
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json)
Hash identifier: CcweiOVC/IOPt19oxMTeVsJ4eZVf4K3zlkwQ5TpXvU8=
Subject key identifier: A7:0B:1D:8D:D3:E1:DE:67:02:F2:98:39:36:90:F7:EC:9B:FD:02:5F
Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23
Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123
Certificate serial: 03ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
Manifest number: 03E7
Signing time: Wed 19 Aug 2026 00:51:10 +0000
Manifest this update: Wed 19 Aug 2026 00:51:10 +0000
Manifest next update: Wed 26 Aug 2026 00:51:10 +0000
Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: 3nSpu57N65pbJFKfBMI7cwZ4DMa8IxjxEaXlM1gvHF0=)
2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: G58s+WAEg4C4LutKoAsZWg3Gtc1DpCuEN4PtWpnwCRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl
rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123
Validity
Not Before: Aug 19 00:51:10 2026 GMT
Not After : Aug 26 00:51:10 2026 GMT
Subject: CN=6a84fdfe-3062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:4e:58:60:43:75:08:74:49:5d:23:25:f3:
00:de:ee:ed:a5:66:43:87:39:b5:27:5e:b9:04:66:
66:5f:77:63:b3:a4:68:8d:d9:55:de:0d:f1:45:e4:
cd:49:ab:37:9f:44:17:4f:3d:ab:8b:ac:45:f5:73:
e6:1d:3b:ad:b0:bb:66:b2:34:4d:fb:ab:ca:0e:57:
46:9a:f3:96:ab:90:1a:4e:ce:1d:fa:62:77:68:f0:
87:0b:9c:17:b0:a2:a7:78:e2:24:e1:25:f0:ea:ef:
cb:2e:d7:4c:de:5f:26:78:ef:3f:a3:d8:56:e6:2b:
06:26:30:67:99:b0:4e:d6:10:08:f2:3a:e4:4f:dc:
78:1d:a1:0c:1c:dc:ab:06:e3:cb:99:5c:2d:8d:37:
46:c9:dd:35:5b:91:94:1c:0b:2a:70:9a:98:8f:33:
e3:2a:32:07:dc:e8:92:dc:6f:20:b8:a0:92:24:06:
df:8d:a8:40:83:3c:c2:5a:89:ed:1d:bd:35:cb:ae:
5a:39:dc:2f:3d:de:95:60:4f:cc:51:43:35:2c:91:
aa:b1:ab:6d:78:6b:87:bb:39:99:17:4d:ce:1b:eb:
f0:9a:b1:df:f2:87:7e:79:fb:d6:66:7a:eb:55:a0:
92:f5:26:94:86:44:97:27:95:81:7f:8d:d2:1a:32:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0B:1D:8D:D3:E1:DE:67:02:F2:98:39:36:90:F7:EC:9B:FD:02:5F
X509v3 Authority Key Identifier:
keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:0b:9e:e4:37:38:63:9f:bc:b4:c7:a8:07:08:1f:eb:73:01:
2a:f3:e9:82:24:af:2a:de:56:c7:ba:42:5d:19:3c:93:0d:72:
e2:d7:ba:22:56:89:69:f4:ea:e6:5c:95:1f:10:04:1c:86:a4:
9c:e0:c4:14:fa:02:14:ce:d8:20:b6:93:db:0b:ed:a5:88:61:
4d:76:3d:7f:77:43:25:ad:f9:3f:e3:a4:98:28:1f:e8:4b:0b:
91:a5:55:41:4c:a2:9d:6c:59:ea:b3:b5:b7:cd:1b:93:37:c9:
b1:79:2d:df:38:4c:dd:7f:8d:c7:c1:68:94:db:d9:db:0d:3d:
eb:2f:cb:c6:e3:1d:34:04:ba:e7:4c:10:22:fa:cc:97:a3:a9:
74:8d:ec:3b:bf:5c:a2:f3:1b:c5:f3:66:c7:1f:e5:bd:65:36:
4e:c2:02:91:6f:d4:75:2e:b5:85:ff:4c:a1:ef:7f:08:ca:68:
56:3e:32:ec:5f:86:69:9b:0a:75:ec:3b:10:ee:16:dc:b2:dd:
7f:57:8b:0e:b8:91:8b:da:18:ac:f3:d8:b0:0e:4b:0b:72:69:
aa:6c:3f:86:d1:d2:eb:a3:a6:36:ed:fc:ea:fb:7e:14:82:5f:
3f:2d:d6:b6:01:42:58:cd:f7:87:b5:90:a6:9a:93:49:e4:4b:
5a:48:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:05 2026 by rpki-client