
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json)
Hash identifier: I+hnzpJNNcJspebrGF+Iq7iGe5rXVPdaOgNUEJrIr50=
Subject key identifier: 72:ED:73:0F:5B:8F:AE:06:38:D5:34:9D:D1:19:37:4B:B2:48:87:F8
Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Certificate serial: 08F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
Manifest number: 08E9
Signing time: Thu 10 Sep 2026 20:17:58 +0000
Manifest this update: Thu 10 Sep 2026 20:17:57 +0000
Manifest next update: Thu 17 Sep 2026 20:17:57 +0000
Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: e0AG70Mb73Skm3lD9JbFlk5dosIDF8bQaJSHRpviuQg=)
2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: g2COT7RPieke6fn1mIweQAMXMPjqkWRMy/0gtbJP0o0=)
3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: q5Y0uGRmUCg4iSbCFOqAPFa+DSzHUTjKsRs6A7GCSWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Validity
Not Before: Sep 10 20:17:57 2026 GMT
Not After : Sep 17 20:17:57 2026 GMT
Subject: CN=6aa31075-eee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e2:cf:19:9c:c0:7c:1a:5e:b3:00:7d:36:9d:
05:91:69:dd:1e:f9:8a:2c:e6:91:90:c4:18:f2:1f:
79:0e:87:dc:3e:ac:7f:a6:03:2d:fb:85:79:25:b9:
78:ef:0a:07:39:9e:ed:46:33:69:e4:19:49:d3:c8:
64:dd:cc:b7:89:76:5e:6b:bc:34:df:bc:e8:31:72:
66:75:eb:13:ae:59:70:be:00:c7:cb:20:e2:f8:49:
e2:a1:c1:a9:14:6f:96:89:d4:58:53:b5:3d:31:14:
aa:7a:fb:84:40:71:8a:64:07:43:99:4b:2d:49:db:
c7:d2:50:cb:fe:9f:68:09:df:13:fc:2b:0a:e5:48:
17:4b:d9:8d:56:ec:47:80:36:56:0a:f8:bb:12:40:
e1:f9:b3:45:45:22:d3:f7:a2:d4:32:cf:24:39:5b:
95:49:ae:8a:ea:27:4d:bb:28:3b:3f:a1:a6:d5:f3:
31:d4:13:d4:70:2b:65:4d:e3:66:8c:33:14:de:1b:
f4:51:35:3a:3e:44:d2:12:c7:98:a6:35:3b:47:31:
d6:ad:55:ed:d4:ae:36:af:0e:d6:8c:6c:f5:eb:90:
af:62:d7:f0:c8:9a:54:6e:71:95:61:92:fc:58:c2:
f4:bc:ef:58:86:e8:e2:25:c7:91:43:76:0d:fb:95:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:ED:73:0F:5B:8F:AE:06:38:D5:34:9D:D1:19:37:4B:B2:48:87:F8
X509v3 Authority Key Identifier:
keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:37:95:cf:af:75:e2:81:0f:e7:ef:da:00:21:44:56:d4:67:
65:b6:25:60:36:a2:d2:11:63:b5:91:5b:b9:a1:54:46:20:24:
cb:c1:3a:78:f2:c1:43:e5:62:ba:04:4e:9f:07:c6:b1:f6:12:
04:9e:77:f5:5f:67:bb:df:d8:6d:5e:18:69:b7:7f:d9:4e:c7:
80:9a:7c:16:86:60:e0:c9:c0:f4:62:0a:f0:e0:d8:a1:d9:59:
4e:f4:7e:f7:6b:0d:c0:df:02:e8:a3:93:fa:e9:22:09:54:e7:
e8:65:14:2e:fe:57:b9:18:6f:df:78:a4:01:d4:13:6f:ec:b1:
b5:c5:8e:2b:32:09:34:f8:6e:41:a9:de:10:26:be:61:5b:86:
70:93:f6:05:1f:37:a8:fa:f4:4e:fb:7c:5b:5e:6b:70:ab:37:
3c:78:d2:9f:51:45:c3:0d:4b:cc:ec:5d:94:b2:53:a5:9b:6d:
db:4e:cf:da:47:d7:f2:8b:31:25:2d:f2:6d:58:89:e2:53:8a:
e2:dc:cb:46:29:9b:39:fe:80:2e:e5:3c:ea:2a:55:a3:9b:09:
81:d8:31:fe:5e:3d:95:bc:ee:ff:f0:01:8e:0d:3a:4c:89:15:
1f:56:59:87:93:3e:41:c5:28:97:50:4a:50:e9:c5:71:7c:7f:
57:fd:a4:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB
QzEzRDQ5QjcwHhcNMjYwOTEwMjAxNzU3WhcNMjYwOTE3MjAxNzU3WjAYMRYwFAYD
VQQDEw02YWEzMTA3NS1lZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi+LPGZzAfBpeswB9Np0FkWndHvmKLOaRkMQY8h95DofcPqx/pgMt+4V5Jbl4
7woHOZ7tRjNp5BlJ08hk3cy3iXZea7w037zoMXJmdesTrllwvgDHyyDi+EniocGp
FG+WidRYU7U9MRSqevuEQHGKZAdDmUstSdvH0lDL/p9oCd8T/CsK5UgXS9mNVuxH
gDZWCvi7EkDh+bNFRSLT96LUMs8kOVuVSa6K6idNuyg7P6Gm1fMx1BPUcCtlTeNm
jDMU3hv0UTU6PkTSEseYpjU7RzHWrVXt1K42rw7WjGz165CvYtfwyJpUbnGVYZL8
WML0vO9YhujiJceRQ3YN+5Up6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLtcw9b
j64GONU0ndEZN0uySIf4MB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz
QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT
YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp
eF85Vkt2dUs5UTJzRTlTYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUjeVz6914oEP5+/aACFEVtRnZbYlYDai0hFjtZFbuaFURiAky8E6ePLBQ+Vi
ugROnwfGsfYSBJ539V9nu9/YbV4Yabd/2U7HgJp8FoZg4MnA9GIK8ODYodlZTvR+
92sNwN8C6KOT+ukiCVTn6GUULv5XuRhv33ikAdQTb+yxtcWOKzIJNPhuQaneECa+
YVuGcJP2BR83qPr0Tvt8W15rcKs3PHjSn1FFww1LzOxdlLJTpZtt207P2kfX8osx
JS3ybViJ4lOK4tzLRimbOf6ALuU86ipVo5sJgdgx/l49lbzu//ABjg06TIkVH1ZZ
h5M+QcUol1BKUOnFcXx/V/2k7w==
-----END CERTIFICATE-----
Generated at Sat Sep 12 16:37:31 2026 by rpki-client