
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json)
Hash identifier: /ezmshtUu/6H/L2IftAw7YKs78iS/NQG2Aa7PdTsYJc=
Subject key identifier: 73:05:DB:AC:CA:72:8C:63:03:33:D1:D3:61:FE:0F:E8:C3:A9:13:99
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial: 1D1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
Manifest number: 1D03
Signing time: Wed 20 May 2026 16:08:46 +0000
Manifest this update: Wed 20 May 2026 16:08:45 +0000
Manifest next update: Wed 27 May 2026 16:08:45 +0000
Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: msurQbTbUpi0InMTqixQRy7Ec3D5kWwug7I7ac25Wy4=)
2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: Y1gVzkwfOLuyPoIfE59zPK8DMvF4H060KJy8V8tGtwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7455 (0x1d1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Validity
Not Before: May 20 16:08:45 2026 GMT
Not After : May 27 16:08:45 2026 GMT
Subject: CN=6a0ddc8d-b837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:50:e9:1a:eb:ae:ca:7b:59:09:1a:ad:f9:
43:67:d9:49:fc:3c:ea:23:8c:30:00:fb:b2:9b:0d:
bb:1a:fc:dd:3a:db:6e:8f:b5:72:4a:2a:f3:86:10:
62:3f:85:25:3d:6c:85:e0:25:35:7d:27:35:ec:2d:
a0:a9:ec:ac:1b:78:4f:a6:1e:90:30:e4:1a:62:d1:
53:ea:c0:57:f1:3d:75:d8:96:d9:08:b6:fe:29:e3:
26:37:73:54:81:d5:c7:fe:da:01:5d:a3:2a:f9:3b:
ce:65:4d:b6:90:cb:55:4e:a1:61:b8:ad:c7:cb:59:
34:10:ec:35:fa:40:79:a9:94:1f:9b:69:37:e4:98:
25:28:7c:5d:7c:7f:e1:1e:fe:a0:61:d9:ab:db:c8:
0e:91:65:e9:13:13:88:da:57:19:40:dc:d3:ba:cc:
a8:59:d3:b4:18:ac:48:68:6a:ea:43:d1:0a:e3:b0:
65:cd:81:3e:b5:3d:98:89:cf:10:c2:07:e7:53:f5:
6d:84:58:12:95:4d:56:d0:c7:22:7c:cf:1c:3b:39:
a6:31:6b:3f:61:a6:93:f9:bc:39:38:02:38:a9:00:
ba:46:57:20:00:e9:c0:a6:f3:1d:d7:a1:74:48:04:
5e:0b:b2:bd:27:94:12:c5:7e:0b:f9:8e:8c:2e:c9:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:05:DB:AC:CA:72:8C:63:03:33:D1:D3:61:FE:0F:E8:C3:A9:13:99
X509v3 Authority Key Identifier:
keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:6c:07:f5:90:68:ce:11:fd:9b:c9:5f:fd:9f:ea:9c:ec:10:
1f:30:08:a5:4c:58:6f:cd:2f:99:a5:8f:4e:7d:fb:4e:7a:e6:
bc:7c:d4:a1:a5:9c:c4:01:fb:ce:04:a6:c8:0f:bf:17:52:9c:
02:a2:4c:56:7c:5d:2e:95:35:e6:39:8e:ed:0a:92:43:d5:a7:
31:e4:21:52:38:ff:40:a5:e7:b6:29:b9:b9:4e:87:2b:d0:76:
04:7d:e2:0c:b0:46:41:e1:cf:17:fd:8e:a2:a2:e1:2d:9c:92:
24:21:ba:76:3b:b0:22:3f:ba:fb:d2:9a:05:a7:8b:97:0e:82:
54:2f:ad:86:7c:de:98:c3:4d:0c:0f:ee:82:96:5a:ed:2c:24:
4b:ba:d9:2b:58:0d:fd:c8:39:da:3a:c3:8b:9e:27:b2:03:aa:
41:8f:70:2d:cb:13:27:31:20:a9:87:2c:ca:37:10:f3:d9:c3:
29:8c:c9:63:10:22:46:78:fc:62:95:d3:d0:aa:2a:ca:26:ef:
0d:c1:4c:0b:46:a1:e2:0b:70:0a:fd:e5:05:61:80:40:db:52:
45:a5:94:bc:aa:2c:26:3e:2c:77:2c:40:5b:2c:1f:e4:3d:ec:
d4:e9:c3:12:d7:05:11:dd:29:4d:6e:73:4e:5f:fe:ed:f5:b6:
a2:1e:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:32 2026 by rpki-client