
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft
File: NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft (raw, json)
Hash identifier: drRwlKTR1KdGG1Pj6fDcr3k/jyFOtU5VBpwUt4phUus=
Subject key identifier: 71:70:10:0D:10:19:46:AB:9B:91:4D:3C:55:74:FA:63:B6:31:19:8B
Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD
Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD
Certificate serial: 02BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft
Manifest number: 02B6
Signing time: Wed 19 Aug 2026 01:59:45 +0000
Manifest this update: Wed 19 Aug 2026 01:59:45 +0000
Manifest next update: Wed 26 Aug 2026 01:59:45 +0000
Files and hashes: 1: NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl (hash: 6S3PfnXH4nHo2yfFmCpEN7vuiyGEOJaYhYjVvfsiURY=)
2: AC270A727D0711ED8181DA7FC4F9AE02.roa (hash: pWPy+X5EuBSNslThAxl9vzV4QotLdBFyZSA0fVW7aaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl
rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703 (0x2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8F36, serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD
Validity
Not Before: Aug 19 01:59:45 2026 GMT
Not After : Aug 26 01:59:45 2026 GMT
Subject: CN=6a850e11-e9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:f0:16:05:aa:86:8f:07:46:5a:6d:12:03:
11:5e:b3:40:ad:35:bb:a8:a3:2d:d0:0a:cd:4c:ea:
fe:a3:22:58:64:97:be:ac:69:5d:ff:a5:9e:95:95:
16:69:48:47:d4:d0:d1:48:c8:4d:ed:60:b5:81:8b:
24:97:b2:35:67:d1:07:f2:b5:71:2f:2d:24:86:62:
3e:0d:35:48:29:f6:a3:35:a6:04:45:a3:7d:6d:5f:
a0:a2:b5:19:37:a9:95:a0:b0:45:11:b9:03:0d:8c:
a2:d8:7c:77:bd:60:4c:f3:2f:9c:c2:9d:a4:c3:9a:
c2:ee:f2:1d:21:4b:f1:c9:6c:f1:97:8b:03:84:eb:
66:9e:89:0e:71:28:9d:a9:9b:8d:df:7c:e2:57:b3:
0e:00:d8:d3:ab:50:49:47:d4:cc:dd:dd:d8:43:eb:
68:a2:12:5d:73:43:ae:ef:4c:27:06:d6:24:df:55:
bd:32:34:61:5e:68:e5:6a:a1:f5:b7:c0:5f:ad:5f:
85:e2:81:ef:80:80:a6:65:af:6a:0f:8a:d4:5a:9a:
fe:ab:11:0b:cc:88:53:c6:f8:33:2c:63:83:8d:fd:
f9:0a:2b:56:6c:02:96:59:95:69:d5:d2:da:e8:6f:
59:5f:9c:af:f4:26:ff:b3:1f:80:32:7b:45:32:ee:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:70:10:0D:10:19:46:AB:9B:91:4D:3C:55:74:FA:63:B6:31:19:8B
X509v3 Authority Key Identifier:
keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1b:85:a6:4a:b4:12:16:cf:af:f8:d8:b9:78:a4:03:7b:02:
77:55:41:e5:7f:32:d0:39:bb:67:5e:48:00:0d:86:fb:04:45:
f2:c3:26:2f:33:a3:95:35:fc:ec:d6:d3:d9:1f:87:79:01:0a:
9f:36:0e:2f:27:73:e9:60:b3:59:50:e1:18:4f:d0:ad:0b:b7:
a7:61:0d:cc:4e:21:55:4b:99:39:47:d1:9e:17:f5:b5:1b:5a:
0a:36:ba:54:cd:21:f3:2b:d6:e9:f7:79:b3:0c:76:25:b7:4f:
f6:b4:7e:34:55:10:b6:3d:d8:dd:96:34:d2:2f:87:81:55:7f:
f0:55:04:9a:ae:b4:8f:47:68:db:17:b1:46:49:fa:6d:30:c1:
29:81:a3:f5:09:10:ec:b2:96:2b:fa:49:16:ea:7b:b8:b7:40:
11:46:0b:4c:52:26:f3:77:35:7c:35:16:9a:e7:19:f4:40:ce:
e7:38:2a:1a:c2:43:16:08:2b:46:be:fa:5a:cf:1b:38:9a:68:
d7:34:e5:d6:01:c8:e3:3f:f6:59:d7:3a:ba:d7:ff:c4:a2:8a:
e7:8a:4c:f5:c4:0e:11:02:ad:74:c9:59:60:f9:23:bb:2c:47:
5a:70:0b:ec:75:3e:c9:9a:c3:8e:f4:27:a2:c4:88:19:74:7d:
d6:d6:31:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThGMzYxMTAvBgNVBAUTKDM0RDdENkQ0NDFDMzJEN0M4NzE0MkU5RkU1QzdFQkM0
RjQ3OUIwQ0QwHhcNMjYwODE5MDE1OTQ1WhcNMjYwODI2MDE1OTQ1WjAYMRYwFAYD
VQQDEw02YTg1MGUxMS1lOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApw/wFgWqho8HRlptEgMRXrNArTW7qKMt0ArNTOr+oyJYZJe+rGld/6WelZUW
aUhH1NDRSMhN7WC1gYskl7I1Z9EH8rVxLy0khmI+DTVIKfajNaYERaN9bV+gorUZ
N6mVoLBFEbkDDYyi2Hx3vWBM8y+cwp2kw5rC7vIdIUvxyWzxl4sDhOtmnokOcSid
qZuN33ziV7MOANjTq1BJR9TM3d3YQ+toohJdc0Ou70wnBtYk31W9MjRhXmjlaqH1
t8BfrV+F4oHvgICmZa9qD4rUWpr+qxELzIhTxvgzLGODjf35CitWbAKWWZVp1dLa
6G9ZX5yv9Cb/sx+AMntFMu5nIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFwEA0Q
GUarm5FNPFV0+mO2MRmLMB8GA1UdIwQYMBaAFDTX1tRBwy18hxQun+XH68T0ebDN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEYzNi8yNDlGNDE0NjdE
MDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExYeUhGQzZmNWNmcnhQUjVz
TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05OZlcxRUhETFh5SEZDNmY1Y2ZyeFBSNXNNMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEYzNi8yNDlGNDE0NjdEMDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExY
eUhGQzZmNWNmcnhQUjVzTTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmhuFpkq0EhbPr/jYuXikA3sCd1VB5X8y0Dm7Z15IAA2G+wRF8sMmLzOjlTX8
7NbT2R+HeQEKnzYOLydz6WCzWVDhGE/QrQu3p2ENzE4hVUuZOUfRnhf1tRtaCja6
VM0h8yvW6fd5swx2JbdP9rR+NFUQtj3Y3ZY00i+HgVV/8FUEmq60j0do2xexRkn6
bTDBKYGj9QkQ7LKWK/pJFup7uLdAEUYLTFIm83c1fDUWmucZ9EDO5zgqGsJDFggr
Rr76Ws8bOJpo1zTl1gHI4z/2Wdc6utf/xKKK54pM9cQOEQKtdMlZYPkjuyxHWnAL
7HU+yZrDjvQnosSIGXR91tYxKw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:44 2026 by rpki-client