
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json)
Hash identifier: +ysoNERilOM9a2iTJKdWU+AMqcAKM5nZEsNpZgDhsik=
Subject key identifier: C9:BE:39:19:17:0E:96:F7:3B:72:5C:C3:25:5F:64:AF:3A:67:22:3C
Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Certificate serial: 01F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
Manifest number: 01E0
Signing time: Fri 17 Jul 2026 04:37:24 +0000
Manifest this update: Fri 17 Jul 2026 04:37:23 +0000
Manifest next update: Fri 24 Jul 2026 04:37:23 +0000
Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: RrgY1AuPmKmPFwtr1x3M8r3JIpNMjemU/eKhXTnKMn4=)
2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: j9PF6XHW/9cjHdZemEYcO4bIyJTkShVbfz28uJrkeSE=)
3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: gnfLlur8gPdUkwqDHn+eOeiErOoehQs7kmodfs4S4jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Validity
Not Before: Jul 17 04:37:23 2026 GMT
Not After : Jul 24 04:37:23 2026 GMT
Subject: CN=6a59b184-a880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:0f:25:2c:03:28:d7:e6:da:1d:6a:17:96:
6b:4b:a9:2d:bf:aa:bb:e5:bf:6e:8f:69:a0:04:76:
dc:5c:a5:59:03:6c:ff:39:7c:48:aa:45:f1:7b:ba:
7e:96:27:ce:8e:e3:f6:e5:fe:7f:58:d9:2a:c8:b5:
20:c3:64:4d:da:a5:0a:24:d3:47:ec:91:9f:d3:61:
7b:af:08:ba:9d:9b:65:f4:0e:06:b8:73:c7:9f:aa:
42:29:d0:c3:82:65:a7:b0:25:07:78:ab:61:70:85:
94:94:52:58:0e:09:d3:5e:49:4a:70:af:62:0e:ca:
94:20:7c:42:ad:ae:64:24:7e:34:d4:52:3f:25:10:
ea:87:ef:35:d6:0f:27:f7:c6:25:61:dc:a8:37:19:
b5:a2:f3:76:15:de:e8:e1:9d:5b:15:52:01:0f:26:
e2:bc:62:20:e7:02:a1:cc:bd:ec:57:fe:8c:50:cb:
1b:05:f2:06:6d:7d:24:10:f8:a4:c6:ba:d0:93:0a:
30:c4:93:29:72:a7:59:d0:28:a7:42:f6:34:ba:9b:
5e:52:b2:94:5f:bc:0e:16:43:7a:53:82:99:1e:2f:
66:5e:b0:af:ad:1a:1e:4d:35:8d:c5:1e:e8:af:0b:
7e:52:79:2d:7d:ef:fa:71:18:e7:a0:63:5f:2d:73:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BE:39:19:17:0E:96:F7:3B:72:5C:C3:25:5F:64:AF:3A:67:22:3C
X509v3 Authority Key Identifier:
keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:64:99:d4:8a:b4:74:65:93:a0:43:a5:e3:31:30:9c:85:18:
0e:da:bb:87:a6:f9:cf:ab:34:cd:f4:14:fa:ac:cc:cc:ab:0d:
bb:ca:8f:3a:61:13:17:19:11:cf:ea:0a:88:8e:36:e9:b7:fa:
6e:7d:a1:9a:66:38:88:26:c9:0e:e8:56:5d:28:11:df:25:0e:
87:90:f4:fe:fe:ce:67:ba:9e:df:0b:b9:ae:dd:1f:3a:49:15:
8b:cc:2c:e8:de:10:2c:f5:29:16:09:1e:a6:7f:06:be:b7:46:
a1:1a:cb:0e:ba:de:c4:18:52:7f:f4:97:b2:3f:0b:30:ab:68:
cf:6b:db:0b:a5:bb:c0:10:d2:5d:b5:da:71:2e:c6:e0:a9:86:
51:96:9f:4d:9a:d0:dc:62:20:9a:bf:12:70:5b:e1:44:10:0e:
24:c9:1c:61:9e:b6:8b:a9:65:3a:58:3d:8b:33:76:f5:ab:50:
26:5d:f6:8d:ec:4f:44:56:7e:cf:df:b1:99:9b:e3:00:a1:b0:
a3:2d:b8:bf:48:cb:d1:e5:a3:1e:10:a2:91:95:b3:d8:67:95:
48:d5:4f:3e:10:e8:e5:80:13:ee:47:7c:f3:f2:a1:b0:df:81:
5b:59:46:c7:ae:36:6c:42:15:5e:53:06:4f:f9:fc:44:21:4f:
e5:49:ca:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC
OTM3MjU1QzkwHhcNMjYwNzE3MDQzNzIzWhcNMjYwNzI0MDQzNzIzWjAYMRYwFAYD
VQQDEw02YTU5YjE4NC1hODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsiEPJSwDKNfm2h1qF5ZrS6ktv6q75b9uj2mgBHbcXKVZA2z/OXxIqkXxe7p+
lifOjuP25f5/WNkqyLUgw2RN2qUKJNNH7JGf02F7rwi6nZtl9A4GuHPHn6pCKdDD
gmWnsCUHeKthcIWUlFJYDgnTXklKcK9iDsqUIHxCra5kJH401FI/JRDqh+811g8n
98YlYdyoNxm1ovN2Fd7o4Z1bFVIBDybivGIg5wKhzL3sV/6MUMsbBfIGbX0kEPik
xrrQkwowxJMpcqdZ0CinQvY0upteUrKUX7wOFkN6U4KZHi9mXrCvrRoeTTWNxR7o
rwt+Unktfe/6cRjnoGNfLXNTfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMm+ORkX
Dpb3O3JcwyVfZK86ZyI8MB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2
RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU
RjFCOFNBSWM0S2k1TnlWY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPWSZ1Iq0dGWToEOl4zEwnIUYDtq7h6b5z6s0zfQU+qzMzKsNu8qPOmETFxkR
z+oKiI426bf6bn2hmmY4iCbJDuhWXSgR3yUOh5D0/v7OZ7qe3wu5rt0fOkkVi8ws
6N4QLPUpFgkepn8GvrdGoRrLDrrexBhSf/SXsj8LMKtoz2vbC6W7wBDSXbXacS7G
4KmGUZafTZrQ3GIgmr8ScFvhRBAOJMkcYZ62i6llOlg9izN29atQJl32jexPRFZ+
z9+xmZvjAKGwoy24v0jL0eWjHhCikZWz2GeVSNVPPhDo5YAT7kd88/KhsN+BW1lG
x642bEIVXlMGT/n8RCFP5UnKeg==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:52 2026 by rpki-client