
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json)
Hash identifier: l6Byhl+6o4XV4vrn7iFKACmG1sxbYWjpqVrFn9d8PfE=
Subject key identifier: 6E:18:6B:F6:2B:B1:7F:08:95:26:1F:A3:96:DB:9F:4B:9D:CD:37:0D
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 204B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
Manifest number: 1F44
Signing time: Wed 28 Oct 2026 16:06:08 +0000
Manifest this update: Wed 28 Oct 2026 16:06:07 +0000
Manifest next update: Wed 04 Nov 2026 16:06:07 +0000
Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: ea1nycNujuTaFcqyVMznjNWHVj7fP9YIK2bmWBLh7Qo=)
2: C9E1BA1286EF11F19E006003A7EE528E.roa (hash: KeHkWNIoWYBYRdc3VPh8HjB66Rci2N2NvVGwtvQ9bgo=)
3: F42FB236896C11F1ABDFBC266B11F970.roa (hash: 7QqNy76CzIOhRtacRyoTS6R/J83/tPFS1SCpQHSPA5M=)
4: CB0B87D886EF11F19E006003A7EE528E.roa (hash: 01D0gNOrmeWfFnfKx9BZLWhsvfkWia8AUzDxIIpl65k=)
5: CC2D8BDE86EF11F19E006003A7EE528E.roa (hash: d4i+z1Mv2GtUqNC8gLCSYFchOfSALA1lnJbOM2UDKmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 16:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8267 (0x204b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Oct 28 16:06:07 2026 GMT
Not After : Nov 4 16:06:07 2026 GMT
Subject: CN=6ae21d6f-14bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:a3:5b:13:db:76:51:81:53:72:0e:cf:14:
e7:30:36:21:59:d4:16:8d:c3:e4:72:a7:03:88:3d:
5e:63:d4:39:4a:8d:ed:a8:bc:bc:7d:3d:5a:90:6b:
73:72:cd:77:30:06:61:0e:bc:d1:6c:02:0a:fe:5e:
d0:ae:6a:5f:f0:cc:fa:e2:81:75:04:62:89:f1:6c:
b8:25:64:1d:42:07:dd:d5:f9:c8:03:4c:9b:88:7c:
46:d8:81:87:72:03:77:44:4a:43:cd:cf:0f:e5:69:
5b:f5:39:d2:24:7e:00:22:9e:25:db:cc:73:8d:55:
8c:04:eb:7e:2a:33:6e:c9:0d:bf:58:fa:86:fc:9b:
d0:d1:26:35:df:01:0e:24:d8:98:54:15:db:17:13:
41:a1:f8:6f:af:21:29:27:d0:9d:f5:73:81:dc:dd:
12:69:c9:8f:a0:0b:3a:4d:0b:11:6a:19:e7:0f:a7:
41:91:99:cf:2d:3c:fe:d8:3c:cb:80:86:84:03:6d:
a4:c2:49:c1:f8:d2:44:98:a1:cf:f9:f5:09:b1:0c:
13:78:fd:70:5f:81:5d:51:6e:e4:ca:c5:3b:2c:a0:
9e:4b:a8:69:57:bc:4d:e7:f6:a0:e3:01:a2:e2:16:
e7:ff:c6:e3:a4:16:82:4b:16:cc:33:c3:d6:a6:ff:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:18:6B:F6:2B:B1:7F:08:95:26:1F:A3:96:DB:9F:4B:9D:CD:37:0D
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:cc:60:d9:0b:48:ee:d5:ef:cc:d0:ef:c0:59:78:76:58:01:
13:b5:0a:c7:55:0d:e9:39:43:1a:dd:df:e6:dd:a6:35:fd:33:
23:c1:4f:e9:b4:5b:12:6d:b0:c5:53:97:da:d4:b1:77:1d:99:
8e:f0:48:ff:e7:2d:72:11:f3:63:85:b3:d5:58:fa:87:8d:5c:
ea:52:3b:94:82:4c:91:bf:38:e3:71:13:82:cf:65:a4:28:f6:
69:d0:48:99:e8:5f:75:8c:4b:bc:a3:7a:67:58:0a:cf:b4:c4:
b0:87:47:95:25:98:d9:af:64:12:21:65:62:6e:c7:a0:89:43:
bd:9e:7b:45:f4:e0:bc:fe:7d:d6:c4:ba:f7:9d:10:a0:30:9b:
93:72:06:b8:2f:e7:62:51:01:f0:2e:77:e3:32:39:12:7b:63:
d7:c5:67:ae:ff:c1:ac:f4:72:29:9c:93:10:13:ec:b4:e7:f1:
01:b9:f6:b7:64:92:d8:0a:06:0a:6a:ac:54:38:be:40:a7:d0:
1f:bc:0c:5d:2d:3e:a7:01:bd:4b:ae:29:dd:ab:74:fd:63:0f:
08:c9:ba:14:6b:4f:6f:db:ea:c1:7b:41:8e:ca:ec:8b:29:ef:
7a:5a:14:b7:5f:8b:b1:37:04:5b:9d:14:49:67:35:67:25:a8:
e9:f7:78:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG
QkNCQkQ4QkQwHhcNMjYxMDI4MTYwNjA3WhcNMjYxMTA0MTYwNjA3WjAYMRYwFAYD
VQQDEw02YWUyMWQ2Zi0xNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyKqjWxPbdlGBU3IOzxTnMDYhWdQWjcPkcqcDiD1eY9Q5So3tqLy8fT1akGtz
cs13MAZhDrzRbAIK/l7Qrmpf8Mz64oF1BGKJ8Wy4JWQdQgfd1fnIA0ybiHxG2IGH
cgN3REpDzc8P5Wlb9TnSJH4AIp4l28xzjVWMBOt+KjNuyQ2/WPqG/JvQ0SY13wEO
JNiYVBXbFxNBofhvryEpJ9Cd9XOB3N0SacmPoAs6TQsRahnnD6dBkZnPLTz+2DzL
gIaEA22kwknB+NJEmKHP+fUJsQwTeP1wX4FdUW7kysU7LKCeS6hpV7xN5/ag4wGi
4hbn/8bjpBaCSxbMM8PWpv/gOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4Ya/Yr
sX8IlSYfo5bbn0udzTcNMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC
QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy
TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx
T0p0b3pfa29hZ2o3eTcyTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACcxg2QtI7tXvzNDvwFl4dlgBE7UKx1UN6TlDGt3f5t2mNf0zI8FP6bRbEm2w
xVOX2tSxdx2ZjvBI/+ctchHzY4Wz1Vj6h41c6lI7lIJMkb8443ETgs9lpCj2adBI
mehfdYxLvKN6Z1gKz7TEsIdHlSWY2a9kEiFlYm7HoIlDvZ57RfTgvP591sS6950Q
oDCbk3IGuC/nYlEB8C534zI5Entj18Vnrv/BrPRyKZyTEBPstOfxAbn2t2SS2AoG
CmqsVDi+QKfQH7wMXS0+pwG9S64p3at0/WMPCMm6FGtPb9vqwXtBjsrsiynveloU
t1+LsTcEW50USWc1ZyWo6fd4+g==
-----END CERTIFICATE-----
Generated at Thu Oct 29 20:02:02 2026 by rpki-client