
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier: zxuF+n/dbliHzSe/t90bBkg7IcIU5G6R4WBmg7JFpGs=
Subject key identifier: 3B:A7:E9:A3:1C:FC:3F:A0:9B:7B:63:7A:F7:66:64:5E:B0:1A:4F:41
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number: 01EB
Signing time: Mon 05 Oct 2026 04:05:00 +0000
Manifest this update: Mon 05 Oct 2026 04:04:59 +0000
Manifest next update: Mon 12 Oct 2026 04:04:59 +0000
Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: 3jMZhgj4qxWNUVrPJixUicHVKHuC4qHe1xckhvS9rKg=)
2: D0F5F16EBFB811F0B09C3E14C4F9AE02.roa (hash: b4+csE685B8vXmBeYhE1afbxpZz6mNZMcg0Inl+/Jyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Validity
Not Before: Oct 5 04:04:59 2026 GMT
Not After : Oct 12 04:04:59 2026 GMT
Subject: CN=6ac321eb-ff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:df:6b:7a:95:d2:37:95:ef:4e:3d:0a:cf:
90:08:bb:4d:0f:21:1c:27:10:28:2b:26:82:6c:71:
2a:7c:0f:4d:d1:6a:7b:82:ea:90:43:99:52:e5:08:
a4:ba:65:8b:dd:b1:a9:8a:f9:50:47:04:9d:2a:39:
b5:9c:f9:02:06:fc:b9:c1:0d:aa:40:cf:ae:bd:36:
9e:c6:b4:4b:2a:60:03:97:33:c7:a2:0a:ed:cd:c7:
5d:b8:4b:cf:16:d3:a1:32:66:53:40:ac:b6:35:c2:
16:da:ed:08:51:db:5a:92:79:fd:d9:66:53:4c:b6:
e4:75:3b:c3:7c:0d:bb:b4:2d:e8:2e:b8:f8:90:fa:
f9:e5:5c:b5:a5:da:29:f1:8e:99:46:af:2b:ce:93:
19:93:89:a8:c5:16:55:49:7a:62:d7:7c:24:8f:96:
a6:67:57:35:c8:b1:eb:a6:6b:9d:60:33:64:95:8d:
1c:36:c7:df:c2:a9:b7:5a:2f:5b:f3:81:1c:13:5a:
ee:f9:e4:fc:41:00:16:e9:0b:50:ea:0b:a4:65:fc:
06:0e:16:7a:9c:ea:a0:55:38:6e:d7:e2:fc:5a:00:
5a:3e:e2:db:a5:f4:d5:09:40:07:47:9d:0e:ae:06:
a5:6c:55:07:ef:72:44:d2:e7:7b:dc:ff:8d:86:a8:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:E9:A3:1C:FC:3F:A0:9B:7B:63:7A:F7:66:64:5E:B0:1A:4F:41
X509v3 Authority Key Identifier:
keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:e4:f1:40:1c:55:2a:ed:92:f8:1d:4e:23:25:39:f6:ef:76:
66:fe:fa:e8:24:53:55:99:df:31:2c:76:d9:61:aa:a2:06:52:
8f:b3:2f:e6:77:43:b6:d5:d6:b8:d4:e0:95:74:f5:9c:aa:2f:
2e:c4:1f:8e:01:19:22:80:22:f4:3f:e5:cb:3e:ed:19:b9:2c:
ef:31:14:2f:34:fb:a2:5c:7b:da:e9:44:52:ec:86:a0:f9:4c:
02:06:ec:eb:95:58:ea:2e:22:0b:39:c3:76:9f:19:b5:39:24:
2f:94:28:ee:b8:8e:ea:59:82:42:e2:3e:4b:df:55:dd:be:b2:
f5:5e:34:48:ad:58:e7:27:c0:37:a0:2e:36:44:4c:61:eb:3d:
fa:97:03:07:17:2f:8c:26:e2:f9:5c:95:f0:2b:d4:87:93:e8:
9c:70:1e:c4:17:5b:7d:2f:64:3a:c3:b1:90:47:e6:8d:2e:79:
8b:e8:c4:6d:e0:1f:77:21:55:ce:3e:38:56:23:68:0a:a0:6a:
aa:02:a7:58:18:eb:fe:79:2b:d1:9b:75:07:da:9b:3c:66:72:
55:4f:a2:ff:0e:6f:66:78:a1:b6:b0:d4:f1:ef:17:b4:0c:26:
61:43:88:f2:cc:44:c9:df:cd:18:94:e3:17:f5:40:72:cf:a0:
96:bf:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:08:17 2026 by rpki-client