
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json)
Hash identifier: Y3upqEfJNkg3nZRNTB+6cchpPadJjRqSvGdRBwIslmw=
Subject key identifier: 73:19:4C:51:F4:47:29:31:ED:A7:F0:C0:57:D0:45:19:8A:DB:93:D8
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
Manifest number: 0228
Signing time: Sat 03 Oct 2026 03:26:05 +0000
Manifest this update: Sat 03 Oct 2026 03:26:04 +0000
Manifest next update: Sat 10 Oct 2026 03:26:04 +0000
Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: T84g7jMSUa04u4VH1FMO/Wm4pyFqqXd2Xr3Is5iDAZY=)
2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Validity
Not Before: Oct 3 03:26:04 2026 GMT
Not After : Oct 10 03:26:04 2026 GMT
Subject: CN=6ac075cd-bc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:c2:31:9a:eb:58:60:9b:91:7c:dc:ba:59:
b2:40:17:f9:70:ba:0c:4b:0d:74:cd:aa:77:c8:a4:
0d:51:ad:e1:a1:a8:2a:40:1f:8a:28:31:bc:14:49:
40:5b:28:00:ab:fd:18:2e:aa:f3:96:e8:82:27:b4:
d0:31:80:1b:ae:12:9a:c9:e5:40:03:b7:d1:a5:22:
5d:6a:55:f9:9a:02:41:cb:8d:20:0c:43:30:55:f5:
52:2a:cf:0a:c1:ba:24:12:45:74:2a:96:2a:db:f6:
f1:3a:0d:93:43:20:d8:9b:c2:b1:6d:92:e5:81:77:
4a:a1:a9:6c:7a:6e:08:46:23:f4:8d:89:ad:ba:8e:
f2:5b:9e:3e:c4:f1:1f:68:74:ed:5e:7b:9d:d8:0e:
d3:94:6d:2b:5f:e0:c3:44:d9:bc:4a:93:a9:4a:47:
b3:b7:a1:b9:37:31:1f:a9:28:4b:dc:19:ea:0b:bb:
e9:99:eb:89:b6:0a:ac:50:d9:49:9d:17:16:46:39:
ee:98:be:65:c4:bc:57:bf:79:bd:6c:6d:7e:0c:47:
8d:60:d2:ab:7e:86:bb:20:45:19:2b:8f:e8:c0:9c:
53:f8:3c:0d:09:e0:2c:97:46:35:97:7f:dc:ae:d4:
f8:5b:ea:17:45:3a:54:be:ae:4e:12:30:d1:87:2b:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:4C:51:F4:47:29:31:ED:A7:F0:C0:57:D0:45:19:8A:DB:93:D8
X509v3 Authority Key Identifier:
keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:b7:6b:86:03:0a:e6:6c:b0:83:62:86:2f:a3:13:ba:80:37:
15:be:fe:4e:9c:b4:6e:a8:f3:67:c5:92:9c:a9:cd:97:bb:28:
05:ce:99:db:66:5b:3f:23:3e:96:c4:4e:da:46:4a:39:5d:e8:
62:a7:64:94:18:12:7e:dd:3f:7e:d1:44:55:c6:8c:23:69:c0:
42:1a:50:f1:00:28:f5:01:69:09:3e:e1:af:df:2b:24:f0:4a:
51:11:23:16:bf:25:c8:f0:f5:06:07:71:ff:2c:89:8e:35:f0:
10:a5:d7:29:db:fe:f6:4f:f3:ef:72:85:38:d0:f8:f0:96:f6:
80:96:7d:65:7e:97:a7:a9:db:a4:c7:70:12:00:46:c1:e3:14:
06:eb:7d:90:d6:8f:51:ed:0d:82:03:68:7e:d2:76:31:cf:9a:
c6:8c:1b:c7:43:29:f3:aa:61:18:6b:0c:af:b2:05:50:6c:3d:
47:58:95:76:cb:83:54:0b:d4:08:68:e9:b8:04:aa:11:cd:2d:
98:72:8e:eb:d5:0f:f5:46:bb:ad:e8:84:5a:2b:d9:c0:8d:c6:
e3:b1:53:f2:5f:b3:ce:61:8f:39:8c:c1:61:27:87:43:79:39:
13:b3:d2:0b:4d:c9:57:00:38:fa:4f:4f:51:a2:e1:ef:e4:40:
7a:f4:6f:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC
MzMwRkREOUQwHhcNMjYxMDAzMDMyNjA0WhcNMjYxMDEwMDMyNjA0WjAYMRYwFAYD
VQQDEw02YWMwNzVjZC1iYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDLCMZrrWGCbkXzculmyQBf5cLoMSw10zap3yKQNUa3hoagqQB+KKDG8FElA
WygAq/0YLqrzluiCJ7TQMYAbrhKayeVAA7fRpSJdalX5mgJBy40gDEMwVfVSKs8K
wbokEkV0KpYq2/bxOg2TQyDYm8KxbZLlgXdKoalsem4IRiP0jYmtuo7yW54+xPEf
aHTtXnud2A7TlG0rX+DDRNm8SpOpSkezt6G5NzEfqShL3BnqC7vpmeuJtgqsUNlJ
nRcWRjnumL5lxLxXv3m9bG1+DEeNYNKrfoa7IEUZK4/owJxT+DwNCeAsl0Y1l3/c
rtT4W+oXRTpUvq5OEjDRhys6QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMZTFH0
Rykx7afwwFfQRRmK25PYMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4
QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw
X1hOcUxDUUdHZml6TVAzWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABrdrhgMK5mywg2KGL6MTuoA3Fb7+Tpy0bqjzZ8WSnKnNl7soBc6Z22ZbPyM+
lsRO2kZKOV3oYqdklBgSft0/ftFEVcaMI2nAQhpQ8QAo9QFpCT7hr98rJPBKUREj
Fr8lyPD1Bgdx/yyJjjXwEKXXKdv+9k/z73KFOND48Jb2gJZ9ZX6Xp6nbpMdwEgBG
weMUBut9kNaPUe0NggNoftJ2Mc+axowbx0Mp86phGGsMr7IFUGw9R1iVdsuDVAvU
CGjpuASqEc0tmHKO69UP9Ua7reiEWivZwI3G47FT8l+zzmGPOYzBYSeHQ3k5E7PS
C03JVwA4+k9PUaLh7+RAevRvUg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:08:14 2026 by rpki-client