
$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json)
Hash identifier: jPigj4gR5PNtKS/Siu+ZsGyS6fyfEVVhKXPP977SEuY=
Subject key identifier: 73:8A:3A:FB:9C:A3:3B:E7:B9:B5:17:C3:A5:92:56:AF:7F:71:9C:3F
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
Manifest number: 01CD
Signing time: Sun 05 Apr 2026 03:14:28 +0000
Manifest this update: Sun 05 Apr 2026 03:14:28 +0000
Manifest next update: Sun 12 Apr 2026 03:14:28 +0000
Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: 7Pixyg1ZrYgz13L58n5Lu/pTKRgawwzIi8wdxGkZdL8=)
2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Validity
Not Before: Apr 5 03:14:28 2026 GMT
Not After : Apr 12 03:14:28 2026 GMT
Subject: CN=69d1d394-a225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:eb:61:a9:5b:b6:7b:9e:f0:b8:10:a7:62:
a2:3e:b1:4e:c4:95:d2:1e:60:e4:59:d9:12:28:7b:
54:65:47:45:90:a2:16:33:2c:a2:60:08:ca:d5:14:
a6:e9:45:f4:30:f1:b6:61:9a:5e:43:28:a4:b3:8a:
8f:c0:1a:5c:0a:f3:9f:18:00:0b:9e:17:8f:58:33:
0c:d0:80:aa:c0:a6:cb:48:cc:f3:fb:f3:ad:bb:87:
19:dc:c1:3d:c1:dd:25:32:08:88:e2:ae:d8:ba:51:
b8:27:58:38:59:dd:a5:42:5a:05:b5:b0:6a:39:c4:
90:9c:1f:29:59:77:61:bd:be:cb:4d:f0:09:e3:72:
2b:04:f9:b5:b9:2e:24:ac:04:12:57:a3:27:2c:46:
32:4f:a4:44:c9:db:a5:79:7c:c2:b2:00:45:f6:30:
03:6c:33:68:a3:1f:b7:03:2e:cf:4f:ff:56:4a:3a:
c5:2d:1d:e3:09:10:fb:77:f1:66:b1:d0:b6:d7:c2:
4c:df:cb:2a:34:a3:7f:52:b5:23:df:06:6b:c0:04:
c9:44:06:21:05:35:b2:fd:90:19:f2:c8:89:10:16:
d6:ae:d9:d6:e5:6a:66:27:4f:43:0d:08:c4:a4:ec:
6d:b6:ec:e8:50:02:e2:9e:37:ce:40:0e:5f:d8:f7:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:3A:FB:9C:A3:3B:E7:B9:B5:17:C3:A5:92:56:AF:7F:71:9C:3F
X509v3 Authority Key Identifier:
keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5f:3e:4b:3a:d9:cb:84:65:94:b4:92:63:b4:98:ec:ec:19:
32:f7:ae:0c:e7:ff:fc:be:9a:7c:e6:f7:08:91:85:52:48:5a:
e7:f2:32:89:ec:17:de:dc:9c:4f:be:ac:f7:49:ec:9c:54:65:
28:d4:46:d8:a4:b1:d2:2b:79:2b:6e:47:e3:16:0c:07:c3:00:
ac:ff:de:20:12:32:bf:27:96:24:0f:46:9d:78:38:26:cf:66:
67:00:ea:5c:0e:8d:a5:e5:8c:3f:22:61:67:b3:60:91:ae:92:
05:7a:a3:f8:54:50:cb:24:7e:ec:36:f1:9b:f9:88:4a:ee:42:
b3:52:b9:47:d9:8c:ac:c2:4b:d0:fd:1c:21:da:94:51:49:e5:
05:cf:57:f7:9b:72:f9:ea:6f:65:47:f1:9f:bf:ec:1b:42:fa:
5d:80:4c:1c:4e:f8:1d:ec:5f:55:ef:28:34:fc:be:4e:35:0f:
86:fa:61:60:c6:04:c8:01:cb:5d:b3:c8:bb:86:69:be:f8:1c:
c0:15:25:1b:3d:b2:31:07:50:18:93:a8:cd:8d:a5:a2:70:47:
0e:8a:af:b7:18:7f:81:c2:02:88:f6:cf:d8:b3:48:c4:8f:b9:
1a:ab:78:67:77:e0:75:a4:86:9e:f2:dd:83:2f:29:4f:ef:a8:
47:e9:5b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:56:49 2026 by rpki-client