
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json)
Hash identifier: gCcwBbpGcyH4pZW3M95Pf1itGWqh7CEVbndJDwfUT/A=
Subject key identifier: D4:1C:E0:6B:00:DC:E8:26:EE:DF:17:80:85:13:CB:79:00:96:D7:91
Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39
Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
Manifest number: 0127
Signing time: Sat 03 Oct 2026 06:24:17 +0000
Manifest this update: Sat 03 Oct 2026 06:24:17 +0000
Manifest next update: Sat 10 Oct 2026 06:24:17 +0000
Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: nliWstc5QEFw8wAmPMrk3Dftntik/aqv9S8KT2YkcxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl
rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39
Validity
Not Before: Oct 3 06:24:17 2026 GMT
Not After : Oct 10 06:24:17 2026 GMT
Subject: CN=6ac09f91-dd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:f7:1e:df:69:1a:81:7e:41:d2:21:fa:e9:
3e:36:13:41:15:7a:0c:3e:90:46:04:22:88:c3:6c:
71:fd:58:7b:50:be:b0:8b:75:7a:a1:94:84:13:2e:
b7:cc:64:98:a2:17:c3:99:30:9c:dd:bf:08:b6:7d:
9a:63:10:dc:53:a6:81:74:54:a0:57:27:71:e0:52:
92:56:04:55:8c:d5:a2:20:bd:e4:32:3e:d5:27:0a:
4a:f8:a4:7e:3b:7e:9a:50:78:63:39:54:e5:1d:21:
08:02:ae:cd:d7:44:82:39:65:fa:4c:a1:40:fb:0e:
84:6c:c2:0a:6c:09:4c:15:a0:7d:3a:24:da:ee:4e:
0a:a5:17:ee:49:49:c2:7f:61:92:3c:88:3e:cf:40:
70:d3:2f:c8:b2:25:3d:5e:84:4b:1e:4f:b6:b6:8d:
56:d5:29:c8:45:05:0b:7d:8a:54:2b:b1:ee:07:72:
d0:ce:64:3b:9a:f9:c6:f4:0b:e8:d7:97:a4:78:43:
e1:0e:2c:e8:bc:99:47:3c:12:e0:c1:e6:3a:8d:fe:
37:e5:73:71:59:d9:b7:44:9e:bf:07:83:e2:37:f4:
a3:5c:a1:72:85:78:69:74:3d:cb:41:a7:33:f2:12:
cf:6d:50:00:f5:97:f2:bd:6b:a8:a9:5d:4d:c7:70:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1C:E0:6B:00:DC:E8:26:EE:DF:17:80:85:13:CB:79:00:96:D7:91
X509v3 Authority Key Identifier:
keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:f8:d5:52:96:19:60:7f:49:91:93:ed:dc:d4:56:f2:9a:cf:
cf:6a:3f:05:a9:0e:46:b7:09:7a:79:bb:22:1a:39:88:19:ba:
9b:05:5d:a3:37:2e:c6:53:a7:9a:c2:69:a0:03:d3:01:17:c9:
32:ab:bb:1e:69:06:d4:86:f2:b4:70:19:2c:6e:87:d8:aa:6e:
30:dc:e7:bd:3d:4f:46:7a:c8:b6:a3:7b:ac:24:3e:37:f9:47:
a5:95:7d:4d:d7:92:2f:04:51:ab:fd:20:f2:7d:57:0e:4d:24:
92:60:03:c9:08:01:5e:fb:50:12:24:5b:7b:4c:b1:dc:ce:00:
e7:ad:50:5b:63:9d:f1:b2:a1:a2:58:73:fb:7d:0a:b3:0d:51:
45:72:1b:87:46:2d:33:0c:83:92:79:bc:4b:f8:3f:ed:db:b0:
26:bd:bf:58:52:32:28:51:4c:93:f3:3c:31:84:e3:c7:6e:a9:
55:cd:24:8f:71:30:e4:a6:c1:43:91:53:60:fe:d4:17:74:11:
09:de:29:ae:d1:44:ba:44:b7:9b:c1:57:92:60:28:56:1b:b9:
34:80:77:86:08:55:da:fa:88:c7:37:db:d8:66:ed:4a:b6:74:
76:51:5f:a5:da:0a:dc:84:21:c7:12:07:c1:67:4a:1d:32:37:
bd:fd:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:41 2026 by rpki-client