
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json)
Hash identifier: mQcilabvjJUEMkXftMsT/9RnwHtaeu4Mq4ISu7O3hnI=
Subject key identifier: 9F:B0:71:05:2B:16:2F:FF:29:8A:DB:C1:49:DE:5D:B9:BF:79:B7:DE
Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1
Certificate issuer: /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
Manifest number: E0
Signing time: Fri 13 Mar 2026 05:29:32 +0000
Manifest this update: Fri 13 Mar 2026 05:29:31 +0000
Manifest next update: Fri 20 Mar 2026 05:29:31 +0000
Files and hashes: 1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: riUUVfdfeuHtRvvLdrnEcFp3ofUyWf80IuLR3sOWtlg=)
2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: 4hDTlCGLeED2V5NneVQ9VwBSF0HWPTNuGKERbuoxtX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl
rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
Validity
Not Before: Mar 13 05:29:31 2026 GMT
Not After : Mar 20 05:29:31 2026 GMT
Subject: CN=69b3a0bc-1d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:64:eb:f6:07:4d:95:82:fb:e8:39:2c:8a:
e8:fc:be:fc:9e:d7:0a:9c:3b:6d:bc:05:47:88:da:
2d:e1:8d:99:8a:df:4e:a4:9d:9e:eb:cf:17:2f:83:
ea:6d:2b:69:a5:53:19:61:a2:10:df:c4:19:b7:8e:
ef:b2:62:80:c1:02:87:14:ff:0b:1e:85:f2:b9:84:
9e:f0:17:ca:d9:85:61:24:7e:ad:72:f6:aa:30:fc:
9b:4d:94:04:cc:48:b0:f7:8c:eb:a1:93:ec:dc:75:
89:d4:20:b0:6d:b9:0d:77:97:02:b8:b3:30:a7:7f:
6a:fd:4e:85:58:81:3c:c1:ea:63:11:6d:25:3f:0f:
b8:ac:b3:dc:3b:b4:d1:04:a8:48:66:3a:22:80:75:
17:39:44:14:cf:81:1b:80:b6:b1:17:fc:75:da:64:
36:eb:49:0e:ab:ff:bb:21:7a:e7:70:15:55:ed:f6:
13:e3:b8:5d:2e:f6:38:95:6e:52:85:0b:6a:b4:a3:
37:55:a5:c4:dd:49:1e:62:ea:74:ff:e3:8c:5d:2c:
6b:65:d4:46:ac:35:7a:97:64:47:c3:e6:4b:db:e8:
a1:a1:f2:47:fd:eb:28:3c:f7:e6:d2:39:f8:db:c0:
96:d7:6b:c3:ba:14:44:fe:6e:b6:52:64:6d:48:9c:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B0:71:05:2B:16:2F:FF:29:8A:DB:C1:49:DE:5D:B9:BF:79:B7:DE
X509v3 Authority Key Identifier:
keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0a:81:56:56:1c:11:e1:e8:d4:d5:c0:a9:1f:59:7a:31:2a:
90:04:c1:ff:1f:94:9f:7e:00:04:3b:35:a6:66:62:85:3c:b2:
77:ad:64:50:f5:2b:17:5e:ad:d4:07:44:29:40:4b:c7:2d:c6:
30:48:ff:4c:0a:63:df:eb:74:cc:53:20:f0:48:e0:31:91:c2:
ae:ea:29:ea:ab:07:da:6d:0a:16:18:58:f4:d9:9a:11:d2:a0:
77:8c:a1:0c:08:ba:1b:2e:69:bf:3c:5e:78:6d:fc:5f:8a:44:
cc:07:2f:53:e7:29:dc:68:dd:e8:dd:82:2e:bf:75:53:42:8d:
0b:16:e4:fd:d7:c3:c9:e6:84:32:38:25:a4:eb:69:ef:ba:a5:
ab:67:8f:cd:07:e5:70:bc:74:53:f9:36:e4:6b:eb:0a:1c:af:
ff:75:02:26:3a:80:fd:8a:1c:db:1a:03:4d:c0:e1:94:3e:57:
05:9f:71:4b:28:97:01:8c:13:d6:ef:5e:82:f6:d1:29:24:7a:
df:b4:e1:e0:a1:1d:bf:b2:72:e2:ca:f6:83:5f:c7:f3:1e:01:
7b:c4:1a:93:f6:f2:2b:ee:31:19:2c:48:ce:1c:ca:dc:f5:18:
47:cd:81:c6:07:fa:f8:bb:43:5a:13:14:71:53:4a:1c:72:7b:
c8:e6:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:29:05 2026 by rpki-client