
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
File: nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json)
Hash identifier: nct+zEE/L1Is9XlOcEgb/1lr7pwOn/gEtg3Yjkz4B6E=
Subject key identifier: B0:04:DA:2D:57:E7:D4:C4:22:0E:32:37:C7:9D:63:15:4E:47:0D:8F
Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
Certificate issuer: /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
Manifest number: 01DF
Signing time: Sat 03 Oct 2026 04:08:57 +0000
Manifest this update: Sat 03 Oct 2026 04:08:56 +0000
Manifest next update: Sat 10 Oct 2026 04:08:56 +0000
Files and hashes: 1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: GZGhE3PuijRUXLofQqZDNsnemQs71ao0FYKEqCFy+Zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CDD, serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Validity
Not Before: Oct 3 04:08:56 2026 GMT
Not After : Oct 10 04:08:56 2026 GMT
Subject: CN=6ac07fd9-75ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:72:49:6f:1d:bf:14:27:1e:4e:dc:c6:ef:
27:96:a4:5a:a6:22:b5:55:32:e7:b8:0f:cd:2a:15:
f3:5d:38:78:cd:14:ad:e3:88:d7:da:a5:89:ab:9e:
f5:4d:5f:b8:fd:8e:70:d8:90:ab:5f:0e:96:b4:70:
08:43:22:0a:ac:59:63:61:0b:32:c1:a4:ca:dc:cc:
e1:9a:65:4b:2a:49:dd:1d:b0:5f:50:68:7c:5c:c4:
1c:58:33:6f:68:54:2c:53:18:31:4b:58:57:99:02:
75:ba:7e:77:64:ef:64:12:cc:2a:77:6b:cb:5d:66:
e1:23:20:d7:1b:44:4d:3c:44:9d:d0:a7:1a:7e:92:
6e:c7:91:39:c1:0d:05:ce:38:cc:68:de:7a:2d:67:
a0:0b:c2:05:e2:bb:38:7d:d7:1b:e3:98:0d:d9:cc:
fc:a7:84:fa:da:9f:48:f1:dd:8e:19:26:8c:d4:15:
7f:e4:65:8f:21:c8:96:af:d9:ed:ea:c7:5f:de:e7:
64:0a:d2:22:c9:1a:93:c8:ae:26:2c:c2:7d:af:d7:
01:6a:28:29:17:5e:6f:e3:f9:1f:92:7d:45:18:d0:
0f:cd:00:04:b1:62:b5:21:c5:99:51:da:dc:8a:33:
19:65:51:80:9f:da:e1:bf:97:c0:b2:3d:42:e3:4d:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:04:DA:2D:57:E7:D4:C4:22:0E:32:37:C7:9D:63:15:4E:47:0D:8F
X509v3 Authority Key Identifier:
keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:70:38:0b:10:24:f0:a0:ec:27:35:bc:81:b6:36:4b:c5:16:
43:a7:ae:25:26:84:d6:35:23:c9:ff:4a:18:f9:99:d9:44:45:
ac:ac:40:e5:12:84:df:e0:bc:ff:a3:bd:e6:26:8c:ac:71:23:
ce:67:f2:66:bd:5e:e2:2e:c7:62:87:c5:ec:34:0c:7c:e3:fe:
c9:a2:05:2e:25:54:53:c0:28:ec:a7:9d:dc:7b:73:47:13:a0:
0b:39:1f:d9:db:ae:91:ac:ae:cd:05:07:6c:53:b6:6f:60:9a:
8e:fd:99:61:a9:1f:5f:95:a5:dc:a1:43:39:63:a9:6e:a4:bb:
a7:31:df:f1:7b:79:ae:e7:ad:39:88:fb:04:da:03:b4:c0:1f:
61:60:89:ea:a4:31:8a:7b:9c:7e:09:ce:22:ef:b2:c3:a3:9b:
a5:91:fe:4d:6c:18:c1:11:77:20:c9:95:44:03:08:c6:1e:cc:
c9:bc:57:bf:cd:3a:be:f8:f3:9c:1e:13:8a:37:9e:29:52:43:
04:10:58:ba:51:83:11:73:f7:18:d5:81:3e:c3:c6:80:b1:52:
f6:a4:d1:3e:0a:95:a8:38:0e:1f:e2:ed:3e:cb:5e:fe:9b:7e:
dc:32:23:5a:da:ed:d4:66:28:ec:b4:6a:e9:32:14:82:fb:50:
ff:3d:cb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:18:05 2026 by rpki-client