
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
File: NAYp5_yg0jJa2fswVWg0aO8t0MM.mft (raw, json)
Hash identifier: 7zHO5OEDxk+rRVFTuyPyEkfTtiTllr/eACNMX9DlKZ8=
Subject key identifier: DD:5D:E9:48:7A:38:73:2F:3D:91:15:16:D0:E6:B2:44:16:25:83:26
Authority key identifier: 34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3
Certificate issuer: /CN=A91B9477/serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
Manifest number: 39
Signing time: Wed 29 Apr 2026 09:27:01 +0000
Manifest this update: Wed 29 Apr 2026 09:27:00 +0000
Manifest next update: Wed 06 May 2026 09:27:00 +0000
Files and hashes: 1: NAYp5_yg0jJa2fswVWg0aO8t0MM.crl (hash: tb5BWI/Tojru1L1yjbj8U6iaGb+myE149iUHT78VqFw=)
2: 6A1304F0F4DD11F09B4FF218486F56BC.roa (hash: MVWHTycXop2ncCPzUo2tw9R/cfqnpVaE5CQiK4/0/Wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl
rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 09:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9477, serialNumber=340629E7FCA0D2325AD9FB3055683468EF2DD0C3
Validity
Not Before: Apr 29 09:27:00 2026 GMT
Not After : May 6 09:27:00 2026 GMT
Subject: CN=69f1cee5-5602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:be:15:c3:25:87:bc:54:a5:bb:8b:38:b8:
bd:db:ca:75:90:e9:56:06:13:5b:a9:8c:d8:bf:61:
6f:8d:f5:da:d9:47:cf:ee:d6:9e:ef:e9:d3:9c:4d:
3f:e7:ae:09:ca:a2:a1:42:3b:36:81:3a:44:6e:59:
c0:cd:56:13:61:ce:ac:79:d3:2e:a4:b3:10:de:2f:
49:26:41:d6:b3:77:15:80:ef:97:c0:76:7d:d7:ea:
2b:66:71:bd:1e:c6:b9:ae:d4:65:f1:7a:86:17:4f:
d2:47:e3:ae:93:6e:df:f8:9c:45:b3:7c:88:d5:68:
4b:93:02:97:bd:0a:03:40:0d:e2:18:41:14:93:32:
87:15:01:57:4d:47:a4:f0:6f:e0:14:5b:0c:25:a9:
17:19:c0:3c:c3:44:11:1a:15:37:b7:51:9b:7c:24:
13:ce:a3:a6:a7:c6:97:7a:21:3d:ce:ce:1f:be:8d:
45:a9:da:ac:d3:f2:e8:d4:aa:ea:68:5a:4f:fe:3b:
d1:c1:d9:14:7c:e5:f5:df:e6:bc:1d:42:83:76:66:
5a:d7:df:2b:21:e0:49:1d:1f:e1:db:db:02:4b:ad:
49:3a:c7:13:bd:0b:e3:8d:65:04:47:f5:52:87:08:
72:84:df:4c:21:82:7a:ef:30:d9:72:3b:d3:08:43:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:E9:48:7A:38:73:2F:3D:91:15:16:D0:E6:B2:44:16:25:83:26
X509v3 Authority Key Identifier:
keyid:34:06:29:E7:FC:A0:D2:32:5A:D9:FB:30:55:68:34:68:EF:2D:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAYp5_yg0jJa2fswVWg0aO8t0MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9477/1403D576F4DD11F093019087476F56BC/NAYp5_yg0jJa2fswVWg0aO8t0MM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:c2:9c:22:2f:39:ac:64:e4:30:2c:60:ce:b0:61:bd:0b:c2:
