
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json)
Hash identifier: rrcbi182sZpYchTcXSOzLjbwJ0yFPTFEwT2+7no/os4=
Subject key identifier: 43:AD:67:69:49:05:AC:61:00:7B:AD:ED:30:95:21:A2:09:0F:8D:10
Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF
Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
Manifest number: 020C
Signing time: Sat 03 Oct 2026 03:47:03 +0000
Manifest this update: Sat 03 Oct 2026 03:47:03 +0000
Manifest next update: Sat 10 Oct 2026 03:47:03 +0000
Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: eiLTSxZ6O4+kugBlQ5pW9IBjuS9eimdBY46YS/bsYjw=)
2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: uZLI87yhkZqBREf9Dkw2+sZTis7hj3RLHWj7/G8COxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl
rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
Validity
Not Before: Oct 3 03:47:03 2026 GMT
Not After : Oct 10 03:47:03 2026 GMT
Subject: CN=6ac07ab7-a8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:2f:c8:8c:1d:5a:75:9e:48:fc:2f:d1:f1:
2a:57:68:8a:e2:39:30:f3:cd:b0:c0:7f:e4:f5:49:
44:a5:f5:15:2e:87:ee:b9:89:0a:e8:ef:e6:ff:1e:
07:ae:e6:d2:25:aa:df:1e:8a:5a:7b:cd:a4:b7:ad:
0f:9e:b6:43:9a:0e:31:e9:ae:4d:31:4b:b7:a8:27:
10:43:91:93:40:b8:39:27:25:39:d4:d0:e8:cd:1b:
18:63:ab:6a:93:7e:c5:8b:3e:e7:de:67:48:9f:8b:
d0:f3:d1:70:9c:2e:d3:a5:6a:3a:14:e8:69:a5:4f:
d9:f1:fa:8e:06:72:af:eb:1f:7e:28:52:1f:3b:58:
05:6c:56:16:6d:82:b3:30:34:69:f3:31:e5:2e:9d:
54:85:fb:dc:4c:7b:7d:6a:82:6e:43:09:50:0d:d1:
1e:af:f0:0b:3d:37:f5:7a:26:e7:12:cc:9c:69:09:
be:83:f3:20:f2:eb:75:b1:a3:09:57:6d:f9:67:ac:
32:e6:6c:30:04:ab:84:90:1c:95:03:92:af:b2:28:
62:e0:e1:93:f8:b8:07:11:ef:23:25:2e:63:c3:21:
b4:31:15:87:3c:58:16:fb:29:e9:00:9c:55:22:b3:
f3:6d:9e:36:e0:6e:8f:2d:3f:40:cc:db:17:e6:4f:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:67:69:49:05:AC:61:00:7B:AD:ED:30:95:21:A2:09:0F:8D:10
X509v3 Authority Key Identifier:
keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:53:61:8a:a0:a0:5d:2b:ef:b6:de:88:a8:71:60:93:19:dd:
3d:54:40:61:98:57:91:61:d0:db:58:41:b5:16:04:e7:96:29:
78:8d:02:1b:84:a0:4b:5f:a9:85:1e:88:c5:2f:28:99:16:cf:
b9:83:da:80:b0:40:c4:60:43:b0:2e:6e:2e:ca:97:5d:1d:63:
08:7c:9f:88:4a:98:08:d5:cb:2c:9f:0c:95:ca:85:81:3a:37:
8a:d8:30:db:7f:18:42:6a:cf:e8:9b:f5:8c:6e:0e:4f:7a:92:
79:17:ef:cb:cc:99:a7:a8:41:3a:ce:56:2a:1d:dd:59:4f:2a:
41:bc:e8:8f:82:6b:71:95:5a:4e:ba:f8:2d:25:45:0b:e2:2a:
3b:06:86:ae:52:cb:69:4e:91:92:cb:63:34:73:31:81:21:f4:
6a:4e:f3:43:7d:be:8a:d7:74:e5:56:4d:78:4b:5e:4c:61:fe:
6d:fc:d0:dc:08:1c:75:82:d2:12:1b:58:e7:87:96:44:9e:61:
0c:be:56:75:78:34:b5:75:e2:5e:b8:1a:b6:50:87:6c:ea:85:
e7:ec:ae:aa:af:d4:1a:d0:61:a8:41:e3:4d:a3:ca:65:a0:fb:
01:a9:5e:76:08:f4:20:0c:ad:98:5b:d9:78:eb:8b:c2:8d:06:
2e:79:e0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:04 2026 by rpki-client