
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
File: Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft (raw, json)
Hash identifier: m+5I9LNDVVSbU+j8ITDQVopMc7XREbcqPQDMOgheyTo=
Subject key identifier: 5B:11:EA:47:16:DA:94:E8:ED:83:80:57:02:E0:E5:41:57:11:9E:81
Authority key identifier: 36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
Certificate issuer: /CN=A91D1F47/serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
Manifest number: 2E
Signing time: Wed 07 Oct 2026 09:20:46 +0000
Manifest this update: Wed 07 Oct 2026 09:20:46 +0000
Manifest next update: Wed 14 Oct 2026 09:20:46 +0000
Files and hashes: 1: Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl (hash: FqFIexFrt/2SE1n0uIZYhaJ60fSu9TqrrokJCFxEhjg=)
2: C2C83BE49AA811F19B7965243F11F970.roa (hash: jO08CRGsDF/PdACbK4TpuTZbLUeaa6DXFJLfMy7ydYc=)
3: 03AD58B881BA11F1AFA7F5BA63A30FBC.roa (hash: LQgZVNJXiwnEUGUm2X1GTQRbnRviK3JSG+cSffSy6Fs=)
4: 02DB290681BA11F1AFA7F5BA63A30FBC.roa (hash: 0VxHPVZ4YVNrrIIbimS1zczqvyzHEUrXRQ0L2H6QDOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Validity
Not Before: Oct 7 09:20:46 2026 GMT
Not After : Oct 14 09:20:46 2026 GMT
Subject: CN=6ac60eee-1ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:c8:fe:b1:e0:a9:d2:fd:2a:8f:92:be:50:
27:14:5f:39:27:59:34:b5:08:b8:39:08:54:73:90:
d1:12:12:5a:a3:a6:8c:d1:58:3e:da:4c:cc:e5:a0:
dd:5b:ba:e5:85:12:33:24:fa:5c:d0:fb:bb:d1:22:
c6:10:f2:b3:97:a1:d7:e8:c2:93:4d:4b:cc:a9:1a:
d3:19:be:48:f1:1c:71:4d:e1:1c:6b:52:50:92:e5:
7d:a2:2d:3a:51:3f:c8:06:76:32:14:62:bd:78:50:
93:ad:89:68:56:52:4b:61:d6:1c:77:70:86:9b:18:
2f:6e:85:aa:41:2d:51:43:75:20:d3:a9:a8:17:b7:
f7:d4:a7:ad:e0:47:f5:ef:a3:1c:5a:f2:c3:c1:59:
a8:76:48:19:80:ba:d2:be:06:8a:4d:5d:80:bf:7e:
00:1b:ff:56:85:fd:d9:de:30:c3:22:0a:82:cd:4c:
21:a7:0d:49:b9:83:e6:9d:83:4f:0d:71:a1:45:45:
1a:04:13:74:d4:10:3d:0d:e3:b3:02:fd:6d:26:98:
16:2b:90:7b:2b:ef:f4:4d:f3:43:4f:b7:4d:58:d7:
d7:95:ba:4d:91:27:59:f6:3c:e3:47:84:f9:2d:e7:
e6:54:03:e1:33:e2:ff:33:72:fe:42:24:b3:4b:aa:
34:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:11:EA:47:16:DA:94:E8:ED:83:80:57:02:E0:E5:41:57:11:9E:81
X509v3 Authority Key Identifier:
keyid:36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:bb:8b:8f:75:1a:79:76:c9:a5:84:80:68:59:4e:86:ff:c1:
