
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
File: nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json)
Hash identifier: 7ihKQMQMerfj1enItdtImC5PAMBnQXQK0Jii9kRoAoM=
Subject key identifier: EB:85:9C:99:D1:03:96:3A:6E:4A:B8:E8:D3:19:01:3D:96:93:9A:FB
Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
Certificate issuer: /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
Manifest number: 019B
Signing time: Thu 21 May 2026 04:16:21 +0000
Manifest this update: Thu 21 May 2026 04:16:20 +0000
Manifest next update: Thu 28 May 2026 04:16:20 +0000
Files and hashes: 1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: F5MfpV0Ze672StBv6LyoIVCkD3TNLKr5dDoiNA72iqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CDD, serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Validity
Not Before: May 21 04:16:20 2026 GMT
Not After : May 28 04:16:20 2026 GMT
Subject: CN=6a0e8714-2fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:f0:3c:19:aa:e6:83:b7:ee:4c:94:a1:f4:
b6:fd:28:db:bf:16:11:2a:a8:31:18:b1:43:e9:7d:
13:f3:68:34:4c:d6:c6:23:15:2e:e9:d5:7d:f7:91:
1a:5a:ca:5d:89:32:37:7a:aa:06:34:4c:9a:07:09:
a4:29:00:40:69:01:4b:22:9c:38:71:f0:1b:09:c0:
00:4a:fa:bf:04:bb:0a:9b:72:5a:98:17:d6:32:7b:
65:e5:2f:13:7f:14:c7:0b:68:9d:ff:21:89:11:59:
02:ac:06:25:ad:62:d7:71:88:09:d9:e0:08:c2:e7:
48:36:6f:61:03:46:81:fb:ed:0d:de:5d:34:eb:30:
24:5b:6b:10:41:2d:81:5e:36:b8:60:2f:fb:8f:40:
5b:96:82:f2:cc:5f:cf:ce:3f:58:1b:ec:ab:3d:82:
5a:11:09:a7:04:22:81:7c:f7:84:d5:11:75:53:62:
04:47:f9:a6:b1:6c:57:db:f8:ab:65:85:0e:af:bb:
7a:78:10:ea:49:2c:12:44:97:90:be:d1:96:0d:43:
47:c8:8d:89:34:b2:63:e6:29:e5:fd:90:94:d2:c3:
38:18:ea:c7:95:1b:53:3d:96:f3:d0:7c:bc:af:17:
aa:70:3a:88:b5:65:e0:9b:3a:2b:85:de:06:f2:30:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:9C:99:D1:03:96:3A:6E:4A:B8:E8:D3:19:01:3D:96:93:9A:FB
X509v3 Authority Key Identifier:
keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d3:b5:6a:69:bd:ef:de:1d:2d:73:3a:13:91:f5:02:8b:cd:
30:2e:a4:e6:33:93:34:c7:82:1d:04:1d:04:54:98:8e:b2:f4:
ae:36:4f:50:61:6b:24:69:ad:17:95:50:3c:e0:7d:10:1e:f1:
36:5c:ff:ec:4c:c1:a5:b7:4e:98:1f:54:65:54:5b:43:45:a2:
98:29:39:46:c0:1b:04:c3:b4:bb:27:3e:98:ce:e1:ac:f4:2f:
9b:82:9e:f3:1f:6f:06:29:e8:ce:4f:56:41:50:14:86:8f:6f:
9d:79:54:c4:39:f9:9a:6c:2f:e9:52:7a:48:92:10:cf:d9:5b:
be:78:5a:76:8e:3a:7a:53:01:76:ad:ff:d9:97:5c:da:5b:0c:
bf:43:1d:f8:c5:47:31:eb:95:39:ce:ec:8a:1b:5a:bc:ba:e5:
cd:c0:b1:20:7f:7b:48:fe:39:fd:53:dd:c6:cf:c1:aa:60:e6:
ce:16:db:fc:1c:aa:f0:54:43:25:3b:3d:09:67:79:5c:22:20:
21:68:67:b9:e1:ee:59:6f:16:3c:9d:74:f3:4d:ab:42:ab:89:
2f:87:79:fa:44:d2:b0:ef:10:d3:3a:2c:79:55:c9:d3:fe:65:
6d:25:0a:ef:2e:fb:54:28:13:0b:5e:cc:0f:dd:87:30:a1:bd:
88:10:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:59:25 2026 by rpki-client