
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File: nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier: apkkkcwtX/80kuC1veneR/cnt/easejbGXkvT/Z6ho4=
Subject key identifier: FF:2A:F0:A4:C4:0D:1D:AF:0E:96:DE:47:23:7A:EC:49:47:E3:EE:AE
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer: /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number: 0108
Signing time: Sun 05 Apr 2026 05:27:49 +0000
Manifest this update: Sun 05 Apr 2026 05:27:48 +0000
Manifest next update: Sun 12 Apr 2026 05:27:48 +0000
Files and hashes: 1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: /V4Bqirluip28v+s/Bm/AGivtD+Q90BbiFtr+N+rXig=)
2: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: 6sYXn011K9g2scrf7jey3FtY3PeEY3hVRse65pK5m0Y=)
3: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: LHp91fXfeBiyI0BufwwluadyAI7a4YTkgVgUF+ihiuI=)
4: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: TSc9nhEhWmbGRApAQE13+JucrQxfGC8N0706Bmj46MQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Validity
Not Before: Apr 5 05:27:48 2026 GMT
Not After : Apr 12 05:27:48 2026 GMT
Subject: CN=69d1f2d5-1a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:09:ce:0c:0a:96:0c:b3:79:55:6e:24:50:
88:56:bc:a7:44:95:d5:01:db:56:85:6a:89:d3:cc:
d2:55:e2:3f:3f:ba:9d:7f:8e:39:f8:48:28:77:aa:
cc:a7:e6:21:fc:34:3f:81:cc:9e:1d:2b:1f:7a:85:
e6:d4:f7:3e:71:ad:3c:bf:d7:75:05:b4:32:89:59:
1d:c2:ab:b5:a4:9f:11:30:04:bf:f6:d0:f6:b2:92:
0a:8b:61:41:81:d7:4d:e3:f2:f8:a5:3d:d1:2f:9e:
91:8e:c5:c3:1a:57:70:e9:1c:8d:0c:d4:45:01:c1:
b3:e6:01:39:f8:e5:56:70:8f:98:f6:36:4d:5e:16:
3c:a0:69:12:57:4d:06:7b:39:1a:1f:0f:a6:fd:8f:
df:f2:dd:90:1d:80:0e:0f:14:d5:eb:be:7d:81:bb:
b4:b7:a1:91:bc:26:31:42:a2:8a:4c:da:fe:dc:40:
6d:a4:8e:76:0b:f2:f0:7f:45:08:09:60:48:70:6e:
77:30:3f:cb:0a:4e:17:b0:2b:99:51:1d:2e:ba:b1:
36:08:d9:80:da:71:ee:27:7b:0b:2b:9f:b2:06:46:
ac:df:ee:63:48:b4:63:61:d3:9d:f0:c6:6b:ff:6f:
b1:12:b0:87:1d:b6:45:b9:df:f1:e7:e1:1a:20:c8:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2A:F0:A4:C4:0D:1D:AF:0E:96:DE:47:23:7A:EC:49:47:E3:EE:AE
X509v3 Authority Key Identifier:
keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:c5:7e:29:d9:24:ae:24:57:42:de:1f:ee:ef:9e:34:0f:58:
10:f6:ac:de:73:a2:bf:ac:1a:d5:21:ac:c2:f6:13:ca:84:27:
7f:f7:50:4e:55:bf:d1:4d:1c:ba:cf:a1:d5:1d:ec:38:89:3d:
b7:0d:62:d3:3f:85:e2:66:61:16:56:91:d4:b2:b7:1d:e4:f9:
6e:5b:b0:07:52:c2:35:40:00:c6:4a:7d:b4:d4:18:02:4a:a1:
74:77:c7:3e:3d:60:d9:cd:f4:44:9b:c4:1b:ec:82:06:a4:1d:
b5:6d:12:6c:71:17:c8:2c:56:64:bf:e9:4f:eb:30:f8:d3:da:
4b:9b:5c:95:66:31:e6:2d:ba:a6:45:92:6a:32:fa:ed:f1:63:
d6:34:15:1d:b1:e6:98:e3:32:37:ed:3c:63:5f:8b:2d:f1:1c:
22:56:a1:33:6a:ef:1a:e1:a8:3e:e4:73:a9:c0:3f:6e:07:fd:
53:a7:43:7e:2c:f0:c0:c4:10:b0:88:d1:7c:d1:a5:21:85:f1:
a2:55:a9:d2:6e:d1:01:f2:25:75:c6:bc:45:46:fa:16:15:9e:
98:0e:46:2a:f8:23:6e:e0:5e:fb:72:99:a4:29:ca:1a:d8:eb:
42:5b:e0:e6:2e:5f:07:c1:7e:53:1b:e4:89:b3:db:59:9c:46:
30:fe:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:40 2026 by rpki-client