
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json)
Hash identifier: MFp6ix6vmpJ/+0FTWtzxbGg0GKV5P1nqxZ1qUhy8FEM=
Subject key identifier: D5:E2:9C:F7:AF:D4:3B:9E:63:30:51:D7:39:83:DA:9B:1A:35:CE:7C
Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
Manifest number: 01A6
Signing time: Mon 21 Sep 2026 04:08:36 +0000
Manifest this update: Mon 21 Sep 2026 04:08:35 +0000
Manifest next update: Mon 28 Sep 2026 04:08:35 +0000
Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: XdeMOOH2g87DNTQF13L65qzWDRpr7Oeq4phxNOjbnRM=)
2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: rwM85aK7lK+yIuUXlvt+45rHjWLjHKjyCpBV5oJ3MMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Validity
Not Before: Sep 21 04:08:35 2026 GMT
Not After : Sep 28 04:08:35 2026 GMT
Subject: CN=6ab0adc4-4eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:90:0a:8c:6f:a4:1c:8b:b8:f2:91:71:98:
81:af:6c:f3:ef:7f:74:62:64:42:50:67:88:86:44:
12:c8:c6:8e:88:ab:57:da:84:14:58:5c:1e:bd:34:
d0:9c:91:14:84:37:ca:6b:34:59:3a:9e:f7:c4:fa:
e7:7d:13:ba:ea:a9:06:dd:5b:1f:a0:de:07:bd:b2:
61:94:de:ee:0d:24:aa:16:c1:0b:4c:bd:51:22:9a:
7f:79:63:92:52:da:ac:cd:de:29:98:81:1e:fb:97:
91:70:0d:2f:10:27:7f:af:cc:b8:a4:69:2b:b0:bc:
fd:80:d9:e2:ee:5c:b7:9d:94:18:f2:20:d9:6c:16:
38:8b:6f:57:59:89:37:02:77:e5:fa:ab:5b:a1:85:
7b:23:b2:c1:1a:5d:12:0b:0e:63:7d:ce:33:9c:72:
9d:ec:c6:2c:56:e0:7d:01:00:50:05:68:9a:52:27:
b9:83:03:23:1e:6b:f2:48:e9:37:8b:8c:af:7f:b8:
a5:15:8a:75:4b:0a:35:de:14:57:50:4b:98:2a:0d:
5a:7c:4f:95:1b:27:c5:75:d7:2c:16:13:96:d5:4a:
f0:9f:3f:63:60:36:73:64:68:0a:9e:3c:d0:ff:62:
ac:e4:3c:f5:99:f0:6d:aa:69:37:41:b8:7a:f0:6d:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:9C:F7:AF:D4:3B:9E:63:30:51:D7:39:83:DA:9B:1A:35:CE:7C
X509v3 Authority Key Identifier:
keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3d:33:91:22:88:11:e7:8e:27:c8:36:f5:79:b2:c3:a7:ec:
43:5b:d5:fd:f5:b1:38:f6:f8:a2:34:29:72:6d:b6:8b:87:b3:
91:28:12:15:c2:d0:cc:40:d8:09:0d:30:6f:5b:83:67:90:30:
32:76:72:4a:c0:de:f0:8b:c3:27:d3:23:61:01:a6:19:f4:26:
b4:1a:0b:2a:e9:f1:fc:88:e7:2b:92:05:30:ce:64:6e:5e:8f:
51:aa:7e:93:92:76:ab:23:d6:b0:8e:f6:56:9b:07:5c:4e:ec:
90:e8:f9:17:b5:87:c4:16:7b:37:f6:24:ef:a5:12:86:a7:37:
23:38:6b:1f:3a:ee:32:40:61:9f:ab:3a:00:09:0b:cd:47:e7:
7e:6c:db:bf:41:7b:02:a7:b5:af:9c:28:25:9e:88:c8:7b:ae:
4a:ae:bf:aa:e3:9f:43:a3:82:ea:9a:f5:bb:69:d0:fb:aa:87:
c6:49:a9:28:15:00:84:0e:a1:c4:21:0d:3c:53:6a:93:8d:10:
fb:9b:13:f7:0c:47:39:50:94:25:9e:c8:4d:47:bd:7a:26:25:
a9:c5:86:59:60:a7:1a:bc:cc:a2:ee:8c:68:10:55:84:3a:3b:
4e:5f:d6:5d:ae:a4:6b:0f:07:e0:9f:9c:f0:5b:96:30:af:79:
20:06:14:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NEMEMxMTAvBgNVBAUTKDM1MkMyRjQyRkZGNjZDQjg2QTY5QzY3RUU2MUJBQjZF
MTExNTRFQ0IwHhcNMjYwOTIxMDQwODM1WhcNMjYwOTI4MDQwODM1WjAYMRYwFAYD
VQQDEw02YWIwYWRjNC00ZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumaQCoxvpByLuPKRcZiBr2zz7390YmRCUGeIhkQSyMaOiKtX2oQUWFwevTTQ
nJEUhDfKazRZOp73xPrnfRO66qkG3VsfoN4HvbJhlN7uDSSqFsELTL1RIpp/eWOS
Utqszd4pmIEe+5eRcA0vECd/r8y4pGkrsLz9gNni7ly3nZQY8iDZbBY4i29XWYk3
Anfl+qtboYV7I7LBGl0SCw5jfc4znHKd7MYsVuB9AQBQBWiaUie5gwMjHmvySOk3
i4yvf7ilFYp1Swo13hRXUEuYKg1afE+VGyfFddcsFhOW1Urwnz9jYDZzZGgKnjzQ
/2Ks5Dz1mfBtqmk3Qbh68G2ovQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNXinPev
1DueYzBR1zmD2psaNc58MB8GA1UdIwQYMBaAFDUsL0L/9my4amnGfuYbq24RFU7L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0QwQy84MTlBMDIzNDMy
Q0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJMaHFhY1otNWh1cmJoRVZU
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0QwQy84MTlBMDIzNDMyQ0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJM
aHFhY1otNWh1cmJoRVZUc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAij0zkSKIEeeOJ8g29Xmyw6fsQ1vV/fWxOPb4ojQpcm22i4ezkSgSFcLQzEDY
CQ0wb1uDZ5AwMnZySsDe8IvDJ9MjYQGmGfQmtBoLKunx/IjnK5IFMM5kbl6PUap+
k5J2qyPWsI72VpsHXE7skOj5F7WHxBZ7N/Yk76UShqc3IzhrHzruMkBhn6s6AAkL
zUfnfmzbv0F7Aqe1r5woJZ6IyHuuSq6/quOfQ6OC6pr1u2nQ+6qHxkmpKBUAhA6h
xCENPFNqk40Q+5sT9wxHOVCUJZ7ITUe9eiYlqcWGWWCnGrzMou6MaBBVhDo7Tl/W
Xa6kaw8H4J+c8FuWMK95IAYUig==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:01:41 2026 by rpki-client