
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft
File: NakpRAWKu-k3TFV7sIThgTRARH8.mft (raw, json)
Hash identifier: d7iTimQOFeYnLg2X76jUDG/1vygqDsbuhxLeq62Mswg=
Subject key identifier: C2:9B:4C:D3:AA:0F:71:01:D5:25:A4:1A:55:79:A8:C7:FF:9E:8A:29
Authority key identifier: 35:A9:29:44:05:8A:BB:E9:37:4C:55:7B:B0:84:E1:81:34:40:44:7F
Certificate issuer: /CN=A91923E8/serialNumber=35A92944058ABBE9374C557BB084E1813440447F
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NakpRAWKu-k3TFV7sIThgTRARH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft
Manifest number: 48
Signing time: Fri 09 Oct 2026 09:10:47 +0000
Manifest this update: Fri 09 Oct 2026 09:10:46 +0000
Manifest next update: Fri 16 Oct 2026 09:10:46 +0000
Files and hashes: 1: NakpRAWKu-k3TFV7sIThgTRARH8.crl (hash: X0mJ7X2KTO1nMB1zQJWreHABNz7AYpF3EX1tjIpL1yM=)
2: 1257DEDE54F511F18BFCC077A2833773.roa (hash: DZsp3kp44FtbJD7jaWrhsQw5V2T437I/DrbmUoEFoeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.crl
rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NakpRAWKu-k3TFV7sIThgTRARH8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923E8, serialNumber=35A92944058ABBE9374C557BB084E1813440447F
Validity
Not Before: Oct 9 09:10:46 2026 GMT
Not After : Oct 16 09:10:46 2026 GMT
Subject: CN=6ac8af97-6053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:76:23:a4:55:eb:fc:66:e3:15:cb:de:58:
43:b7:ac:ae:07:d7:0d:3a:bc:18:9e:89:32:e3:4d:
b6:9e:1d:4f:9c:88:aa:eb:a1:95:98:48:c3:07:64:
10:51:7b:0b:6c:ff:24:d7:50:d4:63:b6:04:99:57:
ab:eb:02:ee:dd:ac:4e:98:eb:bf:dd:f6:e2:ff:31:
01:b4:3c:10:2a:98:5c:5c:c6:5b:af:08:92:03:70:
fe:68:97:c7:31:33:14:a8:a1:c5:60:1e:d9:bd:1a:
ad:de:02:a0:0b:12:f0:b6:12:dc:07:8f:a0:50:6f:
0b:44:39:66:07:bd:8e:53:ec:cb:0e:9b:56:f1:b7:
69:5b:3d:c2:bd:75:c8:92:b2:c5:f9:92:55:a7:9a:
45:86:06:8a:d4:f5:e9:16:75:ca:1e:a7:9f:ec:f6:
24:ca:15:b1:3f:1a:6e:21:c7:b6:3c:e5:b9:9d:fe:
19:8e:7f:dd:a0:78:04:b2:c2:5f:26:37:70:88:17:
b3:e2:dc:a7:07:9d:79:80:5d:61:ef:46:8c:5d:26:
e6:ac:a4:49:c4:3c:8c:28:c4:00:45:92:c2:e5:ce:
d0:c7:9f:ff:a6:d2:6a:dc:60:37:f7:1d:8d:10:94:
1c:c3:e2:37:5c:32:08:67:0b:36:f9:04:a8:ea:78:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9B:4C:D3:AA:0F:71:01:D5:25:A4:1A:55:79:A8:C7:FF:9E:8A:29
X509v3 Authority Key Identifier:
keyid:35:A9:29:44:05:8A:BB:E9:37:4C:55:7B:B0:84:E1:81:34:40:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NakpRAWKu-k3TFV7sIThgTRARH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E8/ACC4FBCE54F411F1BD1F2CEDA1833773/NakpRAWKu-k3TFV7sIThgTRARH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ae:e5:35:a6:fd:b9:eb:23:54:71:8d:97:d3:2e:c1:e4:6f:
9f:70:80:ab:45:15:4f:9b:c1:40:a8:81:a8:60:a2:ff:8d:93:
14:cd:9c:96:c0:3a:7e:35:de:cb:e0:8a:e0:17:ed:ce:7d:49:
29:ae:eb:5f:96:02:59:11:ff:ce:00:85:51:81:58:a9:1c:71:
22:4a:17:86:5f:80:0b:2e:d0:88:b9:4c:78:bc:d9:76:b1:27:
e7:d7:69:76:de:27:64:0d:f2:c7:c1:ed:ff:a6:8c:0d:63:26:
4c:83:1f:65:4d:b7:c8:11:44:cd:3b:c9:25:a8:a4:d0:1b:67:
0a:2e:c9:d3:2e:68:6e:52:d6:19:4e:4f:04:04:2d:ff:1c:34:
37:15:d0:61:40:0b:8e:14:d8:eb:b4:a4:b1:f6:74:a7:7c:e8:
71:5b:86:e3:dd:ba:6f:9f:32:c5:60:90:53:41:e4:12:86:9d:
4e:b7:a4:44:72:5c:ee:24:38:eb:05:e4:96:9c:f5:fa:13:c2:
13:fd:7c:d4:d4:b2:5a:56:a4:30:a3:6e:55:c7:72:2a:35:17:
4b:9e:34:e5:8a:bf:31:84:57:b8:79:ec:4a:dc:c1:de:2f:6a:
0a:c2:03:9a:25:cc:93:ce:1b:4c:57:3b:1d:4d:78:5b:78:f5:
f8:03:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:47:56 2026 by rpki-client