
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier: NDnp1COcI5Pp9MIBvBhBkBSkKc1p4Qz8rcCCN2F/N3M=
Subject key identifier: 3E:48:7C:CE:00:7E:61:15:E0:15:28:EB:94:94:BE:8E:0C:09:88:B5
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial: 0821
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number: 1C1C
Signing time: Tue 18 Aug 2026 17:05:02 +0000
Manifest this update: Tue 18 Aug 2026 17:05:01 +0000
Manifest next update: Tue 25 Aug 2026 17:05:01 +0000
Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: eR8Ww0eG6ldV2LK9pm/mZKnWGtjdxLjT1ws/8RYHxfI=)
2: C56AF018E98B11F0A24D3E834F6F56BC.roa (hash: MIF4G38mLftqnqeE9T0qy+6BeKMKul+rB3EiPJaG4sA=)
3: C6BB442CE98B11F0A24D3E834F6F56BC.roa (hash: fQvlcrwBQbuojkhr1MzXvqt8o4OCenjdJMRcowohAyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Validity
Not Before: Aug 18 17:05:01 2026 GMT
Not After : Aug 25 17:05:01 2026 GMT
Subject: CN=6a8490be-2e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:b4:0b:5c:30:6d:34:73:3f:5a:1a:d2:20:
af:76:a6:f2:f1:c0:e0:52:2a:50:c0:73:e1:5c:86:
c4:1f:9c:7f:a4:5e:e9:61:04:9f:c8:73:7e:ff:2c:
93:34:32:e7:9f:78:9c:cb:51:1b:0f:22:38:a7:4b:
a4:0a:5c:66:48:c1:fc:06:6f:31:96:3d:24:b7:75:
84:55:27:c0:9c:73:0a:c2:29:4a:46:ee:0d:03:b1:
08:32:b2:ce:4b:32:9f:bd:25:29:ef:54:c8:f3:36:
f1:36:04:74:3d:d3:de:75:54:15:73:44:62:05:76:
ab:4b:35:e3:e7:09:f9:ff:7e:b7:7f:3a:7a:8b:28:
af:6a:3f:04:08:94:2e:2a:6e:1c:30:7b:9a:c8:7b:
61:6c:4a:80:e4:cd:71:af:63:29:cc:60:40:45:77:
fe:d4:05:0e:99:a2:05:9b:78:71:94:26:82:e4:2c:
26:c7:15:2f:33:da:e7:3d:f3:55:cc:68:93:1a:e1:
2f:d1:94:2e:7e:12:dc:1a:f6:a5:1c:20:ce:d6:35:
00:c9:1d:35:28:a3:6f:36:6f:53:df:50:a9:18:bc:
09:57:29:51:02:8f:38:77:88:92:a8:54:f2:5a:f3:
b5:07:6e:34:44:f4:bf:6f:bf:8e:ea:ab:31:c7:33:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:48:7C:CE:00:7E:61:15:E0:15:28:EB:94:94:BE:8E:0C:09:88:B5
X509v3 Authority Key Identifier:
keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d6:e2:7a:0b:db:00:6d:7e:6d:1e:aa:3b:22:cc:3b:66:29:
bf:3c:45:04:b7:68:a6:b7:11:92:87:89:de:90:89:bf:c6:5e:
f3:66:3a:79:b3:76:96:63:b3:cc:81:c8:fc:0c:e4:5c:51:72:
9c:9a:f1:3b:b8:ad:36:8f:19:17:3f:98:99:25:f3:a4:32:f7:
c4:a5:36:df:85:b9:7d:41:b9:e2:7f:f7:9f:07:95:7b:92:ae:
19:b8:37:0a:ce:9e:d1:4b:08:a0:fa:9b:50:0b:1e:b5:3b:97:
e2:f0:ae:5a:16:ff:90:6a:e6:4a:24:9e:dd:23:83:eb:59:85:
6c:70:c1:88:93:a7:0c:7e:f5:7f:a5:07:12:6d:f8:a9:77:5c:
8d:3f:1f:83:f4:65:ad:2a:5a:00:46:7a:78:7b:1f:62:b3:79:
24:19:8b:ab:f4:b8:ae:0c:4f:e9:ed:5a:7f:75:35:97:da:84:
1d:c7:8a:77:26:bf:24:0b:0a:43:88:80:aa:c4:3b:bc:0c:60:
e7:f5:5d:98:db:71:37:27:98:a5:af:20:f1:ab:5f:5f:7a:eb:
02:89:7a:33:1c:ff:bb:92:4b:b4:60:56:94:26:28:6f:87:28:
20:38:08:81:b6:05:1d:cb:20:4c:fb:fc:e1:d7:c7:02:0c:24:
32:0e:31:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:15 2026 by rpki-client