db:ad:d3:af:d9:b2:02:8e:68:d3:27:61:18:12:9e:e5:95:5e:
a8:b2:78:a6:80:09:fd:e4:d4:df:8e:06:d3:94:07:e5:fe:2a:
40:84:c9:c5:42:a7:e0:04:c3:a9:1f:24:a7:b4:dc:92:9e:e6:
e3:c0:35:8a:d2:f3:a5:2d:a2:ce:75:be:21:96:64:1f:9e:27:
e4:bd:75:9b:0f:14:27:c6:39:75:44:dd:f1:ff:87:30:57:d8:
c3:46:ec:d7:c2:62:6f:ce:9f:0d:e5:a7:61:a3:dd:28:c6:47:
cd:a3:95:1b:2c:58:98:f8:d1:71:d6:8e:c7:d8:35:b7:67:9b:
17:dd:82:e9:1a:81:8d:f8:29:66:94:f3:01:19:98:e5:80:0b:
3e:e1:54:18:d1:c2:2c:de:ec:38:85:09:3f:7a:30:3d:08:4d:
f6:62:ff:dd:81:cf:46:06:7e:23:00:21:8f:59:92:d9:1e:e3:
f6:49:3d:4a:74:a5:d2:aa:01:4e:96:42:99:cb:d5:26:b8:85:
cc:86:51:30:f5:1b:2e:33:a6:39:ec:6e:61:c4:82:ba:55:a6:
55:a3:80:41:b1:f3:39:40:5d:ad:26:44:ab:b5:d1:64:23:70:
86:8b:0c:8c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MUY0NzExMC8GA1UEBRMoMzY2REVFNjY0N0VBMTMyOUQ2QkY1QUI5OUNBM0ZFQTgw
MjgyRkQ0NDAeFw0yNjEwMDcwOTIwNDZaFw0yNjEwMTQwOTIwNDZaMBgxFjAUBgNV
BAMTDTZhYzYwZWVlLTFlZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCznMj+seCp0v0qj5K+UCcUXzknWTS1CLg5CFRzkNESElqjpozRWD7aTMzloN1b
uuWFEjMk+lzQ+7vRIsYQ8rOXodfowpNNS8ypGtMZvkjxHHFN4RxrUlCS5X2iLTpR
P8gGdjIUYr14UJOtiWhWUkth1hx3cIabGC9uhapBLVFDdSDTqagXt/fUp63gR/Xv
oxxa8sPBWah2SBmAutK+BopNXYC/fgAb/1aF/dneMMMiCoLNTCGnDUm5g+adg08N
caFFRRoEE3TUED0N47MC/W0mmBYrkHsr7/RN80NPt01Y19eVuk2RJ1n2PONHhPkt
5+ZUA+Ez4v8zcv5CJLNLqjSLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWxHqRxba
lOjtg4BXAuDlQVcRnoEwHwYDVR0jBBgwFoAUNm3uZkfqEynWv1q5nKP+qAKC/UQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxRjQ3LzJBNjE5NTY4ODFC
NjExRjFBNDUwNTgyMjYxQTMwRkJDL05tM3Vaa2ZxRXluV3YxcTVuS1AtcUFLQ19V
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTm0zdVprZnFFeW5XdjFxNW5LUC1xQUtDX1VRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx
RjQ3LzJBNjE5NTY4ODFCNjExRjFBNDUwNTgyMjYxQTMwRkJDL05tM3Vaa2ZxRXlu
V3YxcTVuS1AtcUFLQ19VUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA4u4uPdRp5dsmlhIBoWU6G/8HbrdOv2bICjmjTJ2EYEp7llV6osnimgAn95NTf
jgbTlAfl/ipAhMnFQqfgBMOpHySntNySnubjwDWK0vOlLaLOdb4hlmQfnifkvXWb
DxQnxjl1RN3x/4cwV9jDRuzXwmJvzp8N5adho90oxkfNo5UbLFiY+NFx1o7H2DW3
Z5sX3YLpGoGN+ClmlPMBGZjlgAs+4VQY0cIs3uw4hQk/ejA9CE32Yv/dgc9GBn4j
ACGPWZLZHuP2ST1KdKXSqgFOlkKZy9UmuIXMhlEw9RsuM6Y57G5hxIK6VaZVo4BB
sfM5QF2tJkSrtdFkI3CGiwyM
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:27:29 2026 by rpki-client