
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
File: nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft (raw, json)
Hash identifier: nkcgs1ubCvbJDadndo0h3y8R5uw3di3UuiwEUqRqtGY=
Subject key identifier: 3E:C3:A6:7C:90:32:08:8C:9E:6A:1D:66:77:E4:F1:FF:DD:ED:B9:F8
Authority key identifier: 9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5
Certificate issuer: /CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
Certificate serial: 089B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
Manifest number: 0893
Signing time: Wed 20 May 2026 20:35:21 +0000
Manifest this update: Wed 20 May 2026 20:35:21 +0000
Manifest next update: Wed 27 May 2026 20:35:21 +0000
Files and hashes: 1: nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl (hash: ThK9bBqm5aTvcw9ioWtGZ+8gpvzYmJPg4crWVL2kL/U=)
2: 149009E6EE8111EAABC5C05CC4F9AE02.roa (hash: LUaN4gZzeCu+6hLjhK4iqrKCCaOku7QO2IiWVTIsojE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl
rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE8B4, serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5
Validity
Not Before: May 20 20:35:21 2026 GMT
Not After : May 27 20:35:21 2026 GMT
Subject: CN=6a0e1b09-8e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:79:a3:c8:ec:f7:08:fc:f5:51:5e:63:bf:
8f:fc:00:ec:1c:3b:50:2d:42:70:b1:0c:7c:6b:05:
e8:e0:7b:97:33:b4:69:5d:2d:b7:bf:5d:36:a7:42:
e6:60:c1:14:43:c8:c4:46:d9:60:20:b6:29:0d:46:
72:82:d6:fd:3d:f5:20:3f:1e:ec:bb:72:83:36:65:
64:08:95:b8:aa:63:0d:66:81:5d:06:57:8f:f2:a4:
39:e9:e6:f4:e7:4e:4f:ae:67:1b:36:38:9f:c8:2c:
de:52:74:31:92:e5:a3:69:cc:fe:29:5b:68:21:7f:
94:2c:2d:27:a9:fa:42:cb:06:09:ea:78:f6:b7:a7:
0c:3b:d7:03:79:09:48:2d:89:82:88:d1:9c:b6:46:
0e:5e:40:82:54:08:92:f5:21:f4:98:25:04:2e:46:
0a:b2:9e:50:f9:3b:ae:8b:a5:cd:16:c2:56:50:74:
df:e3:05:a1:d7:64:66:15:83:2c:05:50:fe:6c:bd:
e3:e1:17:8a:94:52:b7:99:dc:fc:f2:d9:59:06:71:
c9:b7:b4:48:01:09:cf:b5:ab:77:0b:f3:14:9f:a6:
1a:76:84:08:62:53:71:c4:9a:35:9f:30:91:f0:10:
d3:84:20:3c:a3:36:09:6c:f8:ee:8a:5b:07:59:2d:
32:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C3:A6:7C:90:32:08:8C:9E:6A:1D:66:77:E4:F1:FF:DD:ED:B9:F8
X509v3 Authority Key Identifier:
keyid:9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:23:1d:c3:ba:1b:3c:43:47:28:54:43:42:28:b1:d3:1c:b8:
73:a6:9f:9e:ad:a7:a5:85:44:fb:f2:cc:de:cc:1b:26:a6:68:
63:00:8e:8d:d6:c4:ba:fd:88:02:e6:e8:68:36:e5:bf:7b:f0:
0e:97:af:4a:95:b0:fb:88:6e:e2:1f:e9:2f:9c:d8:76:5c:bc:
44:40:77:4e:d2:3e:25:3d:27:d5:8a:9d:f0:b7:c7:95:62:5e:
25:28:c0:c1:25:5a:db:f6:60:18:88:63:8c:8d:b3:63:b9:d6:
e4:77:6f:31:59:87:6a:fb:98:26:0f:04:e6:82:80:71:20:df:
ac:7d:51:05:15:01:1b:1d:b6:b9:e0:01:52:1f:1c:07:5f:0e:
00:63:7d:ee:b3:57:37:f6:7e:a0:e9:d0:c2:73:9c:22:45:57:
9b:99:9a:78:25:b2:ad:36:bd:e5:8e:be:32:0a:c0:e2:dd:73:
8e:72:c5:b3:bb:58:6d:a6:14:13:03:04:df:6b:e9:e9:9c:70:
39:94:93:f2:3c:e3:de:dd:48:5f:02:81:a5:d7:40:f1:65:82:
25:54:f5:b9:7f:b8:95:93:eb:07:cc:98:3e:cb:17:1b:50:a7:
e8:b9:58:91:52:a1:31:22:b8:9b:ae:88:77:28:92:97:e7:67:
26:a3:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:58:46 2026 by rpki-client