
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier: DSDoJJ7j4X7sb4ppCS2nivk3w2k4fXuILuDJq+yCOIw=
Subject key identifier: E9:8D:39:2D:9F:70:D8:E6:DE:EA:FF:B2:69:E7:95:59:52:CD:CE:A1
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial: 147D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number: 1472
Signing time: Sun 04 Oct 2026 16:53:21 +0000
Manifest this update: Sun 04 Oct 2026 16:53:20 +0000
Manifest next update: Sun 11 Oct 2026 16:53:20 +0000
Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: R1WPj87LVVkoE0Gmf8Ap7H3RhQCNb2UK8Nvu9XiNhVs=)
2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: +OFCUfBG0g6h4uqeaVuC5IJPXEJlIylKej+6WLVlEu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5245 (0x147d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Validity
Not Before: Oct 4 16:53:20 2026 GMT
Not After : Oct 11 16:53:20 2026 GMT
Subject: CN=6ac28480-2ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:ee:68:f6:a9:a5:e3:04:2a:7a:f2:d0:4f:
db:9b:6b:9c:85:da:74:b7:fe:17:b9:e2:30:b8:48:
2c:05:e5:01:3d:2b:cd:61:62:5b:2d:97:36:18:6f:
4b:ff:4f:cc:db:57:ba:4f:4e:d3:a7:e9:82:2d:42:
00:28:64:ec:5a:02:c9:85:ff:b2:a1:6d:bf:da:32:
4a:a7:6a:ea:84:24:19:fd:a6:55:6c:5c:c5:c3:ef:
5a:24:0b:1c:c0:3a:a3:f9:79:85:a9:93:62:55:5c:
fe:43:6d:01:28:5e:cd:c8:31:7b:40:bb:54:8d:f6:
3a:26:a9:29:48:65:5c:88:96:d7:b4:49:92:c8:c5:
6a:bc:eb:92:32:94:bb:08:e9:5a:be:c3:6c:8c:68:
1b:d6:2e:7d:8c:14:72:50:da:22:98:36:3a:f6:71:
cc:22:f2:17:26:71:80:ee:62:55:fd:93:e2:28:f9:
21:66:d0:36:ae:6e:42:d9:37:76:9f:03:0d:13:aa:
5e:71:5d:4c:b5:2d:c3:8a:a7:a2:49:54:64:cc:8f:
2a:9f:d3:4a:c2:da:c8:9f:c5:ac:e1:80:e4:85:41:
a9:cf:e2:df:8d:bf:56:b8:49:21:56:fa:0b:6e:19:
a7:7a:f7:96:d5:81:1f:77:e0:a7:f1:3f:7c:f6:68:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8D:39:2D:9F:70:D8:E6:DE:EA:FF:B2:69:E7:95:59:52:CD:CE:A1
X509v3 Authority Key Identifier:
keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2e:42:70:0b:e1:e6:d0:bf:1b:14:8a:38:b4:64:51:32:b0:
16:ac:d5:97:ef:7d:cc:97:fd:d4:22:78:4f:77:84:f1:f5:c3:
96:40:82:db:47:74:8b:09:f0:69:60:1d:15:49:17:46:5d:61:
19:ab:16:db:13:31:22:63:4b:27:3a:94:b2:a3:ad:9e:38:05:
db:bc:ec:6b:b7:d0:20:d5:b9:c9:41:ec:e9:1a:2a:e1:08:2c:
4d:e8:c2:19:b2:08:2c:40:67:a6:40:1d:2e:99:c9:47:41:f8:
6f:55:69:73:11:f4:0b:4a:3b:a4:71:35:b9:84:8d:b9:59:8e:
a6:c1:95:8a:01:01:a6:bf:a7:1d:6d:03:6c:9b:2f:32:3f:d9:
a8:1c:9a:03:47:3b:26:29:7c:3e:cd:1c:a6:05:3f:e8:37:85:
90:77:b0:7e:e9:2d:bc:46:a6:77:37:1e:fa:3b:a4:dc:15:a2:
0e:13:c8:19:6b:8d:07:85:3f:f9:68:a8:a4:e5:77:c8:e0:ad:
e6:67:1b:fa:6b:10:9d:9f:ce:89:dd:6e:60:2a:a7:73:9c:fe:
74:2f:eb:b2:db:7a:9b:bd:a7:7f:a2:6d:bd:2b:d6:3b:44:07:
af:8d:21:85:77:b3:c0:70:58:ee:3b:bd:81:6a:c5:cf:e6:d3:
d3:4c:69:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx
NDZBNjMxM0EwHhcNMjYxMDA0MTY1MzIwWhcNMjYxMDExMTY1MzIwWjAYMRYwFAYD
VQQDEw02YWMyODQ4MC0yY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA387uaPappeMEKnry0E/bm2uchdp0t/4XueIwuEgsBeUBPSvNYWJbLZc2GG9L
/0/M21e6T07Tp+mCLUIAKGTsWgLJhf+yoW2/2jJKp2rqhCQZ/aZVbFzFw+9aJAsc
wDqj+XmFqZNiVVz+Q20BKF7NyDF7QLtUjfY6JqkpSGVciJbXtEmSyMVqvOuSMpS7
COlavsNsjGgb1i59jBRyUNoimDY69nHMIvIXJnGA7mJV/ZPiKPkhZtA2rm5C2Td2
nwMNE6pecV1MtS3DiqeiSVRkzI8qn9NKwtrIn8Ws4YDkhUGpz+Lfjb9WuEkhVvoL
bhmneveW1YEfd+Cn8T989mg6twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmNOS2f
cNjm3ur/smnnlVlSzc6hMB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC
MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkJBNS9FNjQ4NEFDRTlCMkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFf
UnZyNUgwNF84VFVVYW1NVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACy5CcAvh5tC/GxSKOLRkUTKwFqzVl+99zJf91CJ4T3eE8fXDlkCC20d0iwnw
aWAdFUkXRl1hGasW2xMxImNLJzqUsqOtnjgF27zsa7fQINW5yUHs6Roq4QgsTejC
GbIILEBnpkAdLpnJR0H4b1VpcxH0C0o7pHE1uYSNuVmOpsGVigEBpr+nHW0DbJsv
Mj/ZqByaA0c7Jil8Ps0cpgU/6DeFkHewfuktvEamdzce+juk3BWiDhPIGWuNB4U/
+WiopOV3yOCt5mcb+msQnZ/Oid1uYCqnc5z+dC/rstt6m72nf6JtvSvWO0QHr40h
hXezwHBY7ju9gWrFz+bT00xpnQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:59:54 2026 by rpki-client