
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json)
Hash identifier: XgJ2lNSAai0Ihzn0y78pPC2UZFwpbkeuGWMIeP4Xj/Q=
Subject key identifier: 64:13:ED:C8:0B:82:66:E2:DB:13:57:36:95:05:FF:FA:B5:7E:AA:87
Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Certificate serial: 0D24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
Manifest number: 0D19
Signing time: Thu 10 Sep 2026 18:15:23 +0000
Manifest this update: Thu 10 Sep 2026 18:15:22 +0000
Manifest next update: Thu 17 Sep 2026 18:15:22 +0000
Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: lTI3TzpOATd7eMXp+1dCNDiDSqqTUbXUMpCyZ07Gq90=)
2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 5Ti6m1LIl0TQP6ix0VQfMwgNVX0N4OYoM9ENVwcx4C0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3364 (0xd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Validity
Not Before: Sep 10 18:15:22 2026 GMT
Not After : Sep 17 18:15:22 2026 GMT
Subject: CN=6aa2f3bb-f4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:92:21:dc:28:e4:0c:ae:40:84:61:6f:1e:
3b:64:44:07:c6:92:b3:00:73:f5:24:76:eb:df:ad:
a7:5d:f6:09:be:d1:1e:3c:4e:3f:5a:d1:d0:f1:08:
16:b2:71:0a:be:e4:77:8a:fc:fe:31:b4:51:c7:dd:
8c:12:09:b2:2d:c3:e1:57:e7:e9:e9:16:e9:be:1b:
1e:8e:a9:fc:94:ed:f6:95:92:53:0b:d8:61:cb:62:
45:37:9b:0c:b0:2a:73:b3:a5:e3:86:23:7b:91:3c:
72:b3:50:d9:db:19:f9:5b:8e:58:4d:e7:9b:ad:3c:
35:26:fc:b8:cb:4d:65:3e:a0:44:85:41:03:c0:a1:
e4:5c:83:da:fd:a9:58:84:b9:38:a1:25:a9:d4:f2:
c5:6b:f7:35:da:53:13:a2:82:7f:55:16:6c:63:d4:
67:15:4d:02:6e:09:41:f5:d3:8c:d4:11:51:94:a3:
15:15:d7:97:4d:b4:58:bb:f2:f8:e2:97:60:e0:41:
02:b3:33:45:29:05:d4:c2:59:50:5a:f5:17:f3:c7:
d9:92:11:a1:55:58:aa:7e:74:b2:a3:f4:45:78:b4:
55:bc:b4:d0:44:df:1b:0c:60:8e:b9:6f:91:ab:3b:
58:38:29:83:cf:37:38:bd:8b:e3:86:5e:59:8e:39:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:ED:C8:0B:82:66:E2:DB:13:57:36:95:05:FF:FA:B5:7E:AA:87
X509v3 Authority Key Identifier:
keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d8:de:48:df:90:e8:9b:eb:93:c9:68:0f:f3:87:9c:46:06:
13:1a:ee:2b:94:4a:0b:70:5c:2e:06:d9:49:63:16:b4:dc:47:
16:fd:6f:7a:f8:bd:8b:b5:af:c5:ea:94:b5:1a:b9:6c:d3:e0:
28:3f:79:12:cb:12:28:cb:bf:a0:1d:a9:d0:e6:fa:e7:88:7d:
a5:e8:84:c9:93:73:d4:c9:15:8d:b2:97:7a:85:a0:6a:cd:32:
d5:f0:10:49:bb:02:91:28:8a:83:33:43:15:42:27:27:dc:a6:
59:5e:c3:e6:44:75:1e:2d:23:f7:2e:6f:13:69:4f:d7:b3:7c:
2d:97:b7:fe:ba:8c:6e:29:fe:9f:b3:34:8d:b3:94:bd:c8:af:
62:d5:73:88:f0:01:c3:f3:d7:b3:8a:aa:63:48:d2:b2:9f:00:
bc:25:1a:92:20:3b:32:4a:ca:d3:62:f2:29:47:09:52:25:bf:
cb:a4:ec:e4:2a:ab:16:32:cd:c9:50:12:c5:0f:04:26:29:08:
4d:9c:24:e0:22:40:78:dd:39:7b:e6:f8:26:06:7f:19:da:0b:
f4:2b:80:d8:ae:08:21:76:a4:c6:72:b4:ca:cc:12:95:88:7c:
eb:b7:62:5f:82:76:8e:ea:a3:4c:28:72:78:32:db:69:ab:8e:
6e:f5:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:43 2026 by rpki-client