3c:f4:67:aa:93:5b:dc:c5:4b:c7:be:62:fa:c1:82:7c:c9:30:
47:38:9f:d2:eb:08:f9:d4:1f:2f:a1:40:a2:f0:0c:ac:0f:7f:
95:82:47:7b:97:2f:16:ed:45:33:1c:f0:ba:44:45:85:9e:ef:
d0:4a:e6:67:c8:c4:36:18:0b:77:bd:e2:1d:26:26:3a:d5:86:
18:40:f0:fd:ed:2c:32:49:a3:21:f1:59:e9:8b:03:c9:b7:7f:
53:bf:33:1c:fd:7f:2d:43:d2:d9:64:a9:ad:80:a9:7b:25:57:
db:81:93:30:5b:d3:18:20:cc:d2:57:bb:1a:e4:be:57:84:30:
68:f4:9c:b7:8a:f0:3e:d7:af:fc:f7:78:e3:23:f9:3a:68:0b:
51:fa:8b:a1:33:8f:ac:8b:d7:9a:43:c9:01:7d:56:51:33:50:
c8:8d:85:2e:26:d2:b8:bf:69:d9:4d:d5:d7:11:d8:ca:48:12:
1d:2b:59:2d:ca:17:f1:8b:6d:7d:12:c1:e6:d0:91:fd:d6:0b:
ca:26:35:67:83:25:6d:93:f9:04:61:63:10:41:44:5b:23:23:
5b:b1:c6:83:93:b6:bc:21:84:5f:da:47:48:f4:a5:a7:a2:1f:
ba:c8:db:80
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
OTQ3NzExMC8GA1UEBRMoMzQwNjI5RTdGQ0EwRDIzMjVBRDlGQjMwNTU2ODM0NjhF
RjJERDBDMzAeFw0yNjA0MjkwOTI3MDBaFw0yNjA1MDYwOTI3MDBaMBgxFjAUBgNV
BAMTDTY5ZjFjZWU1LTU2MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdqL4VwyWHvFSlu4s4uL3bynWQ6VYGE1upjNi/YW+N9drZR8/u1p7v6dOcTT/n
rgnKoqFCOzaBOkRuWcDNVhNhzqx50y6ksxDeL0kmQdazdxWA75fAdn3X6itmcb0e
xrmu1GXxeoYXT9JH466Tbt/4nEWzfIjVaEuTApe9CgNADeIYQRSTMocVAVdNR6Tw
b+AUWwwlqRcZwDzDRBEaFTe3UZt8JBPOo6anxpd6IT3Ozh++jUWp2qzT8ujUqupo
Wk/+O9HB2RR85fXf5rwdQoN2ZlrX3ysh4EkdH+Hb2wJLrUk6xxO9C+ONZQRH9VKH
CHKE30whgnrvMNlyO9MIQ03FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3V3pSHo4
cy89kRUW0OayRBYlgyYwHwYDVR0jBBgwFoAUNAYp5/yg0jJa2fswVWg0aO8t0MMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5NDc3LzE0MDNENTc2RjRE
RDExRjA5MzAxOTA4NzQ3NkY1NkJDL05BWXA1X3lnMGpKYTJmc3dWV2cwYU84dDBN
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTkFZcDVfeWcwakphMmZzd1ZXZzBhTzh0ME1NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5
NDc3LzE0MDNENTc2RjRERDExRjA5MzAxOTA4NzQ3NkY1NkJDL05BWXA1X3lnMGpK
YTJmc3dWV2cwYU84dDBNTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAwwpwiLzmsZOQwLGDOsGG9C8I89Geqk1vcxUvHvmL6wYJ8yTBHOJ/S6wj51B8v
oUCi8AysD3+Vgkd7ly8W7UUzHPC6REWFnu/QSuZnyMQ2GAt3veIdJiY61YYYQPD9
7SwySaMh8VnpiwPJt39TvzMc/X8tQ9LZZKmtgKl7JVfbgZMwW9MYIMzSV7sa5L5X
hDBo9Jy3ivA+16/893jjI/k6aAtR+ouhM4+si9eaQ8kBfVZRM1DIjYUuJtK4v2nZ
TdXXEdjKSBIdK1ktyhfxi219EsHm0JH91gvKJjVngyVtk/kEYWMQQURbIyNbscaD
k7a8IYRf2kdI9KWnoh+6yNuA
-----END CERTIFICATE-----
Generated at Thu Apr 30 19:48:44 2026 by rpki-client