
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json)
Hash identifier: 8D3tS7fBT4lR8lZtP+GZfd0MgYxPyrVHJ2VpazlTj5g=
Subject key identifier: 85:1C:C2:9D:B0:1F:44:D3:FC:41:CA:F6:35:31:D6:99:8B:6A:11:F9
Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Certificate serial: 357C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
Manifest number: 3563
Signing time: Wed 20 May 2026 14:43:16 +0000
Manifest this update: Wed 20 May 2026 14:43:16 +0000
Manifest next update: Wed 27 May 2026 14:43:16 +0000
Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: aDvxzmzdTrud/nVuRYLqS7q2WK4s8jhY4IZjESFvXTw=)
2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: b12I5DSwhN0Bm2MDcv3H2tx6IO2KcAPD+wYWdyKS7tU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13692 (0x357c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Validity
Not Before: May 20 14:43:16 2026 GMT
Not After : May 27 14:43:16 2026 GMT
Subject: CN=6a0dc884-57e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:33:35:2a:d6:c6:85:92:34:20:59:b4:85:
96:58:08:b9:7e:ea:d9:2a:13:52:d9:77:38:64:ce:
8d:c0:87:b8:88:75:e5:06:b6:e2:c9:6d:37:b4:89:
49:c4:7d:01:8c:dd:9f:1c:ea:2a:13:d3:34:7e:a1:
94:28:02:d9:54:6a:1a:48:56:1d:8b:5c:7e:ae:37:
33:d0:7e:20:2a:90:70:86:fd:cd:a4:ef:3b:35:72:
d7:05:cc:c6:40:3a:b4:7d:83:0e:47:64:c1:07:81:
77:c1:b7:38:1a:7b:d4:66:88:f9:a9:18:b5:ff:87:
09:59:52:cd:f0:50:c0:19:0d:eb:6a:c8:1f:82:41:
67:28:94:2f:1e:1c:db:cf:cb:4c:67:6d:23:9c:f3:
8b:27:eb:61:36:88:6b:3f:a0:83:4c:b3:46:18:5b:
9b:b0:df:0e:af:b9:06:d1:9b:e0:38:1d:6a:b3:ec:
d0:0d:29:89:71:a6:58:8c:e7:a3:fb:40:77:d3:27:
5b:f6:2b:79:1c:fd:05:c1:03:26:73:f5:18:d5:76:
0a:13:53:0a:e6:02:93:c0:e2:b4:03:2a:69:8b:3e:
ba:aa:86:cc:c0:80:8b:70:d6:6c:f1:ad:45:d5:c4:
5b:6e:40:de:7c:a1:b5:2c:81:9a:04:38:a9:b1:70:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1C:C2:9D:B0:1F:44:D3:FC:41:CA:F6:35:31:D6:99:8B:6A:11:F9
X509v3 Authority Key Identifier:
keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:d6:dc:b0:2a:c1:b8:e7:e5:f8:51:a6:34:40:26:a0:a7:0f:
57:dd:8a:da:80:87:eb:e9:9b:cd:35:0d:81:7d:40:b2:f8:f4:
36:7d:a6:10:3d:e6:fb:25:8d:13:12:f6:99:b7:ed:7a:6e:cc:
c8:25:c8:8b:27:c7:b3:40:3d:99:7e:14:1f:e5:a6:78:9e:6a:
b4:b6:5c:1c:3c:e5:cd:6d:e7:06:b8:b1:3b:77:8b:62:8d:7f:
8e:fd:0d:5d:9c:61:7d:7e:d2:a4:09:aa:2a:ce:1b:38:c8:50:
6f:ed:54:f4:7a:64:cf:00:23:a4:17:84:9b:91:5b:62:03:41:
22:a3:97:84:03:b2:a5:73:d2:e7:c7:14:a8:28:fc:43:4e:25:
9e:32:04:7f:60:4c:7d:10:0c:84:ad:72:4a:7f:bb:7b:77:09:
41:b6:c6:a8:54:0d:19:b5:39:e6:a9:e4:88:ae:dc:3c:7b:c6:
ee:44:db:65:a4:3c:76:0a:ac:56:47:03:59:39:6e:1e:e2:e9:
38:7b:58:a5:09:1f:80:b6:1c:91:0f:36:41:ef:f9:55:20:0c:
e8:38:6d:2d:0d:d8:b7:cb:2a:dc:ac:1d:f9:a4:2e:04:8e:01:
12:5a:04:bb:10:66:2f:51:8f:c0:99:c6:b2:39:c2:bc:cb:87:
62:38:97:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:23 2026 by rpki-client