:7e:d8:83:34:5c:cd:0a:b6:7e:85:a9:2c:be:61:
15:35:04:9b:4b:47:c9:8e:df:e0:b3:09:bd:51:ce:07:ca:31:
84:cc:ea:ed:0d:00:5e:96:67:85:72:a0:95:eb:22:f4:aa:50:
86:f7:85:1e:ed:23:e5:c8:ae:af:f2:21:d1:b1:bc:00:04:98:
a1:7c:c6:a0:7e:d0:1c:5f:5a:09:87:aa:08:e6:98:c5:fd:56:
4e:27:f4:fa:0a:0b:cc:86:98:50:e6:ba:cf:01:29:d4:37:93:
63:6f:3e:3d:9b:a2:f0:cc:20:a6:c7:aa:da:3b:ee:ed:75:46:
76:db:31:71:b2:4e:4b:cc:e8:ad:67:79:c2:81:96:12:8d:d3:
bd:a9:2c:61:ef:66:7d:7b:19:c6:6a:03:7c:29:7e:c9:0a:0f:
ce:1e:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 18:34:48 2026 by rpki-client