
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
File: nMJa0Q0U5nMm84672jnBK4x95YM.mft (raw, json)
Hash identifier: r3SriAnFr+2hGqav7WyiNsofWQq2+5ApYpu/ihf6VQg=
Subject key identifier: 47:AA:4E:4D:62:8F:85:E0:C6:AA:1A:FB:07:9D:36:A5:90:F5:4C:81
Authority key identifier: 9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83
Certificate issuer: /CN=A91AA1F9/serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
Manifest number: 11
Signing time: Fri 17 Jul 2026 10:24:46 +0000
Manifest this update: Fri 17 Jul 2026 10:24:45 +0000
Manifest next update: Fri 24 Jul 2026 10:24:45 +0000
Files and hashes: 1: nMJa0Q0U5nMm84672jnBK4x95YM.crl (hash: EDMTvytpoCarh8WiovaPvNWOu7SAlGwNEDI5diV15mk=)
2: 375CD0C4687B11F18B8955F26647A888.roa (hash: NFBGXohwTAbP6RYJ9RBlPbPILrA7Ch+/AQAFkCpBYas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl
rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA1F9, serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583
Validity
Not Before: Jul 17 10:24:45 2026 GMT
Not After : Jul 24 10:24:45 2026 GMT
Subject: CN=6a5a02ee-864f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:47:4f:85:cb:9d:53:af:2a:1d:9d:5b:5a:
ff:85:5b:70:34:e3:ec:b7:e7:5f:5d:11:c6:64:c7:
c8:b9:0d:14:d3:2a:3f:90:2a:87:4d:b8:e2:10:33:
36:d3:84:bf:48:f9:ae:30:34:ff:4c:a0:20:a2:be:
d6:3d:46:68:2c:ad:dc:0c:50:a5:88:ab:e1:30:af:
4c:4d:e4:87:35:75:b9:4a:93:f2:09:60:ff:b3:0c:
ed:ab:4a:ea:d6:9d:3e:7d:a5:a0:8e:7c:f5:c3:de:
9b:2f:d2:8f:4d:b3:22:ba:de:d9:1f:41:e7:1c:15:
a4:61:05:09:89:83:fd:f2:ec:b7:e8:34:19:8f:f6:
6f:c4:3e:13:80:db:92:2d:c8:0e:8a:fc:75:a2:e2:
10:9c:d2:71:19:7d:dd:bc:1a:19:25:a0:67:0b:c5:
35:4f:49:25:fa:9b:1f:9a:2d:3e:99:36:9f:0d:e6:
90:69:53:dc:99:7d:21:6a:f9:01:70:39:9a:20:37:
78:67:fe:43:67:73:fd:b2:e6:be:77:b7:80:87:30:
40:93:16:e5:56:90:32:38:85:40:0e:fa:cd:8b:57:
d1:4a:1a:e8:2a:eb:1f:de:10:8c:7b:31:3e:db:55:
a7:d0:13:68:0a:63:9c:6f:62:67:5b:3b:2c:90:cc:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AA:4E:4D:62:8F:85:E0:C6:AA:1A:FB:07:9D:36:A5:90:F5:4C:81
X509v3 Authority Key Identifier:
keyid:9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:f6:e0:e2:87:43:a7:0f:e5:9b:7b:7f:7d:2d:1d:8d:ab:6b:
e0:2f:d4:a1:dc:11:4d:e9:3f:54:0d:72:e8:0e:6d:98:2d:02:
b1:69:2b:9c:4d:9d:dc:05:e0:46:3d:d2:59:7a:27:0c:48:bd:
3f:0a:cf:3d:e7:67:5d:8a:cf:46:47:6d:a1:a2:87:cf:da:c1:
22:65:36:04:8d:e9:fc:d0:31:a5:42:35:1d:83:76:5e:7d:eb:
58:7e:3a:7b:c5:5f:53:26:5e:32:81:71:52:d0:87:8b:22:10:
4f:6b:c7:86:b7:a9:6b:97:1b:f5:9d:f3:77:34:3c:c4:bc:cd:
a3:cd:66:80:8f:1f:94:a1:e4:e1:f5:8a:6b:3f:3b:08:1b:e3:
67:27:c6:34:99:2d:a0:64:3c:2c:f0:8d:b4:ef:ed:64:cd:e1:
9c:2d:b0:e5:57:c1:2a:64:25:73:61:0e:52:ad:95:e5:20:43:
9e:95:e2:b6:2d:80:94:6d:e7:4f:21:37:d1:91:9b:67:00:f9:
c6:d6:eb:b3:e5:d3:2f:7a:db:a3:7a:bd:11:bd:04:b3:46:45:
e0:15:d1:f9:04:ac:7c:05:d2:31:74:41:79:43:4a:d0:84:47:
31:71:de:0a:69:37:85:69:29:e6:d8:1a:44:ec:90:eb:59:c5:
35:b8:70:24
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QTFGOTExMC8GA1UEBRMoOUNDMjVBRDEwRDE0RTY3MzI2RjM4RUJCREEzOUMxMkI4
QzdERTU4MzAeFw0yNjA3MTcxMDI0NDVaFw0yNjA3MjQxMDI0NDVaMBgxFjAUBgNV
BAMTDTZhNWEwMmVlLTg2NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBDkdPhcudU68qHZ1bWv+FW3A04+y3519dEcZkx8i5DRTTKj+QKodNuOIQMzbT
hL9I+a4wNP9MoCCivtY9RmgsrdwMUKWIq+Ewr0xN5Ic1dblKk/IJYP+zDO2rSurW
nT59paCOfPXD3psv0o9NsyK63tkfQeccFaRhBQmJg/3y7LfoNBmP9m/EPhOA25It
yA6K/HWi4hCc0nEZfd28GhkloGcLxTVPSSX6mx+aLT6ZNp8N5pBpU9yZfSFq+QFw
OZogN3hn/kNnc/2y5r53t4CHMECTFuVWkDI4hUAO+s2LV9FKGugq6x/eEIx7MT7b
VafQE2gKY5xvYmdbOyyQzIhNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUR6pOTWKP
heDGqhr7B502pZD1TIEwHwYDVR0jBBgwFoAUnMJa0Q0U5nMm84672jnBK4x95YMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBMUY5L0M4MDRDRUEyNjg3
QTExRjE5RTcxNDREQjY2NDdBODg4L25NSmEwUTBVNW5NbTg0Njcyam5CSzR4OTVZ
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbk1KYTBRMFU1bk1tODQ2NzJqbkJLNHg5NVlNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB
MUY5L0M4MDRDRUEyNjg3QTExRjE5RTcxNDREQjY2NDdBODg4L25NSmEwUTBVNW5N
bTg0Njcyam5CSzR4OTVZTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAR9uDih0OnD+Wbe399LR2Nq2vgL9Sh3BFN6T9UDXLoDm2YLQKxaSucTZ3cBeBG
PdJZeicMSL0/Cs8952ddis9GR22hoofP2sEiZTYEjen80DGlQjUdg3ZefetYfjp7
xV9TJl4ygXFS0IeLIhBPa8eGt6lrlxv1nfN3NDzEvM2jzWaAjx+UoeTh9YprPzsI
G+NnJ8Y0mS2gZDws8I207+1kzeGcLbDlV8EqZCVzYQ5SrZXlIEOeleK2LYCUbedP
ITfRkZtnAPnG1uuz5dMvetujer0RvQSzRkXgFdH5BKx8BdIxdEF5Q0rQhEcxcd4K
aTeFaSnm2BpE7JDrWcU1uHAk
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:27 2026 by rpki-client