
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier: Xhtl/qmmLijMP6gpUGpYZQsKkpggvR71w4M2fviAdwo=
Subject key identifier: 83:CE:6C:DD:34:46:5F:77:01:0F:46:A8:A3:34:7F:57:C1:3C:EA:3C
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer: /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number: 0172
Signing time: Tue 03 Mar 2026 04:22:08 +0000
Manifest this update: Tue 03 Mar 2026 04:22:07 +0000
Manifest next update: Tue 10 Mar 2026 04:22:07 +0000
Files and hashes: 1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: Xg93zysURvMQcfvw9sN5AFieHyTZ/3G235olXpN7OZ4=)
2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: lBkSCeUyNHSQmOM/sLeOHtZatgpdpzghY2r9VhHbIH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Validity
Not Before: Mar 3 04:22:07 2026 GMT
Not After : Mar 10 04:22:07 2026 GMT
Subject: CN=69a661f0-31d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:99:03:4a:6a:a9:c2:ac:fc:2a:14:bc:d7:
a7:40:12:55:c9:d9:91:99:4f:f7:4f:55:49:49:17:
13:e4:b0:02:79:27:79:44:b0:f5:f4:61:25:40:f3:
bf:8f:b3:93:06:30:d1:65:6b:8d:68:bf:88:8f:09:
17:f2:3b:49:3a:52:e4:a2:af:bc:a4:d5:b3:18:b1:
4b:5d:a9:09:76:5e:d1:9d:32:20:c4:d5:77:77:33:
00:9e:52:86:10:f3:38:97:d7:68:b1:5b:00:9a:40:
2a:96:fc:2d:d1:2e:2b:cd:7f:c1:f2:97:f7:86:42:
07:07:f1:27:0b:d5:00:38:15:5c:f4:55:18:df:5d:
b6:3d:07:7e:60:e7:72:0b:2e:0b:98:6b:21:87:c6:
a1:b3:ee:68:77:fa:c2:63:ce:a4:a2:17:57:01:85:
6a:17:0b:95:94:90:05:c0:b9:5f:75:4b:18:4b:3f:
45:1e:b1:74:de:00:33:43:cf:75:51:7d:84:88:db:
a9:b2:dd:fc:5b:e8:7c:d7:48:52:b9:85:55:2b:cd:
c0:d8:32:df:e5:1e:26:08:2f:68:f8:cb:27:10:66:
79:22:58:e3:9b:29:0e:9a:36:3a:ee:23:fe:6a:5b:
3c:94:83:af:9c:07:5b:0b:7d:3e:e9:0c:09:51:38:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:6C:DD:34:46:5F:77:01:0F:46:A8:A3:34:7F:57:C1:3C:EA:3C
X509v3 Authority Key Identifier:
keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:4e:04:25:60:a5:24:68:ed:bc:79:4f:57:3d:9c:f5:8b:5d:
f3:b8:6b:4b:a1:dd:1c:e2:31:21:cf:a0:fe:e6:74:34:dc:2b:
81:ae:2b:f2:c0:33:82:b7:1e:c2:ab:d4:13:7a:cb:9e:5e:14:
cd:16:46:db:53:e7:99:a3:8e:9d:3b:04:38:7e:f0:7a:a8:5c:
04:e6:59:49:c3:69:4e:ba:35:cc:aa:1a:6f:94:4f:57:d0:ec:
96:05:0c:be:1f:e0:17:48:82:5d:f0:a3:59:6e:db:92:cd:f0:
74:b0:6d:f5:70:21:b0:78:63:40:d3:69:f9:92:95:b2:85:7d:
7d:4f:79:67:71:e0:59:a8:97:fa:48:25:b5:f7:36:24:25:7a:
44:46:52:f6:b6:e0:e9:d3:b2:cb:90:2f:46:47:3f:d8:ce:17:
7a:12:d8:d0:3a:5e:92:ea:fb:61:e5:fd:d0:dd:46:e6:64:07:
cb:f5:01:63:4d:66:b1:8b:8f:a0:17:a8:ee:86:01:9a:e3:cb:
e7:c7:d4:72:dc:3a:82:7c:70:e7:db:c0:67:1f:65:9b:87:19:
d5:49:50:34:9e:6e:56:f2:f8:40:2a:2f:3e:96:94:7f:ec:aa:
74:88:4c:5c:ad:8c:20:90:43:b8:21:8c:27:00:d8:db:ac:0d:
cb:f4:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:09 2026 by rpki-client