
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json)
Hash identifier: JyQyp8eXFbN4oU5MJjz4r81FXanIGF2i+xBFoMYXil0=
Subject key identifier: 3E:1A:96:0C:19:AB:04:CE:B3:89:EA:4B:C0:01:E2:CB:5B:CB:4F:2A
Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A
Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
Certificate serial: 0B42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
Manifest number: 1333
Signing time: Sat 10 Oct 2026 19:18:00 +0000
Manifest this update: Sat 10 Oct 2026 19:18:00 +0000
Manifest next update: Sat 17 Oct 2026 19:18:00 +0000
Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: Kp7QrVJ7e5xkgkCy2JBsMFzJSpPovF0MUzxD80aDCqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl
rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 19:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2882 (0xb42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A
Validity
Not Before: Oct 10 19:18:00 2026 GMT
Not After : Oct 17 19:18:00 2026 GMT
Subject: CN=6aca8f68-761c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:97:d8:79:3a:73:98:86:18:e4:4c:55:6f:
44:55:8a:8e:71:12:61:2d:e8:38:64:46:f7:d7:8d:
c5:33:d0:fb:1e:2f:4a:f8:aa:12:49:6e:07:d1:89:
9b:31:7d:2b:28:7d:19:0e:82:75:49:17:71:f2:3b:
6d:c6:f5:48:fa:65:df:01:f6:da:10:67:76:df:a7:
df:4e:9f:d3:b4:52:06:d6:a6:48:b1:f3:09:22:dd:
e0:c3:1f:dd:a3:3f:d8:82:1a:69:01:6c:c8:a2:b4:
00:72:4f:77:14:26:0d:f2:d3:ce:11:f7:44:22:e4:
d1:f5:34:71:bc:5e:d3:7c:5b:2f:5e:37:a1:f2:50:
96:5e:f0:d0:2c:59:b1:04:31:81:f4:da:20:02:f8:
0f:02:40:42:18:27:9c:16:e4:0c:a9:1b:e9:c7:52:
96:74:2c:4c:90:80:cc:f5:ff:98:1b:14:21:0a:30:
ee:70:47:8d:2a:8f:51:40:16:d5:a7:75:0e:a0:70:
0d:c8:b6:e4:e9:0b:cc:e8:c8:e0:46:82:0c:24:74:
e0:2b:6c:58:da:e6:16:a9:e0:43:ff:2b:9c:09:79:
54:eb:ec:fd:3f:32:05:b6:98:30:af:28:3f:7e:c1:
b2:03:04:29:a3:cc:d0:c7:52:02:77:37:55:74:42:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:96:0C:19:AB:04:CE:B3:89:EA:4B:C0:01:E2:CB:5B:CB:4F:2A
X509v3 Authority Key Identifier:
keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:af:4b:88:c9:8a:fb:d6:a2:fc:72:2e:2a:19:f6:46:e9:6c:
46:c0:92:82:1d:0d:08:5f:15:e7:19:32:09:66:6d:d2:f8:3a:
c5:b3:fb:04:25:f2:4a:44:1c:38:0e:24:63:ea:69:a6:56:31:
a7:d1:99:a7:a5:5a:c1:b0:6a:29:f8:43:33:71:df:a2:54:ff:
1a:ab:8b:63:1f:61:48:c4:e5:81:05:fe:7f:9e:df:8c:c1:b6:
fa:83:80:0b:62:70:80:37:4a:6f:08:e2:29:50:70:7e:f3:de:
4f:08:04:ea:9b:0c:7f:84:be:17:0e:50:dc:36:61:03:a2:a6:
36:ba:fb:42:17:f9:06:80:b7:0a:0d:72:a0:6a:a0:02:1b:28:
b2:50:bb:cf:ee:bd:cd:54:d9:7a:28:89:3d:42:c1:cb:ad:86:
97:73:de:05:71:ee:3a:bd:36:e5:e7:f3:21:ab:80:f6:fc:63:
82:64:dc:46:b2:82:f9:00:b6:e4:c4:bd:43:4f:6e:2b:1a:dc:
2d:33:d2:42:2b:aa:60:97:5f:85:2c:37:55:66:d7:1a:16:f5:
c2:3f:6f:89:c9:57:cf:45:53:96:13:4c:8e:ea:b7:e5:b8:f2:
d1:bb:e0:3b:1a:08:19:35:48:5b:58:50:2d:79:67:06:27:c2:
ba:9c:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:24:38 2026 by rpki-client