
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json)
Hash identifier: IrPa9fkW4f7a9KoXNGSaSdVfETUv+n8GfVgHp0H0r2k=
Subject key identifier: EA:AC:75:B1:71:BF:D3:02:DA:65:2A:57:83:EC:94:B4:2A:11:F4:3D
Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A
Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
Certificate serial: 0AE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
Manifest number: 1273
Signing time: Sat 04 Apr 2026 19:13:17 +0000
Manifest this update: Sat 04 Apr 2026 19:13:17 +0000
Manifest next update: Sat 11 Apr 2026 19:13:17 +0000
Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: hGTq1XeuXW6i5pAuml7Kt743am/vJv1NJuz0qJ/5VIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl
rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786 (0xae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
Validity
Not Before: Apr 4 19:13:17 2026 GMT
Not After : Apr 11 19:13:17 2026 GMT
Subject: CN=69d162cd-125c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:f8:c1:38:56:a7:8b:68:d7:6c:66:8e:dd:
f2:ae:34:ca:e1:72:45:88:16:ba:20:39:8d:1a:81:
89:f1:2b:0b:fc:bc:72:3a:2b:1c:de:55:c7:c7:aa:
9e:06:ef:26:16:11:0b:53:56:fc:d1:fd:26:9f:a9:
46:cc:1b:d7:8c:9e:a5:84:50:6a:87:63:f0:64:9d:
0f:5d:a4:4d:e1:b4:b2:09:34:ea:c5:0e:ef:c0:2d:
f1:70:83:cf:a8:de:15:d5:42:ac:11:21:f4:9b:a5:
69:11:0b:9c:55:77:97:9e:9c:ed:9d:c0:dc:7f:71:
27:e8:dd:51:2c:7c:f8:2b:da:0e:d3:62:5f:7e:fb:
45:ec:5a:e4:20:7a:c7:b6:d6:bc:e7:bb:5b:e0:0f:
e4:2e:44:a6:62:c8:74:11:c3:f0:05:cc:37:09:e3:
34:75:87:4d:f2:1e:d2:5e:d3:f2:69:09:06:05:dd:
07:b3:33:67:aa:0c:90:a7:a8:51:55:86:ef:1b:b5:
0f:c8:73:34:61:72:7e:63:74:d1:3a:22:e9:69:0d:
3b:0e:9c:c3:5e:97:26:7a:e1:c7:ed:f7:bc:f1:20:
e4:07:70:a8:fc:d7:87:d6:b7:00:1a:37:a5:b1:17:
f1:b5:8f:32:1d:8e:86:7f:28:4d:15:31:a3:01:37:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AC:75:B1:71:BF:D3:02:DA:65:2A:57:83:EC:94:B4:2A:11:F4:3D
X509v3 Authority Key Identifier:
keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:56:16:39:a5:c6:0c:34:50:a2:94:81:12:fe:65:54:fc:c0:
16:a7:37:19:bb:d1:ed:40:16:29:08:b5:d3:9b:16:11:96:f1:
c2:b8:42:94:2c:88:39:79:cd:1f:79:8e:6c:13:b8:4b:27:18:
b3:03:5a:66:3d:23:57:48:56:c0:e7:b6:78:20:55:48:42:8f:
14:76:13:02:df:79:8e:ea:5e:aa:8e:20:b7:e5:4e:35:3d:b9:
fd:d1:e5:dd:96:94:cb:2b:0d:15:2e:3f:0b:70:ee:28:00:4a:
14:35:a8:cd:d3:d7:cb:5c:93:0a:8d:33:fe:46:9b:ac:11:bb:
59:17:4c:fd:07:0b:af:28:6f:19:01:f2:bb:5f:9e:fb:81:9c:
63:4f:0e:f2:7c:57:50:f9:13:44:0b:44:15:62:17:71:28:7d:
02:70:03:81:0d:b2:da:73:e1:11:e9:06:32:dd:68:80:f5:6e:
f5:cc:7d:47:c5:40:3b:a3:a2:08:21:ac:c8:c0:05:68:19:f8:
84:a9:d5:39:e3:43:38:86:6d:a8:bc:44:69:a9:45:45:04:00:
63:0e:3f:7f:a2:c1:d0:ed:8d:cd:a8:2c:eb:b8:4d:5c:62:be:
73:91:fa:59:73:06:83:b4:0a:10:2a:94:05:4c:d2:c0:9d:42:
59:fb:56:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:27 2026 by rpki-client