
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
File: NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json)
Hash identifier: 4dw5NElB+3uZERx082TAU0tmy7XE1MvHaS8Ggjte/eU=
Subject key identifier: 0B:D1:4F:F3:08:FF:A3:16:BB:33:27:8F:BB:B1:6E:14:ED:F9:46:79
Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
Certificate issuer: /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
Manifest number: FF
Signing time: Mon 05 Oct 2026 06:41:20 +0000
Manifest this update: Mon 05 Oct 2026 06:41:20 +0000
Manifest next update: Mon 12 Oct 2026 06:41:20 +0000
Files and hashes: 1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: BMaXRa+K+H3lnEodZ9HhlA8X6OsZBQwYybd2xQgVx2U=)
2: nx7eVc-UExQZGlYBARTk5qPuTDk.asa (hash: Bq94qwwPBfBx/AnREmDcpg5o5aSHJ6zt+H4qiLs5gGg=)
3: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: n7sRPa6I69j+h39GN76+PY3SuYecQbYjjiiW9wMz2wU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB
Validity
Not Before: Oct 5 06:41:20 2026 GMT
Not After : Oct 12 06:41:20 2026 GMT
Subject: CN=6ac34690-8917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:a1:d1:45:90:f2:c8:da:ed:5a:ef:37:7b:
fb:2f:4f:c3:e4:1d:03:84:e9:d7:fb:db:1d:07:13:
f7:44:c1:26:f6:32:86:02:9c:1f:f4:e5:b4:02:80:
8f:cd:e2:69:a9:f4:e0:d8:ba:72:fd:cc:d1:ae:e2:
b3:03:34:e1:cd:31:2e:41:f4:23:92:c3:14:c0:11:
a6:38:c0:ba:4f:98:aa:f6:76:ee:9d:4a:ae:8c:af:
41:f9:59:57:46:f8:7f:06:f6:9e:de:96:91:0d:d9:
b6:73:5e:d9:57:19:b8:4a:3b:4e:f4:6a:1b:ba:9b:
6f:3f:86:ca:3d:61:f2:39:e5:b4:6c:9a:e0:fe:6f:
fe:16:27:18:f6:09:4b:e1:bb:a0:c5:33:17:3f:a4:
b5:29:43:4f:f3:67:35:78:be:96:04:92:1a:c2:fc:
af:22:12:21:65:6d:e2:80:f7:91:0a:d7:bb:db:89:
2d:9b:ee:f7:07:f4:70:ed:20:c9:34:d1:90:ef:08:
e6:62:84:6c:34:b4:0c:06:12:95:2c:f4:7c:41:e0:
6f:a3:2b:b7:2d:7c:41:1a:ad:91:5d:fa:fb:d2:a6:
2f:ae:87:e6:23:74:46:6d:4a:88:7e:da:b1:8d:17:
a5:fd:a8:67:33:10:43:7a:44:ac:a1:c9:a5:95:3a:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D1:4F:F3:08:FF:A3:16:BB:33:27:8F:BB:B1:6E:14:ED:F9:46:79
X509v3 Authority Key Identifier:
keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:1e:be:71:ea:39:ab:9c:db:90:9c:7b:d2:56:4e:2c:be:53:
fc:65:43:a7:6c:ed:74:fc:2d:b3:3b:bf:65:d4:bc:85:fc:91:
d5:74:3f:5f:46:b2:bb:8e:af:51:a8:4b:7d:2f:14:45:9f:43:
64:30:3c:ec:38:bb:8f:f4:c8:fe:f8:a7:cb:6b:ad:36:26:aa:
d7:85:06:94:e0:4e:99:cd:a0:36:07:f6:2e:e3:f4:12:0c:59:
ca:51:dd:15:60:2c:af:e8:bd:0d:3b:d1:38:00:78:17:a4:5c:
db:b4:db:28:b6:8b:64:67:5d:32:39:fd:76:db:be:ac:96:62:
87:c3:96:4d:61:05:70:8e:56:a1:88:b9:82:9f:bf:c1:1b:b5:
3d:cd:ed:d0:9b:15:ce:fd:8f:eb:22:81:72:8a:b5:be:94:36:
82:13:5c:a9:62:15:ae:a6:c9:b3:82:1d:2a:90:94:65:ed:f8:
91:31:88:be:48:57:7f:d6:83:40:2d:b9:90:f6:b0:6a:00:87:
d2:c3:da:ff:41:22:6c:d9:73:7a:1b:43:71:9b:2c:ae:b3:a5:
f6:5e:70:4d:ff:dc:5f:ae:70:c5:69:e9:ca:b8:21:d3:06:79:
a5:1f:5d:a5:0f:c2:8f:b6:8c:b3:fe:68:70:f2:dc:07:06:df:
7c:80:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:03:33 2026 by rpki-client