
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json)
Hash identifier: Yu+RDBBvYOqk53BPhla9THBPuXVT8N9lQeEFzIBKfvA=
Subject key identifier: F8:64:71:DA:9F:95:FE:7E:27:4D:C5:F5:D2:18:F6:BC:63:1E:EE:B1
Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C
Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
Certificate serial: 0B3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
Manifest number: 0B30
Signing time: Sun 04 Oct 2026 19:20:12 +0000
Manifest this update: Sun 04 Oct 2026 19:20:12 +0000
Manifest next update: Sun 11 Oct 2026 19:20:12 +0000
Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: Gbw7T6n9rvXJRSCA5ZtK/MNjFkkpT49e4HShnyTza0M=)
2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: 27XzgPYM591+AmGw9aI7U6vPsdo/FxtR92lobcxlp4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl
rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2879 (0xb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
Validity
Not Before: Oct 4 19:20:12 2026 GMT
Not After : Oct 11 19:20:12 2026 GMT
Subject: CN=6ac2a6ec-d74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:38:fb:d7:20:4a:db:4b:aa:70:36:74:49:
56:26:cc:52:c6:c1:68:fe:c6:28:1d:43:91:36:cc:
af:8c:3f:7b:1b:2c:dc:dd:15:88:63:09:7b:19:1e:
87:6d:4f:db:53:92:62:31:89:bc:ad:6e:4f:3e:a3:
54:7f:55:dc:f5:11:c7:11:35:6b:0e:b0:27:89:72:
e8:cb:d8:36:b0:12:db:50:27:3e:64:e6:62:ea:c3:
70:4a:cc:4c:a3:18:53:25:f9:bd:c5:9a:73:06:e4:
10:42:59:a7:dd:ea:7b:de:a9:97:e4:25:cb:de:66:
3a:a1:5d:f7:e8:13:f0:bb:5c:e8:5d:d9:34:36:02:
06:43:dd:02:34:d6:9b:77:86:92:6f:d4:d2:94:3d:
b3:dd:fe:69:e8:55:b3:2f:4e:e3:58:6a:6e:9a:f9:
57:3e:ff:4e:e5:f1:01:d5:e9:9a:66:54:48:87:86:
17:6c:3a:ad:1c:3a:ac:95:d3:49:07:8a:aa:87:2d:
c5:00:fa:6a:d3:d4:6d:8c:3a:fa:29:e2:71:fd:d2:
e9:5d:dc:19:b4:a6:f0:e7:30:ab:69:75:c9:d2:53:
19:3c:60:68:33:41:3e:26:c4:04:cf:1e:17:41:e1:
fd:fa:92:36:4a:dd:d1:93:55:0d:a8:e5:17:d1:79:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:64:71:DA:9F:95:FE:7E:27:4D:C5:F5:D2:18:F6:BC:63:1E:EE:B1
X509v3 Authority Key Identifier:
keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:61:6a:a7:0c:32:72:f7:6f:98:d2:99:d9:f5:69:35:61:52:
5e:9a:4b:3a:b2:8c:1e:5c:8e:69:6e:ff:a9:cb:10:3f:6a:0b:
ec:b9:ca:cd:2b:1e:05:41:3d:48:ca:f2:01:3a:3d:70:f4:69:
02:77:07:95:d6:92:0a:ec:56:3d:04:63:dd:f0:70:eb:de:e7:
ea:af:20:c2:49:77:9a:bb:1d:26:17:9a:4e:3a:98:ee:2a:6f:
df:04:4b:ae:59:b1:d9:1c:ce:ee:de:75:98:8a:d4:d1:e4:07:
f7:20:f7:09:a1:e4:d8:20:3f:f6:69:1a:9c:53:88:04:9c:4c:
ba:14:29:d0:46:a8:00:da:c7:f3:60:af:06:ce:a4:67:72:27:
71:69:20:5d:1b:fa:08:a5:ed:26:50:96:c8:e2:b4:32:77:16:
e4:ec:7d:88:61:b9:b6:5b:d7:2f:ff:68:b2:dc:61:4a:be:3f:
55:a8:48:99:87:67:b8:c5:c9:ec:20:5c:2a:c0:73:d7:24:e3:
90:e0:f8:1e:8a:2e:06:c9:28:7a:00:c9:a2:fc:e1:99:b7:5c:
c0:57:ba:01:ad:4b:9b:ff:cd:6f:90:86:0a:19:a3:49:be:56:
29:29:f9:5b:53:84:53:11:c6:1e:b0:91:42:a6:34:c2:5d:dd:
aa:19:4a:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1
MDIwNTlGMEMwHhcNMjYxMDA0MTkyMDEyWhcNMjYxMDExMTkyMDEyWjAYMRYwFAYD
VQQDEw02YWMyYTZlYy1kNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslk4+9cgSttLqnA2dElWJsxSxsFo/sYoHUORNsyvjD97Gyzc3RWIYwl7GR6H
bU/bU5JiMYm8rW5PPqNUf1Xc9RHHETVrDrAniXLoy9g2sBLbUCc+ZOZi6sNwSsxM
oxhTJfm9xZpzBuQQQlmn3ep73qmX5CXL3mY6oV336BPwu1zoXdk0NgIGQ90CNNab
d4aSb9TSlD2z3f5p6FWzL07jWGpumvlXPv9O5fEB1emaZlRIh4YXbDqtHDqsldNJ
B4qqhy3FAPpq09RtjDr6KeJx/dLpXdwZtKbw5zCraXXJ0lMZPGBoM0E+JsQEzx4X
QeH9+pI2St3Rk1UNqOUX0Xn66wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhkcdqf
lf5+J03F9dIY9rxjHu6xMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE
QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6
Y3d1bU02UlFDdlZRSUZud3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMmFqpwwycvdvmNKZ2fVpNWFSXppLOrKMHlyOaW7/qcsQP2oL7LnKzSseBUE9
SMryATo9cPRpAncHldaSCuxWPQRj3fBw697n6q8gwkl3mrsdJheaTjqY7ipv3wRL
rlmx2RzO7t51mIrU0eQH9yD3CaHk2CA/9mkanFOIBJxMuhQp0EaoANrH82CvBs6k
Z3IncWkgXRv6CKXtJlCWyOK0MncW5Ox9iGG5tlvXL/9ostxhSr4/VahImYdnuMXJ
7CBcKsBz1yTjkOD4HoouBskoegDJovzhmbdcwFe6Aa1Lm//Nb5CGChmjSb5WKSn5
W1OEUxHGHrCRQqY0wl3dqhlK4g==
-----END CERTIFICATE-----
Generated at Mon Oct 5 11:48:19 2026 by rpki-client