
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
File: npzIDlqYTBof1BodMUaSYKIS2t8.mft (raw, json)
Hash identifier: aZPptaPN+xTBS4oNs0cprBLSKlEPW7+jUOrrJEdo0dA=
Subject key identifier: D7:E5:3F:66:18:F3:C5:DF:11:59:35:86:9D:6C:26:35:4A:E9:22:B0
Authority key identifier: 9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF
Certificate issuer: /CN=A91CFBA9/serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
Manifest number: 5F
Signing time: Sun 05 Apr 2026 07:24:23 +0000
Manifest this update: Sun 05 Apr 2026 07:24:22 +0000
Manifest next update: Sun 12 Apr 2026 07:24:22 +0000
Files and hashes: 1: npzIDlqYTBof1BodMUaSYKIS2t8.crl (hash: vYUFO3D6FYkaJsxr/LBcPTXlMMxLcqQuZGXoE1J0GaI=)
2: 8966E266A77811F092FD731BC4F9AE02.roa (hash: IjXlQYKLRCjmgswoL3z/dJCGoj+WqZm8SD6r7cCJOG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl
rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFBA9, serialNumber=9E9CC80E5A984C1A1FD41A1D31469260A212DADF
Validity
Not Before: Apr 5 07:24:22 2026 GMT
Not After : Apr 12 07:24:22 2026 GMT
Subject: CN=69d20e26-92e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:7e:1e:b3:0e:a7:e1:89:28:1d:ac:5f:a3:
ae:ef:27:54:91:15:aa:6f:a0:10:68:d4:0e:df:9d:
33:ca:c5:e8:ad:81:e8:b2:dd:77:8a:ec:a0:98:e1:
d9:2e:62:b3:60:1f:8b:1f:b5:07:96:35:5e:8e:10:
35:f2:a1:ac:1a:49:9f:0e:3a:df:72:ac:6e:6c:1a:
8d:92:11:00:b2:30:2a:26:ec:cf:d4:04:3c:17:e8:
74:e9:e6:a4:2e:69:62:73:22:a4:f1:fe:c5:87:eb:
e7:77:80:ac:56:df:3b:7b:5f:14:00:9f:cd:f4:b6:
31:86:1e:ba:c2:c4:d0:0b:da:87:46:e8:82:8c:71:
c4:5c:80:00:28:55:99:7f:53:f2:e3:53:c1:33:ed:
bb:55:ff:04:9e:0a:4d:45:41:61:70:58:1e:0b:15:
63:93:c5:f5:4f:89:db:2f:55:d7:8a:29:60:c8:6c:
bd:ec:1c:ea:7a:4a:a9:23:e9:db:63:49:69:30:1d:
25:09:35:ce:dd:1f:a7:18:fc:db:a0:00:77:35:b2:
d8:c7:ac:09:10:6d:1f:b2:62:7a:9e:14:71:e3:42:
59:cf:27:18:59:55:ac:c2:fc:5e:31:69:a5:44:4c:
83:f9:5c:dd:29:a5:0f:d5:51:2c:54:eb:f1:21:8d:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E5:3F:66:18:F3:C5:DF:11:59:35:86:9D:6C:26:35:4A:E9:22:B0
X509v3 Authority Key Identifier:
keyid:9E:9C:C8:0E:5A:98:4C:1A:1F:D4:1A:1D:31:46:92:60:A2:12:DA:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npzIDlqYTBof1BodMUaSYKIS2t8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/62097E84A77511F094DEBF2DC4F9AE02/npzIDlqYTBof1BodMUaSYKIS2t8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5f:f0:c7:3e:d6:28:76:ae:ef:b7:54:0c:74:fc:14:c2:fd:
ca:fe:95:77:eb:70:50:a5:30:b4:8a:c7:76:a9:d0:25:45:b1:
d3:39:dc:11:ec:c4:b1:ff:4c:fb:4c:ce:c9:9b:3d:31:ec:79:
d9:ed:06:f5:a4:a4:b7:c5:0e:43:1e:bb:29:d4:ea:48:f7:7f:
aa:8c:93:9f:d9:b1:fb:15:ab:8c:2a:37:c7:ff:ae:01:46:38:
50:0f:4f:13:55:8c:bc:86:76:77:0e:17:39:30:70:82:e5:58:
58:4a:29:1b:45:8b:35:1d:e2:91:00:46:e6:60:51:a3:64:4f:
e1:37:fd:ce:3e:d0:56:49:fd:7d:ca:5a:f4:90:7e:98:ae:c1:
eb:0a:76:ef:4c:c4:04:12:64:70:f7:55:72:ee:e7:02:08:59:
4e:29:2a:77:c1:1b:d3:44:dc:4b:0b:74:a2:96:2e:b8:1a:6c:
7e:24:4d:0b:dd:a7:66:7b:35:f5:bc:d2:ca:b5:d2:d1:fb:bd:
c1:7d:97:70:dd:9f:8b:60:9e:78:31:8c:84:a6:0c:ed:ff:cb:
99:4d:e2:3b:f1:77:52:b0:78:ba:b5:c1:e7:a3:ce:f2:d7:f0:
d3:ca:96:62:ed:12:df:fc:7a:d1:c4:12:a3:4f:e0:00:39:08:
82:97:3b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:07 2026 by rpki-client