
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json)
Hash identifier: iuMVrmfl3pNXAYNzA1sssucE3XkryGdTqA8pTYyqs1U=
Subject key identifier: C2:C7:27:FC:C5:BD:5F:9A:ED:11:91:A9:26:D2:50:7C:39:80:CA:8C
Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
Manifest number: 0143
Signing time: Mon 01 Jun 2026 06:08:50 +0000
Manifest this update: Mon 01 Jun 2026 06:08:49 +0000
Manifest next update: Mon 08 Jun 2026 06:08:49 +0000
Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: aDVgnQ9rDM7+o5nb8OW3DOvS5LpG6iV8GVXLQ0FmVKY=)
2: B3634C229F4D11F098C42465C4F9AE02.roa (hash: WwFFmG8/4wsEls41tloUK6sLzod+S/W4CA8w6ITWHJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
Validity
Not Before: Jun 1 06:08:49 2026 GMT
Not After : Jun 8 06:08:49 2026 GMT
Subject: CN=6a1d21f2-d3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:fa:ec:ef:4a:ab:52:f0:79:71:a8:2e:e9:
37:0f:e3:d9:7c:fa:61:66:5b:f9:95:84:28:8e:53:
ef:0b:73:14:d3:04:35:f3:ff:e5:c8:1a:79:0a:5e:
41:4a:d6:82:c5:fc:d4:8e:5f:3a:a8:43:ba:c4:d1:
86:b2:d7:e2:70:07:da:82:dc:8e:0f:88:af:80:a9:
bc:73:3a:1b:03:4a:a5:e8:b3:84:80:7c:85:4d:d6:
52:ec:19:f8:d4:1b:3c:67:d9:de:d3:42:a6:37:9e:
71:6f:57:b0:fb:8d:11:5b:81:b2:c0:4d:07:67:d5:
ff:fb:2e:71:fc:ba:02:b5:e1:3b:f9:10:8a:7c:6e:
a7:e1:50:87:01:cb:b3:48:94:d0:07:3c:6a:d9:d8:
28:98:ec:fb:56:c2:f6:08:5b:78:12:26:b7:09:c1:
76:4b:e6:18:a1:ab:ce:00:22:81:37:35:d5:0b:bb:
da:27:b2:54:29:18:69:d5:b7:60:9f:b2:ff:38:e9:
6f:c9:2f:7f:9a:88:c1:b7:95:75:2e:fc:10:1d:3e:
d4:7f:2e:2e:e1:8e:79:d9:79:d3:20:9d:be:08:88:
0c:ae:c2:a1:b1:d5:0c:29:ce:c4:7e:f1:60:60:24:
68:bb:db:46:ef:fa:50:d5:e8:57:49:25:7c:de:b8:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C7:27:FC:C5:BD:5F:9A:ED:11:91:A9:26:D2:50:7C:39:80:CA:8C
X509v3 Authority Key Identifier:
keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:90:cc:06:6e:2f:80:ea:d8:ae:2e:b8:e3:5e:f3:e3:5d:
ce:d0:ab:d8:ec:c2:9f:0a:29:32:97:bf:cc:13:18:4f:6e:81:
18:ad:87:5e:12:53:04:3f:ed:22:e2:15:bc:2d:59:b7:a8:df:
b0:15:d7:56:1e:d4:48:03:92:21:23:58:7b:a7:b3:fc:78:16:
00:66:a4:0e:bf:44:05:e5:b9:a1:a0:02:93:cd:b3:f3:48:17:
70:14:51:9c:32:91:84:76:c5:a1:f0:9a:6e:de:b9:05:35:58:
ac:26:2a:ac:74:b8:ce:29:ab:de:2c:25:be:6c:2a:f1:6f:bc:
19:6e:f4:d2:29:6b:ac:df:9d:94:3d:f7:33:cd:62:24:50:30:
83:19:c6:01:d0:d0:7f:0e:db:3a:a6:96:f6:d1:cc:bd:b1:2e:
4a:77:4c:70:31:82:42:a5:96:c4:18:87:da:68:48:ad:3c:83:
38:2a:27:b6:e4:d5:58:74:0d:d6:27:f4:e9:a6:40:b6:56:79:
21:0c:6d:02:46:fa:9b:49:80:fc:44:4a:e6:08:43:ad:4e:7a:
9a:0d:b7:c5:f8:0f:68:69:83:b5:e9:9f:4c:e5:93:d4:01:80:
ca:bd:6e:43:c7:80:9d:64:90:9c:de:83:15:2e:03:f5:c8:f0:
17:43:f2:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0
MDJCOUYyODEwHhcNMjYwNjAxMDYwODQ5WhcNMjYwNjA4MDYwODQ5WjAYMRYwFAYD
VQQDEw02YTFkMjFmMi1kM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzhP67O9Kq1LweXGoLuk3D+PZfPphZlv5lYQojlPvC3MU0wQ18//lyBp5Cl5B
StaCxfzUjl86qEO6xNGGstficAfagtyOD4ivgKm8czobA0ql6LOEgHyFTdZS7Bn4
1Bs8Z9ne00KmN55xb1ew+40RW4GywE0HZ9X/+y5x/LoCteE7+RCKfG6n4VCHAcuz
SJTQBzxq2dgomOz7VsL2CFt4Eia3CcF2S+YYoavOACKBNzXVC7vaJ7JUKRhp1bdg
n7L/OOlvyS9/mojBt5V1LvwQHT7Ufy4u4Y552XnTIJ2+CIgMrsKhsdUMKc7EfvFg
YCRou9tG7/pQ1ehXSSV83rh1+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLHJ/zF
vV+a7RGRqSbSUHw5gMqMMB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC
RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4
b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY
dmRKdGJkRFNBbnBBSzU4b0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYk+QzAZuL4Dq2K4uuONe8+NdztCr2OzCnwopMpe/zBMYT26BGK2HXhJTBD/t
IuIVvC1Zt6jfsBXXVh7USAOSISNYe6ez/HgWAGakDr9EBeW5oaACk82z80gXcBRR
nDKRhHbFofCabt65BTVYrCYqrHS4zimr3iwlvmwq8W+8GW700ilrrN+dlD33M81i
JFAwgxnGAdDQfw7bOqaW9tHMvbEuSndMcDGCQqWWxBiH2mhIrTyDOContuTVWHQN
1if06aZAtlZ5IQxtAkb6m0mA/ERK5ghDrU56mg23xfgPaGmDtemfTOWT1AGAyr1u
Q8eAnWSQnN6DFS4D9cjwF0PyNw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:31 2026 by rpki-client