
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json)
Hash identifier: hNodOS7XXXqTCL8r2s/cPrCV/XbEgCAAOaRD54UUwUc=
Subject key identifier: C4:F7:2E:0E:FB:BD:C1:81:05:84:1D:4D:41:7D:93:29:23:7F:7E:B1
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
Manifest number: F4
Signing time: Mon 27 Jul 2026 08:27:29 +0000
Manifest this update: Mon 27 Jul 2026 08:27:28 +0000
Manifest next update: Mon 03 Aug 2026 08:27:28 +0000
Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: kpD0HLjDtvG3cuc7cPjKQbrmzX+XaU5lgJZint5vVcE=)
2: 2A28A576FDA111F08BC1F4B75F6F56BC.roa (hash: i1rnPuXqbnMqAc4PCX48sTcxB0t1JxdfTOj4tcvmsyk=)
3: 2B1F9250FDA111F08BC1F4B75F6F56BC.roa (hash: 9XVTTsK1JeE28Aq3qvoIFUpxYW3yzAOh3tPhanTDLuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Validity
Not Before: Jul 27 08:27:28 2026 GMT
Not After : Aug 3 08:27:28 2026 GMT
Subject: CN=6a671671-ddb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:79:c3:3d:54:f9:9e:fb:e7:23:37:d2:3b:
99:3a:19:9c:14:0d:5d:fe:60:1c:99:94:9b:ff:73:
f9:bd:af:4e:7a:0e:44:73:21:05:b4:a0:3d:db:b3:
e0:47:c3:8f:93:1b:63:94:5b:61:b1:ad:d1:c2:36:
18:17:03:b0:b8:1a:22:9e:7b:5f:01:05:de:3c:9b:
20:67:64:21:fd:8b:5a:f8:13:d3:ef:76:0b:fe:ee:
31:c5:cc:5e:db:2e:83:19:88:6c:45:a6:15:87:cc:
29:6b:9c:f0:17:0c:96:57:10:e8:ac:7e:d7:29:ad:
53:20:a7:52:e9:68:45:01:be:be:dd:75:9e:26:3b:
b6:fc:85:b8:57:7c:89:2c:75:44:8d:f6:9d:2a:4b:
a4:66:87:2a:7a:e3:ab:66:d4:36:44:2b:77:07:d5:
2c:6f:47:e3:75:ee:84:4d:1a:65:25:1c:62:7e:08:
06:b3:de:fc:e2:d0:78:86:d2:d0:89:1f:8e:38:43:
c9:7c:15:8e:fe:20:d0:03:4a:0b:1a:cc:2d:d5:49:
96:5e:ab:4b:8d:0a:ba:ab:4d:b1:6e:55:96:f9:b0:
78:61:ae:94:32:58:af:35:2b:80:f3:48:2a:c4:fb:
e0:2e:cf:eb:47:e7:85:00:e9:27:e3:d6:01:63:46:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F7:2E:0E:FB:BD:C1:81:05:84:1D:4D:41:7D:93:29:23:7F:7E:B1
X509v3 Authority Key Identifier:
keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:13:a6:bd:cd:bb:c8:98:ee:7b:47:56:76:1a:00:0e:6e:c4:
26:52:c0:34:62:b1:8d:af:4a:fd:a4:52:6e:fe:04:41:8e:81:
00:78:f1:40:7e:54:f8:b6:a3:6c:c2:52:97:e8:bf:a0:40:e9:
10:01:2e:8e:55:0a:27:5c:2a:bd:01:9d:ad:65:54:1e:43:92:
99:37:f3:75:3b:8e:d5:c7:8b:21:cf:6b:65:93:24:f6:ad:ac:
3c:a1:da:5a:b2:aa:d5:0f:b4:d1:55:aa:b1:9f:2a:19:e9:fc:
fe:49:6a:42:aa:c3:0c:69:43:96:77:dd:e2:6a:51:b9:04:82:
51:3c:35:b2:54:d2:88:2a:a0:32:df:8f:d4:f5:9b:89:05:d9:
7e:b5:ef:34:5e:11:02:7a:4f:3b:d6:7e:1b:e5:20:e9:41:12:
fe:14:a1:b5:a3:d7:7a:46:8f:bc:20:1d:83:4f:d7:b7:8d:f6:
ea:ae:45:16:58:91:6c:0c:82:03:e1:7b:ea:ec:f4:3f:43:86:
0b:9c:39:f5:da:13:4a:fb:42:df:de:f8:73:4b:24:1f:ba:bd:
06:c3:d7:1c:b7:9e:c6:4d:a7:1d:cf:75:d9:e0:e6:52:68:42:
0e:f2:1e:b7:d7:e3:49:8b:48:bc:fb:fa:bf:42:68:8c:c0:c0:
08:79:1a:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJFREUxMTAvBgNVBAUTKDlEQjI1OEMxNzBCMjMyMjk0RDg2M0Y2MEQyREMwMTIz
Q0RBQUU3ODkwHhcNMjYwNzI3MDgyNzI4WhcNMjYwODAzMDgyNzI4WjAYMRYwFAYD
VQQDEw02YTY3MTY3MS1kZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzZt5wz1U+Z775yM30juZOhmcFA1d/mAcmZSb/3P5va9Oeg5EcyEFtKA927Pg
R8OPkxtjlFthsa3RwjYYFwOwuBoinntfAQXePJsgZ2Qh/Yta+BPT73YL/u4xxcxe
2y6DGYhsRaYVh8wpa5zwFwyWVxDorH7XKa1TIKdS6WhFAb6+3XWeJju2/IW4V3yJ
LHVEjfadKkukZocqeuOrZtQ2RCt3B9Usb0fjde6ETRplJRxifggGs9784tB4htLQ
iR+OOEPJfBWO/iDQA0oLGswt1UmWXqtLjQq6q02xblWW+bB4Ya6UMlivNSuA80gq
xPvgLs/rR+eFAOkn49YBY0b6jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMT3Lg77
vcGBBYQdTUF9kykjf36xMB8GA1UdIwQYMBaAFJ2yWMFwsjIpTYY/YNLcASPNqueJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkVERS81NUNCMkUwNDFB
QjQxMUYwODVERDY5NEFDNEY5QUUwMi9uYkpZd1hDeU1pbE5oajlnMHR3Qkk4MnE1
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25iSll3WEN5TWlsTmhqOWcwdHdCSTgycTU0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkVERS81NUNCMkUwNDFBQjQxMUYwODVERDY5NEFDNEY5QUUwMi9uYkpZd1hDeU1p
bE5oajlnMHR3Qkk4MnE1NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkxOmvc27yJjue0dWdhoADm7EJlLANGKxja9K/aRSbv4EQY6BAHjxQH5U+Laj
bMJSl+i/oEDpEAEujlUKJ1wqvQGdrWVUHkOSmTfzdTuO1ceLIc9rZZMk9q2sPKHa
WrKq1Q+00VWqsZ8qGen8/klqQqrDDGlDlnfd4mpRuQSCUTw1slTSiCqgMt+P1PWb
iQXZfrXvNF4RAnpPO9Z+G+Ug6UES/hShtaPXekaPvCAdg0/Xt4326q5FFliRbAyC
A+F76uz0P0OGC5w59doTSvtC3974c0skH7q9BsPXHLeexk2nHc912eDmUmhCDvIe
t9fjSYtIvPv6v0JojMDACHkafQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:59 2026 by rpki-client