
$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json)
Hash identifier: q1aZwQgIt66ytvL2ho0aQv5YU46LW0fJPEE/rETv0d4=
Subject key identifier: 56:22:9D:1E:72:06:0A:F5:20:69:04:EF:D2:4A:D4:A9:E6:FD:48:51
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
Manifest number: 01D2
Signing time: Sun 05 Apr 2026 03:11:07 +0000
Manifest this update: Sun 05 Apr 2026 03:11:06 +0000
Manifest next update: Sun 12 Apr 2026 03:11:06 +0000
Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: J3NM7p6mjSf5c0CX8AAiju3Xh61qRstVKmKHA2Z22Gg=)
2: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: 4mOEHeBhGChXkeLtaY3MjKqXMs560mEi/SBozflvvQE=)
3: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Validity
Not Before: Apr 5 03:11:06 2026 GMT
Not After : Apr 12 03:11:06 2026 GMT
Subject: CN=69d1d2cb-b7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:d1:03:8c:f0:97:93:30:55:30:c7:54:88:
9c:8b:b3:81:9a:9c:28:fc:22:98:a9:31:0a:1a:21:
39:b9:3c:39:2f:3b:db:18:6d:85:ec:b8:60:51:da:
4f:25:9b:87:04:a9:ab:44:0a:85:74:b5:86:d6:04:
23:52:9a:e7:4f:53:db:67:89:4c:98:d6:bc:65:9f:
81:0f:68:0d:c4:1c:e1:bc:57:65:ec:be:89:8f:60:
2d:4b:1d:c6:9b:3d:45:19:a2:68:16:01:d7:71:5f:
98:42:24:13:18:d8:8e:69:67:14:60:b3:ad:dc:68:
ce:db:9d:de:2a:70:31:2b:e1:36:0a:b7:8b:37:60:
d8:e4:e7:67:f8:c4:1f:04:4b:36:3e:05:7f:51:a2:
fe:4a:9e:9f:75:76:f3:c1:f6:f1:58:43:33:db:2a:
e1:ce:ba:77:1b:7a:55:e3:03:ee:77:7e:3e:a5:8a:
76:24:fc:4f:fe:b7:e2:b0:6c:a0:01:4c:c7:30:fc:
60:2c:2f:e7:be:d3:52:b6:00:d9:26:a2:02:ef:b6:
18:b8:52:14:71:e3:4b:ed:9e:80:5f:62:ed:49:5e:
2c:50:a1:40:fb:d1:d6:64:4f:d9:73:38:83:36:2f:
5c:b7:9b:34:bb:88:c8:a7:7c:a3:9a:b7:12:81:d3:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:22:9D:1E:72:06:0A:F5:20:69:04:EF:D2:4A:D4:A9:E6:FD:48:51
X509v3 Authority Key Identifier:
keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:fd:5d:6d:c9:d1:4f:49:d1:ad:4e:e5:c6:df:03:c3:03:c4:
36:7f:c6:58:18:d1:7c:ed:5c:f4:68:ba:7b:c2:09:c0:a2:63:
3f:ff:26:b1:df:6c:57:4d:8f:e3:64:df:7d:8b:ae:65:cd:55:
d2:d0:67:20:2a:04:47:fc:01:c8:f1:8b:22:91:e3:56:93:0a:
d3:6b:4b:e5:e4:95:f3:09:ba:a6:8b:08:4b:d9:74:78:78:d5:
2b:9b:dd:c9:49:ce:74:33:4a:bd:84:93:7f:1a:58:03:9d:89:
65:44:8a:2c:36:83:d6:bb:83:80:f6:73:ed:5a:37:e1:7d:cb:
1c:b6:72:eb:3f:07:56:78:5d:37:c1:6e:d3:d0:14:ec:22:09:
39:3a:52:aa:18:67:3b:a1:25:01:84:90:55:35:bd:78:79:59:
07:a5:e2:8c:11:e7:60:4f:f9:0b:7a:24:a1:29:f3:d9:b1:e5:
7f:cb:a6:89:e8:44:71:7d:32:7e:40:67:a2:e6:9e:c6:33:0c:
f0:d3:bd:19:2e:39:21:e2:c4:8e:dd:19:1e:ee:9b:67:c3:9c:
8c:8f:00:a9:55:fb:9b:63:62:ae:a9:fe:11:14:ae:e4:00:25:
e3:0c:6c:cc:03:ae:03:dc:8b:3f:6d:d1:98:c6:9b:d7:6e:00:
81:56:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:05 2026 by rpki-client