
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
File: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft (raw, json)
Hash identifier: 6S0yaeJ7+UMOU7Ml+OZARhovXQySg6ObYbRRy9RKXNA=
Subject key identifier: 15:10:41:8D:B6:AA:F5:F0:07:D0:1E:24:5C:19:A6:CE:53:41:A2:28
Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
Certificate issuer: /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
Manifest number: 01A5
Signing time: Mon 01 Jun 2026 04:57:30 +0000
Manifest this update: Mon 01 Jun 2026 04:57:30 +0000
Manifest next update: Mon 08 Jun 2026 04:57:30 +0000
Files and hashes: 1: NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl (hash: Oj7rEK/BlIrNCSWGxEu2PJ8y5NwsDbGU4pVUoIlEV6w=)
2: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (hash: iI90c0kPDEFqDSBJB4+1vqswCDOFhWHQNpb/y5cuaW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F
Validity
Not Before: Jun 1 04:57:30 2026 GMT
Not After : Jun 8 04:57:30 2026 GMT
Subject: CN=6a1d113a-d703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:05:a2:99:ee:e5:93:68:cd:a4:10:9e:88:
f6:ba:64:36:b5:6a:37:61:e9:4e:b0:c3:06:94:31:
31:1b:e3:69:e8:37:47:1a:de:9b:57:55:07:7e:ca:
63:38:d9:9b:7c:b8:d1:13:76:c9:88:bc:39:6b:43:
be:64:f2:5f:6b:0b:d3:c7:1e:4a:f7:d2:fa:01:93:
65:db:d8:99:a2:3c:a3:80:da:39:ee:ea:8e:18:b2:
3e:c5:a4:b4:fa:3c:cf:87:de:b9:31:b8:6b:0b:e8:
65:50:e6:c2:10:eb:9d:c0:6a:b9:3d:5b:0d:63:11:
ba:f6:21:c7:ef:12:65:dc:43:6e:64:c0:57:57:17:
49:51:7c:c4:de:ee:d5:c1:56:43:c2:0f:c0:75:3f:
d4:c4:0d:56:10:53:b9:d9:da:57:e1:fc:de:56:f8:
d0:45:2d:f7:9d:73:77:8a:51:49:05:a9:fb:3a:51:
8e:b3:c2:77:2d:39:f7:1a:94:f6:13:81:78:dd:5a:
82:3c:77:67:9b:70:ad:87:a8:62:fa:d0:a3:49:2a:
99:c5:a2:89:e1:56:63:e2:77:cb:27:39:b9:49:65:
bd:bf:02:06:e6:c9:17:f2:6e:44:46:4f:9c:24:55:
24:15:48:e7:93:62:41:9e:db:7e:09:81:27:df:b6:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:41:8D:B6:AA:F5:F0:07:D0:1E:24:5C:19:A6:CE:53:41:A2:28
X509v3 Authority Key Identifier:
keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0e:e3:50:58:04:ac:34:4e:de:6a:00:95:f5:a6:50:c6:9a:
a9:97:22:31:28:c5:cb:bc:64:c0:ea:1c:7d:39:9f:38:2e:be:
34:15:ba:eb:dd:47:60:4b:88:10:2a:93:0e:45:9a:61:29:dc:
ca:7e:a6:53:0c:a3:01:59:38:44:ce:5f:44:77:b5:da:e3:97:
1e:e8:86:81:0b:4a:2a:52:ca:6c:d5:92:09:09:af:d0:5e:d9:
dd:02:b5:5c:e7:a4:0e:29:ee:16:f2:d3:40:08:1f:7b:2b:80:
7b:06:a7:5d:6f:77:80:fa:c4:c6:85:2f:82:7a:de:a7:09:33:
b9:ac:fe:85:48:d0:83:ea:77:a9:6b:38:d8:64:65:03:62:1d:
3d:27:8b:c8:62:ae:16:03:6f:50:2f:12:37:90:15:db:89:23:
4b:54:a4:e0:47:b5:8f:ed:e3:4c:6e:90:7d:eb:30:b0:cd:80:
2d:3d:3c:c8:be:10:32:44:d3:b7:bd:75:95:cc:2b:86:41:b5:
53:a3:19:d5:c9:12:d0:8c:23:01:30:6e:0d:89:b4:09:69:7d:
fd:01:dc:fb:c6:ec:63:e3:07:cf:a4:98:ca:f3:a1:a8:88:7e:
65:f8:fa:26:e1:c7:e8:57:31:c7:4f:f8:ec:5e:e2:25:eb:3b:
77:98:71:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc3OUQxMTAvBgNVBAUTKDM0ODBDNTY1MjMzNDhEREFCQTMwM0UzMUYyMkRGQTM2
M0Y4ODdFOEYwHhcNMjYwNjAxMDQ1NzMwWhcNMjYwNjA4MDQ1NzMwWjAYMRYwFAYD
VQQDEw02YTFkMTEzYS1kNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArG4Fopnu5ZNozaQQnoj2umQ2tWo3YelOsMMGlDExG+Np6DdHGt6bV1UHfspj
ONmbfLjRE3bJiLw5a0O+ZPJfawvTxx5K99L6AZNl29iZojyjgNo57uqOGLI+xaS0
+jzPh965MbhrC+hlUObCEOudwGq5PVsNYxG69iHH7xJl3ENuZMBXVxdJUXzE3u7V
wVZDwg/AdT/UxA1WEFO52dpX4fzeVvjQRS33nXN3ilFJBan7OlGOs8J3LTn3GpT2
E4F43VqCPHdnm3Cth6hi+tCjSSqZxaKJ4VZj4nfLJzm5SWW9vwIG5skX8m5ERk+c
JFUkFUjnk2JBntt+CYEn37Z4pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUQQY22
qvXwB9AeJFwZps5TQaIoMB8GA1UdIwQYMBaAFDSAxWUjNI3aujA+MfIt+jY/iH6P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80NjBEMUM1QUUy
QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9OSURGWlNNMGpkcTZNRDR4OGkzNk5qLUlm
bzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05JREZaU00wamRxNk1ENHg4aTM2TmotSWZvOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Nzc5RC80NjBEMUM1QUUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9OSURGWlNNMGpk
cTZNRDR4OGkzNk5qLUlmbzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATw7jUFgErDRO3moAlfWmUMaaqZciMSjFy7xkwOocfTmfOC6+NBW6691HYEuI
ECqTDkWaYSncyn6mUwyjAVk4RM5fRHe12uOXHuiGgQtKKlLKbNWSCQmv0F7Z3QK1
XOekDinuFvLTQAgfeyuAewanXW93gPrExoUvgnrepwkzuaz+hUjQg+p3qWs42GRl
A2IdPSeLyGKuFgNvUC8SN5AV24kjS1Sk4Ee1j+3jTG6QfeswsM2ALT08yL4QMkTT
t711lcwrhkG1U6MZ1ckS0IwjATBuDYm0CWl9/QHc+8bsY+MHz6SYyvOhqIh+Zfj6
JuHH6Fcxx0/47F7iJes7d5hxlg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:57 2026 by rpki-client