
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier: aEvxKBQE92B4/7m6Boy4B67KmA9zLyCSIq7e3ql2Fg8=
Subject key identifier: 90:DF:98:F4:48:C9:6F:FA:4A:17:B8:37:F1:3F:74:DB:4B:8A:05:72
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial: 141D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number: 1413
Signing time: Sat 04 Apr 2026 16:48:27 +0000
Manifest this update: Sat 04 Apr 2026 16:48:26 +0000
Manifest next update: Sat 11 Apr 2026 16:48:26 +0000
Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: 68HK8fhfHT39yY43t6zGHsEWWZMXeTkgH7wqbsMSzOg=)
2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: MDlcdzXufvKhGOKFUxldUFZUq6m6mjYUqAENV0y3O3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5149 (0x141d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Validity
Not Before: Apr 4 16:48:26 2026 GMT
Not After : Apr 11 16:48:26 2026 GMT
Subject: CN=69d140db-ed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:6a:a1:84:8d:b8:2e:53:d8:f9:8e:f8:4e:
32:e9:f9:e9:76:b9:77:15:a1:dc:d9:3a:0a:e0:5a:
0e:78:72:a4:4c:4a:60:f1:3d:c4:43:cd:67:a0:1f:
3a:99:47:5b:57:d7:88:f9:cb:4e:a7:1c:fd:7e:f7:
5d:c1:cb:aa:7b:a4:be:db:fd:17:ef:82:51:80:dd:
4d:2e:31:85:93:bb:1d:87:d3:3f:0e:ce:a3:5d:99:
66:bf:73:e0:1f:a3:11:cb:48:d9:58:de:6c:44:33:
fa:2d:b7:e7:7d:c6:c8:e7:7e:78:10:53:e2:56:15:
ad:f9:6d:2b:bf:24:64:c9:d4:76:4b:35:aa:1a:ea:
42:87:7f:d3:63:33:e4:f0:dc:5b:f5:6e:51:9a:b2:
d6:77:d2:8c:45:17:93:d2:26:a2:8f:28:82:b7:3b:
55:63:66:1d:38:2c:d0:9a:de:57:ac:0e:d4:93:f2:
5c:d2:42:e3:d7:16:a5:f8:2d:66:cb:53:1a:af:5f:
d7:ad:b8:0f:4e:e5:49:0f:74:5b:5a:4d:47:49:d0:
16:4e:a5:3d:c2:dc:e2:00:83:a6:cf:c9:9a:12:ca:
09:fd:58:c6:35:c0:2a:47:ef:44:f9:e7:e8:c7:ab:
f3:31:39:80:9a:d6:e1:ef:38:69:ed:b3:72:bd:ae:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DF:98:F4:48:C9:6F:FA:4A:17:B8:37:F1:3F:74:DB:4B:8A:05:72
X509v3 Authority Key Identifier:
keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:67:9c:76:5f:7c:04:fa:06:e0:0e:5c:41:7e:ec:04:ef:51:
1f:cc:91:8b:a3:96:66:77:33:61:52:c6:7c:36:31:80:17:46:
c7:db:92:f5:70:72:cb:da:3e:af:d0:c5:d1:ff:5c:9a:23:d4:
58:0c:e7:d5:29:65:ab:86:32:ed:8a:e9:3d:5e:c8:06:52:c8:
79:ed:f5:8e:3c:c3:57:3a:05:53:42:f1:4d:1a:8e:e9:79:82:
e4:1c:29:dc:f4:82:67:a6:a8:b4:7a:10:ac:e9:c0:5d:1d:c0:
f0:da:e0:cb:18:e3:a3:34:64:18:4d:33:4c:b3:88:60:6a:35:
6f:52:48:dc:98:c8:a2:7d:86:93:ac:90:2a:b5:a9:49:89:6a:
17:2b:5a:96:7b:35:48:09:69:10:9e:ad:d7:c6:b3:80:06:32:
24:00:5a:68:5e:95:30:16:16:26:b2:b4:a9:88:95:4d:94:c8:
8a:0b:24:79:5e:2c:cd:54:fe:4c:f0:fd:0a:e4:3d:d0:27:6a:
6d:ad:13:bc:b0:e1:3e:3d:7d:af:74:67:73:a5:f2:2f:a1:da:
d6:bf:fd:42:b5:c2:15:75:f3:7a:f4:53:06:2c:d9:6f:c6:8a:
5f:65:fb:65:89:1f:92:98:eb:91:3e:42:eb:4a:7c:81:90:49:
34:4e:9d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:16 2026 by rpki-client