
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
File: naybVs-kN1sQyJkjPVX2Bx7wgyE.mft (raw, json)
Hash identifier: cxHPfhkK4F1qFYvIeOSuthM8yoE/LBqjx3rsqeulcxo=
Subject key identifier: 88:68:E1:A9:CA:BF:D1:32:73:F0:78:32:C5:F6:99:99:77:BC:87:0C
Authority key identifier: 9D:AC:9B:56:CF:A4:37:5B:10:C8:99:23:3D:55:F6:07:1E:F0:83:21
Certificate issuer: /CN=A91A3C2B/serialNumber=9DAC9B56CFA4375B10C899233D55F6071EF08321
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
Manifest number: 0F
Signing time: Thu 21 May 2026 09:14:59 +0000
Manifest this update: Thu 21 May 2026 09:14:58 +0000
Manifest next update: Thu 28 May 2026 09:14:58 +0000
Files and hashes: 1: naybVs-kN1sQyJkjPVX2Bx7wgyE.crl (hash: YiD86mHGQPbeaZ1hdpXyKAyERzancY0NGNpuMUHESvE=)
2: D041C5C644F711F1A94CB46CCC833773.roa (hash: ujAUvex6eehN8/9sST01/gQAgORLT9YZQ+hSBO6s3PM=)
3: D021169C44F611F1AD994B65CC833773.roa (hash: BzWsJODB8wb2BTymGqiakgMGysHOF2qAkOGM8uSKf0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.crl
rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 09:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3C2B, serialNumber=9DAC9B56CFA4375B10C899233D55F6071EF08321
Validity
Not Before: May 21 09:14:58 2026 GMT
Not After : May 28 09:14:58 2026 GMT
Subject: CN=6a0ecd13-1212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:5f:7b:17:70:7a:81:2f:8e:84:48:e8:18:
b2:de:8e:bd:04:2e:09:4d:70:01:2c:ed:a3:09:d8:
21:86:a8:be:7f:ee:6a:f0:7f:90:2d:ca:a2:6a:62:
11:f1:3c:5c:22:82:0a:8d:2c:4c:f3:58:92:a8:d6:
ab:b8:da:0b:1c:8b:b1:7c:93:37:86:96:5a:d3:6f:
06:9a:1c:c5:31:2e:52:6e:ec:d7:e3:12:6d:69:52:
59:b7:c9:e4:9e:6c:28:c9:40:35:68:49:c4:88:62:
e5:87:de:8b:d2:a6:9b:11:de:58:1a:49:df:13:38:
7c:30:0c:13:4f:35:6d:e7:e9:1f:ad:e2:e6:ab:ea:
42:d1:da:a2:6d:68:2f:17:c3:f0:21:50:4c:d9:5e:
11:8a:db:d2:d0:cb:3f:23:5a:fc:b5:e7:fb:ff:86:
2f:47:9b:24:ac:74:b3:d0:bb:74:e5:bd:a5:98:8b:
85:48:7d:63:86:48:a0:eb:cd:43:cd:bb:bc:a2:b8:
a2:01:2e:36:cc:fa:0e:7a:81:30:2d:05:92:82:2b:
65:79:e3:d6:88:c8:6f:b5:67:a3:ff:c5:db:8e:e8:
35:57:61:b0:4d:8e:c6:dc:7d:f5:54:a4:6b:db:65:
06:fb:ad:cf:a3:6f:8b:02:74:32:f5:07:b1:e7:3b:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:68:E1:A9:CA:BF:D1:32:73:F0:78:32:C5:F6:99:99:77:BC:87:0C
X509v3 Authority Key Identifier:
keyid:9D:AC:9B:56:CF:A4:37:5B:10:C8:99:23:3D:55:F6:07:1E:F0:83:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:8d:bc:c9:3d:21:1f:88:7f:d1:48:92:f5:46:7c:5c:92:8b:
c8:60:a7:e1:3e:19:50:9d:25:b1:7c:1b:12:4f:62:98:70:c5:
95:58:cf:55:9f:bc:eb:c4:a4:1b:10:a8:e2:4c:56:d0:e5:e2:
96:5b:31:dd:c9:8b:b2:df:0d:8e:fb:31:c7:65:02:54:1b:20:
c3:d8:ee:ac:0c:13:8b:97:34:5c:aa:d4:b9:fc:1a:48:f5:84:
44:14:31:54:9d:36:98:9f:54:07:1d:87:3a:94:eb:5e:8f:55:
51:66:0d:4d:67:00:22:dc:8e:a3:c9:72:69:5f:35:c0:1b:f7:
76:89:75:53:c8:fc:5e:ac:cc:44:b4:18:94:f6:c8:c2:d7:e8:
e9:af:ca:7b:ed:e3:fd:80:c1:58:cc:b1:64:ce:76:fe:84:33:
ad:57:d4:5d:2a:ae:d3:0f:eb:5a:48:e9:e1:c4:40:9e:14:42:
cc:1a:9b:fe:93:2d:b2:df:fe:47:6b:59:4e:00:04:b8:70:99:
ee:4c:ba:9b:3b:47:0c:0d:c3:e4:b6:ac:6b:a6:b6:f9:e6:e3:
81:c9:99:62:40:dd:7b:b7:b3:08:90:1d:5e:3e:3e:88:01:17:
cb:40:25:f5:ed:26:66:2c:de:1a:5c:92:8a:b5:0b:b7:23:11:
b0:8c:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:44:03 2026 by rpki-client