
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json)
Hash identifier: riayLheOUOdUR77Y7cJEOwYSzdlrDIQD2Ic2CsKqKOk=
Subject key identifier: CF:5B:BA:31:30:93:2D:A1:71:86:01:E0:36:E2:94:8E:35:BC:1D:84
Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
Manifest number: 0631
Signing time: Tue 18 Aug 2026 23:07:05 +0000
Manifest this update: Tue 18 Aug 2026 23:07:04 +0000
Manifest next update: Tue 25 Aug 2026 23:07:04 +0000
Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: 5mb/4YMNDJMZ15S71xQZKwVc0kg+jx7+TFWzzbGQStA=)
2: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: ps3uP3bdfTWHCJtuqapXsSdfwHZEG6iHNID4DsV8ynw=)
3: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: kd4W++lLTGLrW1TRbIqGEK/K3cCDQGLohESs97YdNDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Validity
Not Before: Aug 18 23:07:04 2026 GMT
Not After : Aug 25 23:07:04 2026 GMT
Subject: CN=6a84e598-6b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:69:b5:ed:3c:36:75:eb:ee:ac:1b:ab:1d:
12:d2:2d:14:dd:07:b4:24:7c:bd:cd:9b:07:94:c9:
9a:94:b1:4c:8c:fa:8d:df:60:36:a4:a1:05:c3:01:
f3:98:6c:04:cc:2f:a8:78:32:95:54:68:0f:f4:c7:
47:fc:76:a3:ce:0b:4d:65:9e:18:c2:a1:6a:a5:0b:
a4:7f:71:2d:f9:44:c4:bb:c3:81:b5:47:8d:90:b3:
72:67:aa:f9:ed:c9:42:57:e6:53:d6:35:5a:8b:b4:
83:8e:63:d0:e6:5e:02:b2:5a:f6:f0:54:8f:0d:1c:
44:24:ed:90:cb:86:97:9a:02:1c:84:f3:6c:7a:cd:
2a:74:0e:9d:23:35:a1:13:a9:c1:5d:38:97:6f:4a:
cb:0c:ae:6f:8e:f8:2e:b8:02:ad:d6:3b:23:2c:db:
0a:0b:25:80:de:14:64:6c:b6:ce:44:32:6b:ff:4f:
65:2a:f3:e2:47:ca:ad:7e:37:26:69:5b:05:1a:8b:
e4:61:66:1a:da:30:46:55:e9:10:9f:f3:c7:35:35:
cf:a5:58:73:04:7d:a0:6a:de:6a:33:01:33:ae:87:
8a:4a:06:a8:b1:8d:72:69:f4:b1:17:a3:44:81:8e:
d3:dd:9c:fc:d1:ea:1e:be:bf:ee:7d:ea:41:44:9a:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5B:BA:31:30:93:2D:A1:71:86:01:E0:36:E2:94:8E:35:BC:1D:84
X509v3 Authority Key Identifier:
keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:df:f6:50:e1:6b:94:94:12:d3:29:49:f1:18:cf:9b:d7:bf:
65:b1:cb:84:2f:1e:db:4f:99:43:52:b6:58:83:2e:0e:46:ca:
89:4c:4e:98:9a:55:ae:6c:06:4f:8a:53:5a:63:0c:70:b1:f2:
b9:bf:02:49:b3:af:0d:2f:a3:e3:ee:9c:00:fa:57:98:ae:97:
99:c1:08:38:72:ff:44:5a:2c:32:75:c2:3d:90:f9:22:7c:2f:
16:e0:3e:17:e8:2e:58:e8:2a:83:a4:a0:34:aa:39:7a:39:81:
a8:fd:29:7d:91:27:d1:2a:69:a5:a4:c4:6e:07:bc:30:ea:56:
87:76:ca:46:16:69:c2:29:07:ef:cc:fe:e5:c8:2e:50:53:ef:
6c:e9:4b:a8:33:78:65:d6:e8:63:a1:ff:f7:cd:a2:48:40:b7:
4f:de:ce:9e:c9:77:95:49:43:b2:8a:f4:90:1c:c5:bc:c9:47:
11:33:55:8b:ff:db:3c:69:ec:c0:0e:42:71:36:88:b9:d4:5b:
7c:eb:4f:de:40:56:58:5f:2e:1a:8e:1c:18:37:3f:55:d5:59:
76:9e:ff:1d:23:c0:50:48:4e:7c:be:c0:f7:24:9d:8a:cb:08:
7c:56:2d:38:b4:5d:e1:42:48:77:c2:0a:03:64:63:03:77:88:
b6:b9:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:03 2026 by rpki-client