
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json)
Hash identifier: +5OR6GFKgvFFReQBcC1PejJ1Wb0V9cyx8ZrIZRxb9P4=
Subject key identifier: 3C:DD:11:EC:78:81:90:10:75:B1:32:FB:E8:0D:C5:43:C0:8C:10:AE
Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Certificate serial: 05FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
Manifest number: 05E5
Signing time: Thu 26 Mar 2026 22:48:56 +0000
Manifest this update: Thu 26 Mar 2026 22:48:55 +0000
Manifest next update: Thu 02 Apr 2026 22:48:55 +0000
Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: FNSx4rRxlcCSnNmuumpIWxPl6lWaX5GvGIoonlvL8h8=)
2: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: /QFvUN14R1O1KVpjrV19SJEs/S3B1Q2N0TzOckdFv0Q=)
3: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: hofwfPS1+TvM0/WkparMoyPsYmdvk20TYWiYyP/0qBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1531 (0x5fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Validity
Not Before: Mar 26 22:48:55 2026 GMT
Not After : Apr 2 22:48:55 2026 GMT
Subject: CN=69c5b7d8-f681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:d3:44:a0:cf:57:b3:8f:0d:51:c1:28:f7:
6c:bb:1f:83:89:38:1c:9c:d5:e1:d3:42:b9:ae:cc:
66:53:f9:6f:2e:54:36:c3:48:7a:34:d4:28:4c:8b:
59:4d:ba:1a:7c:0c:7c:a6:3b:7d:f4:ff:44:df:76:
e6:de:67:1d:dc:7e:3f:51:45:7c:ba:1f:9f:ee:8c:
a3:da:41:88:69:dc:5f:5f:8b:bf:9f:aa:5d:d2:7d:
56:09:37:8d:dd:cd:9c:61:c4:bf:59:96:94:81:af:
cc:3c:91:08:01:38:fd:aa:38:f9:46:e5:5e:68:8f:
b1:a2:76:b3:0a:19:e4:03:c5:a8:4b:06:bc:6e:b7:
81:11:52:6a:c9:92:1c:8a:c1:b0:89:fe:66:73:56:
23:ff:06:8d:da:33:5e:ec:bd:a8:25:d3:9a:ba:3a:
87:71:c0:2a:53:b1:b3:91:98:9a:f5:28:f4:83:4d:
d0:0d:d9:97:ba:b5:ff:20:49:52:76:a3:7c:96:46:
01:fc:dd:71:f7:b9:92:55:a6:6e:fa:a5:25:d3:1c:
2b:4e:79:e1:50:df:2b:ef:c6:57:0c:81:1e:b6:15:
76:bd:86:ba:ef:ae:29:fc:a9:3e:80:b7:bd:66:01:
c7:08:bc:53:92:57:48:29:4c:fa:0c:57:e9:50:f8:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DD:11:EC:78:81:90:10:75:B1:32:FB:E8:0D:C5:43:C0:8C:10:AE
X509v3 Authority Key Identifier:
keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:19:bf:42:cd:23:43:39:9d:7a:a2:b6:0a:45:40:22:53:d9:
94:dc:0b:b3:ba:e2:7b:10:6a:88:da:04:0c:01:ce:2c:49:f1:
99:a4:76:92:b7:9c:8f:3a:89:6d:e3:29:b4:e8:6c:57:ab:9e:
06:fa:03:6e:9d:81:d6:fd:dd:0a:c0:11:83:ae:06:29:d4:29:
1c:55:58:80:93:71:bc:7e:a9:48:48:8b:08:54:3e:56:0b:31:
ca:62:10:4a:d5:d8:73:5c:6d:e5:dd:eb:1b:d3:66:2c:ae:52:
f0:4d:d1:a5:95:82:0b:d8:a6:9b:7d:7c:be:a6:53:5f:8e:6f:
e9:df:35:01:80:94:54:09:f0:8a:f4:74:5b:b6:ed:bb:a7:85:
00:4a:d6:55:ef:ca:df:b8:fa:b9:7d:74:59:db:32:70:af:dc:
d2:76:88:45:75:9c:9e:f3:87:b9:c2:71:82:5d:66:59:ff:f6:
12:60:59:30:be:c0:67:d7:a9:d7:8c:d2:f2:aa:37:c3:a3:a3:
b7:86:69:0e:5c:81:c5:ef:7e:f8:13:2f:ee:76:20:cc:5d:0e:
0f:ba:84:db:24:14:d2:4f:50:51:f6:b0:49:31:7a:30:d3:ed:
d9:4b:48:75:ea:b0:6b:86:4b:d9:85:3b:63:2f:e2:11:a4:f7:
42:55:19:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF
RjUxQzQ5QTUwHhcNMjYwMzI2MjI0ODU1WhcNMjYwNDAyMjI0ODU1WjAYMRYwFAYD
VQQDEw02OWM1YjdkOC1mNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnfTTRKDPV7OPDVHBKPdsux+DiTgcnNXh00K5rsxmU/lvLlQ2w0h6NNQoTItZ
TboafAx8pjt99P9E33bm3mcd3H4/UUV8uh+f7oyj2kGIadxfX4u/n6pd0n1WCTeN
3c2cYcS/WZaUga/MPJEIATj9qjj5RuVeaI+xonazChnkA8WoSwa8breBEVJqyZIc
isGwif5mc1Yj/waN2jNe7L2oJdOaujqHccAqU7GzkZia9Sj0g03QDdmXurX/IElS
dqN8lkYB/N1x97mSVaZu+qUl0xwrTnnhUN8r78ZXDIEethV2vYa6764p/Kk+gLe9
ZgHHCLxTkldIKUz6DFfpUPhvNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzdEex4
gZAQdbEy++gNxUPAjBCuMB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0
ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN
R0ZaQmtRTGdudVh2VWNTYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAABm/Qs0jQzmdeqK2CkVAIlPZlNwLs7riexBqiNoEDAHOLEnxmaR2krecjzqJ
beMptOhsV6ueBvoDbp2B1v3dCsARg64GKdQpHFVYgJNxvH6pSEiLCFQ+VgsxymIQ
StXYc1xt5d3rG9NmLK5S8E3RpZWCC9imm318vqZTX45v6d81AYCUVAnwivR0W7bt
u6eFAErWVe/K37j6uX10WdsycK/c0naIRXWcnvOHucJxgl1mWf/2EmBZML7AZ9ep
14zS8qo3w6Ojt4ZpDlyBxe9++BMv7nYgzF0OD7qE2yQU0k9QUfawSTF6MNPt2UtI
deqwa4ZL2YU7Yy/iEaT3QlUZoA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 19:33:56 2026 by rpki-client