
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json)
Hash identifier: HEtPwgrewUeYEGqJWZ9Af7LXw7CQIcyF47NwFrbIFDc=
Subject key identifier: D7:B3:BA:CB:F8:1A:91:CA:59:43:5A:B8:74:E3:96:FB:29:55:6E:4B
Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Certificate serial: 0660
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
Manifest number: 0648
Signing time: Fri 02 Oct 2026 22:59:53 +0000
Manifest this update: Fri 02 Oct 2026 22:59:52 +0000
Manifest next update: Fri 09 Oct 2026 22:59:52 +0000
Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: efO9nFSi3hZy042R8iP38HHxK/2WoLbZIsDbtAhRbm4=)
2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: kd4W++lLTGLrW1TRbIqGEK/K3cCDQGLohESs97YdNDw=)
3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: ps3uP3bdfTWHCJtuqapXsSdfwHZEG6iHNID4DsV8ynw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1632 (0x660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5
Validity
Not Before: Oct 2 22:59:52 2026 GMT
Not After : Oct 9 22:59:52 2026 GMT
Subject: CN=6ac03769-482a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:dc:16:02:35:4d:f0:04:59:47:a0:bf:ad:
3e:e7:3a:19:c3:36:f7:dc:67:8b:4b:04:2c:40:55:
a2:ce:a6:5d:72:cc:6a:ca:54:6d:42:c4:f7:b6:6f:
f1:25:64:bf:1a:5c:f3:59:29:f7:80:de:40:5e:9b:
fc:57:08:9e:c9:9a:03:42:2b:fc:e3:4b:23:e1:59:
ea:42:03:77:7f:81:35:43:ad:8e:49:20:be:46:2e:
cb:5f:d6:59:d6:e9:2e:e0:3a:80:d5:70:2c:a6:7d:
29:fb:9d:1d:44:78:e7:41:8b:86:40:90:e3:b2:ad:
41:9d:e0:aa:8c:3e:53:24:1b:95:20:a2:74:e4:49:
4b:e7:64:6e:12:38:70:14:6a:45:d2:ca:be:f2:d9:
31:5a:ae:7f:60:5b:e0:3b:29:d9:42:7c:10:0c:2c:
47:7a:31:28:a5:97:6d:8e:74:f9:21:c4:15:07:42:
ce:44:dd:bd:7e:2c:e0:3c:ba:82:c1:c9:9f:51:2c:
33:3e:e4:0c:b1:e6:c4:29:07:82:05:ac:33:ae:d3:
3e:6b:91:2c:98:b5:5b:e2:1c:34:a5:95:02:97:1f:
dd:4b:3f:f1:e5:ef:de:f9:af:33:9c:35:6f:5a:b5:
ea:be:37:b3:84:06:28:47:ee:2a:2a:7f:77:13:92:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B3:BA:CB:F8:1A:91:CA:59:43:5A:B8:74:E3:96:FB:29:55:6E:4B
X509v3 Authority Key Identifier:
keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3b:16:d6:ca:ac:34:bb:23:19:78:74:46:ed:d6:ef:03:0e:
c8:d4:0c:61:2a:59:0c:ed:99:e4:05:6e:01:41:58:ce:fd:e8:
41:c8:82:98:42:f6:f1:6e:14:46:31:9b:0a:7d:ba:8e:2e:2f:
d6:84:7d:c3:65:c4:61:97:02:da:cc:81:b5:d8:53:2a:b6:23:
be:97:82:e4:5a:f9:54:f5:80:71:40:db:08:ea:0a:9c:2c:0c:
30:a3:56:20:ad:5b:a6:ff:61:02:d7:f0:8d:da:0c:81:29:7a:
a4:72:9e:a5:3c:4a:56:3b:7b:09:e4:c8:51:5b:6f:0e:35:0e:
b4:44:c6:e3:ad:82:bc:4c:17:a5:4b:bd:14:1d:2a:c1:dd:4e:
7b:59:60:32:3b:31:ff:05:e1:6b:2e:c1:81:04:26:94:04:93:
80:0b:d6:e8:4d:3f:69:ea:8d:96:83:26:9f:d2:39:ab:d0:3d:
6a:02:69:79:64:b4:ce:84:b1:32:a1:14:69:bd:bb:b2:1f:02:
82:a9:b0:0f:3a:e6:22:68:ee:07:4e:e6:f9:b5:14:36:be:72:
a4:5f:9a:8b:0e:a8:44:97:6c:a6:72:ce:49:c8:7a:0f:fd:05:
e1:d0:5a:40:0a:bd:aa:2e:88:74:a1:e4:99:26:6d:94:37:03:
46:39:21:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF
RjUxQzQ5QTUwHhcNMjYxMDAyMjI1OTUyWhcNMjYxMDA5MjI1OTUyWjAYMRYwFAYD
VQQDEw02YWMwMzc2OS00ODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8PcFgI1TfAEWUegv60+5zoZwzb33GeLSwQsQFWizqZdcsxqylRtQsT3tm/x
JWS/GlzzWSn3gN5AXpv8VwieyZoDQiv840sj4VnqQgN3f4E1Q62OSSC+Ri7LX9ZZ
1uku4DqA1XAspn0p+50dRHjnQYuGQJDjsq1BneCqjD5TJBuVIKJ05ElL52RuEjhw
FGpF0sq+8tkxWq5/YFvgOynZQnwQDCxHejEopZdtjnT5IcQVB0LORN29fizgPLqC
wcmfUSwzPuQMsebEKQeCBawzrtM+a5EsmLVb4hw0pZUClx/dSz/x5e/e+a8znDVv
WrXqvjezhAYoR+4qKn93E5LXHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNezusv4
GpHKWUNauHTjlvspVW5LMB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0
ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN
R0ZaQmtRTGdudVh2VWNTYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtTsW1sqsNLsjGXh0Ru3W7wMOyNQMYSpZDO2Z5AVuAUFYzv3oQciCmEL28W4U
RjGbCn26ji4v1oR9w2XEYZcC2syBtdhTKrYjvpeC5Fr5VPWAcUDbCOoKnCwMMKNW
IK1bpv9hAtfwjdoMgSl6pHKepTxKVjt7CeTIUVtvDjUOtETG462CvEwXpUu9FB0q
wd1Oe1lgMjsx/wXhay7BgQQmlASTgAvW6E0/aeqNloMmn9I5q9A9agJpeWS0zoSx
MqEUab27sh8CgqmwDzrmImjuB07m+bUUNr5ypF+aiw6oRJdspnLOSch6D/0F4dBa
QAq9qi6IdKHkmSZtlDcDRjkhbA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:16:22 2026 by rpki-client