
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json)
Hash identifier: n/w7xRbXNFiGfIMUqSSwtNu6ehfy3cv3HWzavFGFP1Q=
Subject key identifier: AE:93:60:F5:CE:12:E0:F6:BF:22:6E:AC:3E:26:63:01:F2:53:39:34
Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2
Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2
Certificate serial: 05FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
Manifest number: 05EF
Signing time: Thu 16 Jul 2026 23:27:46 +0000
Manifest this update: Thu 16 Jul 2026 23:27:46 +0000
Manifest next update: Thu 23 Jul 2026 23:27:46 +0000
Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: Fv7yLdN9c0/fGl38qmmss194BCwCETfZygyWhXekmxY=)
2: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: 8wbWE+NHbm5WX/IacxW1nTlGzZjirDSvgH7MSKpS2Nw=)
3: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: UlkMJAnK6fFfP1AdnmJ8vApdDQzCRL9Tu3cGNLiI+BY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl
rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1534 (0x5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2
Validity
Not Before: Jul 16 23:27:46 2026 GMT
Not After : Jul 23 23:27:46 2026 GMT
Subject: CN=6a5968f2-8d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:74:1e:9a:e2:21:69:4d:e1:9f:bf:cf:a7:
ef:b3:b0:db:6c:b2:5f:54:b2:c9:84:0f:0c:ed:9e:
e6:ab:5a:92:42:c4:27:d9:9b:67:73:2f:1d:f7:4d:
4c:56:58:f6:90:b5:cb:13:6a:93:f4:13:66:2a:e4:
1f:e3:76:36:62:1a:cb:d2:0a:b2:7f:fc:1f:18:b4:
da:16:cd:57:cf:c4:d8:c1:8c:8c:6d:ff:4c:3f:53:
fc:af:d8:db:7f:94:ad:4a:89:84:02:1c:c2:a6:a1:
2b:b2:ac:f0:ca:2b:3d:09:34:30:7d:ed:b8:f7:74:
4c:db:2f:ae:3b:ac:d0:7b:b3:29:a6:59:b5:10:1b:
fe:f3:af:e7:ee:39:6b:00:4f:3d:67:af:07:1d:5c:
dd:c7:11:18:10:bc:7d:8c:54:7a:18:a1:99:10:d7:
5f:b8:4c:02:6f:e7:1a:c0:cc:73:aa:49:c1:11:f6:
99:dc:a3:8d:2e:65:ed:10:1b:b5:08:4f:1b:ba:1f:
3e:63:aa:1e:d3:ef:11:bb:d9:4e:bf:00:df:8a:75:
ac:05:2a:10:a5:c8:0f:8f:f7:02:14:8a:e8:d1:5b:
f8:06:d2:21:7c:c8:8e:4f:52:6d:45:29:79:a8:1d:
48:89:81:c9:e9:57:d5:c6:e0:13:70:f0:2e:9d:2e:
95:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:93:60:F5:CE:12:E0:F6:BF:22:6E:AC:3E:26:63:01:F2:53:39:34
X509v3 Authority Key Identifier:
keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b6:eb:20:a8:f6:47:cc:5a:7a:40:cd:c8:ff:ab:92:83:c3:
47:26:1d:ff:eb:73:82:99:ca:d4:b8:a0:88:46:4a:0e:de:1c:
42:8f:54:82:7d:a1:17:17:ce:2a:97:bb:6f:3e:3a:02:13:3a:
b6:9a:46:b7:c8:92:52:fc:83:75:b3:6f:1d:18:a1:95:e0:6a:
a5:23:73:c1:00:38:73:bd:f2:a7:a8:7a:49:aa:32:8d:ce:df:
56:d1:70:11:da:ef:19:da:44:93:49:ce:d6:b5:16:95:1b:74:
51:ce:e7:bb:e7:9f:1c:0a:9a:d6:a9:4e:90:9b:41:d0:bb:ab:
24:94:3a:d8:60:a1:2b:71:4c:0c:31:69:1f:7b:4a:dd:9e:24:
4a:b6:9d:27:ee:ae:92:a3:3f:cd:00:1a:ae:aa:2f:61:3a:e0:
41:49:ee:40:8b:6e:72:05:7d:d7:e3:3e:1f:18:af:43:b0:d9:
fa:87:e5:0e:61:0a:f4:ad:7f:fc:07:9a:e0:69:47:c0:a8:40:
c9:8b:0e:a7:c1:ae:c4:90:ae:98:e8:4d:a6:ea:1e:1b:a6:be:
14:99:74:8f:81:0d:7a:19:3c:f9:f5:d3:95:b0:22:67:d9:7a:
6e:7e:c0:86:70:3b:d4:fb:26:3e:2c:ae:47:41:87:df:9c:c2:
d8:72:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:26:35 2026 by rpki-client