
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
File: Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft (raw, json)
Hash identifier: Ap/amv3L6zfdKc86exXUiHwR2CssSuKuF3hVCtDeBvk=
Subject key identifier: EC:2F:14:26:76:DC:12:AD:ED:DF:45:21:F9:62:79:2F:BF:10:C5:DC
Authority key identifier: 36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
Certificate issuer: /CN=A91D1F47/serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
Manifest number: 15
Signing time: Wed 19 Aug 2026 09:46:48 +0000
Manifest this update: Wed 19 Aug 2026 09:46:47 +0000
Manifest next update: Wed 26 Aug 2026 09:46:47 +0000
Files and hashes: 1: Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl (hash: mW/xHDemN6joEOTl5a034b53rb8z5EDrwM3Ar/mDKiI=)
2: 02DB290681BA11F1AFA7F5BA63A30FBC.roa (hash: 0VxHPVZ4YVNrrIIbimS1zczqvyzHEUrXRQ0L2H6QDOk=)
3: 03AD58B881BA11F1AFA7F5BA63A30FBC.roa (hash: LQgZVNJXiwnEUGUm2X1GTQRbnRviK3JSG+cSffSy6Fs=)
4: C2C83BE49AA811F19B7965243F11F970.roa (hash: jO08CRGsDF/PdACbK4TpuTZbLUeaa6DXFJLfMy7ydYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:46:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Validity
Not Before: Aug 19 09:46:47 2026 GMT
Not After : Aug 26 09:46:47 2026 GMT
Subject: CN=6a857b88-0b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:8f:62:44:19:c6:44:66:72:63:0f:02:7d:
d4:9e:ff:c4:46:96:10:63:01:8f:02:65:e7:81:17:
68:8a:76:39:f0:56:08:2e:d4:73:17:40:5a:26:e3:
99:fb:db:6e:2f:0a:a7:f3:58:f2:a6:07:af:75:8e:
df:f2:be:67:23:f6:07:49:ef:7b:4e:67:ed:26:8c:
04:94:36:36:7d:25:c9:84:25:0f:81:dc:5b:63:b5:
91:40:e9:42:cb:b7:62:02:b2:82:09:b7:76:91:35:
7f:f5:1c:8d:8f:7a:d0:8a:36:20:db:d7:31:c7:21:
92:4f:65:51:0e:3d:a6:e2:bb:ad:5c:28:ec:5c:4e:
af:34:d4:36:0b:04:02:3e:66:21:dc:75:b6:12:27:
7f:e0:c4:d3:30:40:e9:79:a1:78:be:18:bd:9d:4e:
f6:3e:1a:49:f1:23:1f:3e:6d:c5:69:ef:84:07:3e:
e3:24:4d:2f:82:f8:9d:2c:99:63:be:ef:18:dc:bf:
63:6d:51:ea:2a:55:14:ee:01:f5:3d:fb:8b:ec:86:
cb:66:48:ce:67:6f:cf:9b:18:7c:0e:eb:22:6a:6e:
e7:ca:ca:15:74:19:6c:e5:75:13:03:8d:99:d3:90:
f6:ca:ed:5f:de:b4:99:bd:8b:3c:89:6a:31:5f:77:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2F:14:26:76:DC:12:AD:ED:DF:45:21:F9:62:79:2F:BF:10:C5:DC
X509v3 Authority Key Identifier:
keyid:36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a1:87:fd:7c:e5:33:4d:2b:fd:cd:6f:ad:73:88:1e:bf:63:
17:ec:cd:76:ad:6e:0c:3e:82:ae:bc:23:d0:b1:12:bc:95:fa:
27:e4:75:7a:32:a4:b5:20:22:7b:a0:a6:fa:36:49:af:72:39:
4e:f0:36:f4:66:2c:3a:be:b1:c9:eb:5e:3c:8c:56:de:d0:3c:
60:f5:f4:2d:90:e5:86:89:54:40:4d:a4:72:8e:47:cb:5a:4f:
87:f9:0e:92:1f:d4:51:c9:8c:e5:aa:84:73:c4:ee:82:f4:0a:
76:e1:ad:93:4a:48:9d:63:d5:81:14:57:fa:41:bd:b3:1c:54:
76:d3:9c:9c:b6:3c:65:fa:6b:42:ba:57:86:a9:ff:13:e5:07:
9a:99:66:40:90:22:d5:f7:c5:4b:95:c0:16:e6:fd:0e:87:58:
3d:1b:c4:41:9d:d4:2d:e1:1f:5c:f8:3f:73:65:e6:e5:9e:95:
3f:a4:5c:33:02:20:e8:b4:3a:5f:ec:af:02:e2:29:6e:72:2c:
92:23:53:ae:2f:73:1f:75:af:cf:d7:a8:24:c4:80:7d:82:3e:
bc:43:8e:fe:bd:af:91:3b:b8:4c:69:27:b7:01:87:3d:a5:84:
8d:ba:01:dd:b1:68:10:53:9f:fa:39:8f:06:49:6a:ff:a5:66:
4a:0f:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:53 2026 by rpki-client