
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json)
Hash identifier: hSMlNoiDj/HcvaFpTnOI/4u7RP5Ss33temn9MxMyuy4=
Subject key identifier: 72:02:35:A3:B2:D2:34:F5:C1:AC:5F:B2:C5:7E:50:7B:92:BE:78:C6
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 1270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
Manifest number: 10D0
Signing time: Fri 04 Sep 2026 17:27:25 +0000
Manifest this update: Fri 04 Sep 2026 17:27:25 +0000
Manifest next update: Fri 11 Sep 2026 17:27:25 +0000
Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: LnwPqIE//QxHMXDpJrnw96DAGLcXD29uYaipjcE0YpU=)
2: C2356A948FE811E98B967A66C4F9AE02.roa (hash: tZuST+AOoUn223wk8bZTKDT1J1Cy3KgRlLbmHSwBjOc=)
3: DFC4CB6686F011F19E006003A7EE528E.roa (hash: e4jwE0ZT8KKqzAYg8acBAl1aL2eMGYBkO5WKPD4gY0E=)
4: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: i5Rintjycnuo9u71FbQoVNcu5/vekh+2HiEq9B95npE=)
5: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: jSm32Eb8eMElOEnd+VebqX3ziEBklNA1JW0RK3i6/Ok=)
6: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: A3mprKP4/bzMlJDhCze5Spg/p0sS0GlpyT+kIwue5HU=)
7: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: GeYMMjQQO4OJv0hhzntd/IKM1r5EywrlvT+cEVRcT2M=)
8: I3gtydeyCoEzxoHhphV7nSBEdcE.asa (hash: UsfZdqrzXmth4HfD3tidOb1ZQGOW3dFNJ6v8mpbSRSE=)
9: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: qVwJ/vwm5XFANli3yyVsiUhVINMVoW4a5PClUSRYBSE=)
10: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: WtxeX8BB0opbdwzUtALDCwbBr4nNuxXM2Tpyyv444y0=)
11: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: u6/wQAnigEtagpknx3tXOVG7uwO7ZVlGNYHIfxcAb4g=)
12: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: VxYvOO28xeiG9c6rCrahvvpw2JaHPPY/8pkFYEDdB48=)
13: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: yfpfiXjcixpP9IQZ4ifctX4fhZj0BN5GuoJO9ai0I80=)
14: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: ig8ZCKfrZ5CJ7ljOZZuhrKZUQ/12pkHKHaOO+01joog=)
15: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: e4iJVgXrOeEESzCVIGc2vflltGz2qDITSBKrnWa8B+0=)
16: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: dneRbel94yY09BrODhW/cm0eDKRgptqdSpSXdfm04G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4720 (0x1270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Sep 4 17:27:25 2026 GMT
Not After : Sep 11 17:27:25 2026 GMT
Subject: CN=6a9aff7d-bd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:e6:78:8a:7e:1d:bb:15:93:1b:7f:60:55:
9d:51:1e:eb:a7:33:b3:79:97:3d:3d:3c:d8:93:1e:
a5:6e:fe:fb:ac:d5:20:0a:72:20:b4:0b:0c:a8:2d:
55:9d:4f:98:33:d1:39:c3:4c:5d:42:c9:10:9b:ce:
59:9d:5b:b0:6c:0f:f9:6a:da:17:bd:b2:50:90:f8:
86:3d:47:dd:76:e2:4b:e0:1d:45:1c:b6:e2:e8:d4:
c8:98:b7:65:11:80:f9:04:98:ce:14:e7:42:c1:5a:
17:1d:1d:42:9f:cb:4b:03:c5:f7:40:e3:d7:a0:1e:
e4:47:fa:fb:d3:52:e7:da:26:2c:a9:b2:c3:bc:3a:
e4:13:3f:66:60:37:ce:a9:91:e1:8f:10:30:21:e9:
f8:9b:39:a5:89:76:59:41:e4:23:f8:76:d6:90:ec:
70:f1:9b:b5:de:55:ea:6b:8b:e7:33:28:aa:95:0c:
c2:4a:52:4a:6e:d4:38:e0:41:94:29:29:90:c8:aa:
bb:e3:0d:0a:cd:1e:cc:50:f5:dd:6c:a7:85:b1:ff:
f6:26:59:e6:41:82:1d:f8:26:5c:3c:ab:03:36:88:
44:66:21:4c:a6:8f:39:24:ee:c9:86:1b:6f:17:ce:
66:7a:d8:ae:71:a5:aa:7a:c4:86:34:be:75:5a:db:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:02:35:A3:B2:D2:34:F5:C1:AC:5F:B2:C5:7E:50:7B:92:BE:78:C6
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:2a:db:48:de:66:29:6e:16:05:bd:dc:9c:b3:6b:ff:aa:59:
3c:2e:c4:42:11:9b:99:ce:5b:81:b3:7d:a7:3a:a9:62:aa:79:
e6:6d:71:60:53:07:df:34:b0:90:17:4d:ac:40:fd:01:2f:bf:
d0:27:0b:62:81:05:28:32:99:c9:2c:bb:46:76:0c:07:4b:81:
40:03:35:bf:04:77:b4:6a:2a:76:01:e7:da:59:91:f3:3f:15:
24:39:0c:76:bd:77:62:6a:00:6a:ea:de:80:9d:e5:34:0c:30:
e9:66:7c:48:20:3e:f7:eb:7c:c3:90:23:82:b9:97:74:ad:b7:
b3:a4:a7:2b:bb:7d:a1:85:03:27:ac:c1:1a:49:77:8f:3b:04:
04:cb:c6:0f:b6:49:4c:69:ab:02:24:21:e2:9f:bb:5d:e5:5e:
f8:85:7b:c8:84:1d:01:9b:86:4b:7b:60:6f:c1:d7:2f:62:1b:
07:32:d7:be:a7:bd:0e:49:d5:3b:21:ac:b4:24:c5:6e:0b:81:
f8:89:9d:a1:02:76:45:c0:26:80:f1:b7:f9:b4:bc:44:f0:3e:
e2:e4:e5:37:55:9a:bb:b2:25:f2:37:ed:0d:06:a7:84:40:44:
82:19:3a:bd:3f:ac:1d:4a:33:69:13:a9:5e:fa:f1:b8:e7:ce:
af:f1:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:29:25 2026 by rpki-client