
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json)
Hash identifier: FLbG38mS4TyOLGx2j/QJCOqzu8ukvIU2GQZmD7oCtO0=
Subject key identifier: 44:A1:BA:5C:71:40:3B:56:A6:B9:9D:98:70:50:9C:A0:27:9A:F9:56
Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Certificate serial: 0931
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
Manifest number: 0AD5
Signing time: Wed 20 May 2026 20:15:49 +0000
Manifest this update: Wed 20 May 2026 20:15:49 +0000
Manifest next update: Wed 27 May 2026 20:15:49 +0000
Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: 6EIIAFyi7xSh1gMNClOiRwZ1LLjGO7uQA5B3FZ7gMSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl
rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353 (0x931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Validity
Not Before: May 20 20:15:49 2026 GMT
Not After : May 27 20:15:49 2026 GMT
Subject: CN=6a0e1675-4c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:fd:07:17:81:35:26:37:af:c7:d8:d1:8a:
7b:bb:70:5f:5b:71:a1:aa:57:38:c2:2b:3d:06:84:
e5:ee:06:c2:f7:8c:a8:5f:bf:ff:09:1f:be:ae:7f:
61:7b:a5:a6:1d:8a:ed:96:b2:c8:90:9d:67:9e:63:
ad:9e:35:22:24:1f:0b:41:98:c8:09:54:b7:bd:a7:
fe:27:19:9b:f0:bd:03:23:54:da:bb:bf:86:06:7a:
3d:b4:6b:9e:5b:5e:89:69:cd:79:40:ae:e3:ed:db:
72:48:4c:b9:1d:1c:70:39:34:4b:7e:29:43:f1:7f:
b0:f8:97:61:d1:e6:65:a6:6d:6b:64:bc:fb:69:f0:
e8:cc:90:c3:e2:67:e1:30:c9:f2:bf:1d:47:90:58:
06:d3:fb:4f:c9:6e:2b:bb:d7:32:7d:f5:ca:95:63:
26:15:5f:53:77:64:04:b5:4a:a9:95:4c:2b:ca:c2:
b6:f4:86:24:56:86:dd:79:55:a5:73:28:04:10:0e:
82:31:b1:01:08:7e:9f:12:7b:ed:3c:1d:63:da:89:
c5:50:0f:91:92:c9:59:45:8f:cd:5f:82:df:19:ba:
22:4f:4b:72:66:a7:d1:e0:3b:53:0e:66:b9:7f:a1:
53:c5:fd:3b:01:38:66:64:73:45:1b:79:35:8e:67:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A1:BA:5C:71:40:3B:56:A6:B9:9D:98:70:50:9C:A0:27:9A:F9:56
X509v3 Authority Key Identifier:
keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:46:07:d8:08:1e:45:e6:c5:ec:b6:d7:95:bc:9f:71:76:1e:
ee:18:3f:03:3a:dc:19:b5:12:a6:b2:58:57:79:ba:0c:4d:79:
f1:08:86:be:c7:ae:91:6f:fa:f6:88:e8:63:b0:0a:01:51:ba:
e4:96:30:fa:1d:07:37:67:61:20:ee:f0:25:fa:c4:51:bc:42:
3d:27:fb:7f:25:84:58:d2:a2:7d:33:43:81:9b:f8:d1:2d:27:
f9:d7:0a:2a:0a:dd:95:a0:83:07:d5:06:dc:c8:78:05:88:ed:
91:24:d6:08:d3:b9:96:6d:8f:27:a6:56:b9:1d:3c:8a:18:26:
f7:f0:fc:49:f8:11:00:0d:a8:e1:f2:2b:48:2e:0f:ce:a2:fc:
38:11:98:ad:7a:7b:0e:cc:75:65:0e:ab:0d:e2:7a:9f:17:97:
5a:6c:75:64:30:7e:80:cf:f5:fe:5b:e5:d4:74:8a:0b:be:4c:
0c:0c:9f:d3:dd:57:e2:30:9d:ad:5b:5a:d8:47:bb:f1:25:a7:
4e:50:5d:72:82:e7:da:71:43:ba:80:9a:5d:a0:ed:8e:bd:1b:
f1:83:f9:91:5f:f8:ca:4b:ad:a3:4f:20:30:cd:d7:97:f1:a5:
97:33:b9:a9:14:e4:25:33:c3:3a:bf:d4:70:59:75:5f:cf:38:
27:99:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:45 2026 by rpki-client