
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
File: NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json)
Hash identifier: I4AGwBRnEKcUSTjo34nutU8faZvL3AS6M1VEA/TQDW4=
Subject key identifier: B2:D7:87:8E:8E:79:C3:EE:96:A0:CD:92:4E:10:39:40:AA:1F:18:DB
Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
Certificate issuer: /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
Manifest number: E6
Signing time: Wed 19 Aug 2026 07:14:21 +0000
Manifest this update: Wed 19 Aug 2026 07:14:21 +0000
Manifest next update: Wed 26 Aug 2026 07:14:21 +0000
Files and hashes: 1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: Jc17snF5iXTn0zgG5yuhcVBdnHlug27Xam/BQ05fk+8=)
2: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: n7sRPa6I69j+h39GN76+PY3SuYecQbYjjiiW9wMz2wU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Validity
Not Before: Aug 19 07:14:21 2026 GMT
Not After : Aug 26 07:14:21 2026 GMT
Subject: CN=6a8557cd-7eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:dc:58:46:e5:fa:a8:83:0c:a4:e7:a7:ed:
d4:2d:98:9e:9b:78:ce:8c:56:9a:b5:4a:ab:a9:4e:
a3:b4:69:6d:d6:f2:20:28:e7:0c:3d:b0:e3:35:a0:
da:d1:ad:33:89:29:5f:9b:ff:89:42:90:23:0d:64:
e1:9c:0c:ee:c2:49:d5:cf:bc:77:09:6a:38:eb:36:
8d:68:5c:7a:a1:02:8e:05:c9:ea:63:dc:8f:14:69:
cb:06:6c:c6:3e:11:65:96:5f:8d:fb:24:18:81:f3:
78:f3:cf:7d:e3:14:70:41:fd:58:ab:40:4e:82:8b:
8c:df:22:f7:c7:ad:22:32:08:f6:14:ad:31:f6:30:
7e:9c:3a:c5:1d:0e:ab:5e:ff:c5:94:cd:8a:98:65:
09:7c:5e:79:98:d1:a1:ca:7c:4d:aa:af:94:7e:23:
c0:d8:51:91:d3:d9:21:99:eb:55:ab:a4:d5:aa:73:
1e:47:1d:cc:7e:66:28:8c:bf:ed:1f:32:65:9c:f7:
5f:d0:a6:b5:e0:fa:ef:07:f9:c7:5c:bd:fe:87:d2:
1b:3e:82:77:01:db:de:17:d0:59:89:f7:1a:37:89:
c7:e3:72:2b:02:6c:d5:ff:d8:a8:f3:51:35:10:49:
06:97:4f:72:58:7a:d6:85:45:59:07:8f:29:52:bb:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D7:87:8E:8E:79:C3:EE:96:A0:CD:92:4E:10:39:40:AA:1F:18:DB
X509v3 Authority Key Identifier:
keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:fa:e2:00:a4:f2:ea:1b:aa:ca:82:7f:f9:af:a5:b3:8f:37:
39:f6:dc:ec:fc:54:5f:9c:55:05:99:a0:c4:e3:cf:d8:7d:03:
9b:c9:cc:19:b3:10:24:42:00:57:8b:60:41:10:41:b3:c0:35:
03:3f:31:9b:ac:01:b2:60:bb:e2:65:c6:fe:7f:df:0e:b1:41:
4e:c6:3a:8d:60:d1:0c:0d:62:be:4b:ca:f1:83:8b:1e:e5:10:
49:74:a9:ea:dc:f4:c9:2e:ab:20:29:d3:80:e2:4f:dd:81:c9:
ef:32:1b:6c:bd:95:13:c0:ad:7c:52:d2:a4:d3:65:4c:94:4f:
b2:dd:d3:11:a7:96:e8:fd:c8:84:91:26:6f:42:e7:d0:04:6d:
0f:1a:ba:c9:74:8f:f8:86:ff:38:96:f2:c7:8f:fe:7f:98:c0:
d8:80:38:b1:08:4b:d0:78:8a:e1:62:eb:04:65:7e:cf:2b:18:
a7:b9:a4:72:2b:60:fe:72:63:9a:ea:46:a6:5f:d8:ea:84:b7:
32:1c:39:97:4e:00:40:51:cc:ed:6e:36:03:3a:54:8a:21:c1:
18:72:75:83:15:d2:10:2b:8d:8b:a2:22:c3:ad:72:83:4b:1e:
88:97:54:0b:ab:9a:23:ab:b7:99:a7:52:6a:3f:62:57:fb:65:
68:56:f7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:49:56 2026 by rpki-client