
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json)
Hash identifier: 4u+LVFTyvcoPbqVuRuj/N6r9WtuajJ7knY8RMQDqLDY=
Subject key identifier: FA:62:10:EB:A0:72:1E:67:FB:BD:F5:7D:69:7F:AF:81:C1:BC:5B:1B
Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Certificate serial: 0729
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
Manifest number: 0721
Signing time: Sat 20 Jun 2026 21:54:23 +0000
Manifest this update: Sat 20 Jun 2026 21:54:23 +0000
Manifest next update: Sat 27 Jun 2026 21:54:23 +0000
Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: Rp/kyfdY6fRfl5ugCrsXeDBgs61bPDpN+vnP/aL6zEU=)
2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: 2cGQ0cYN6rxm/5CfWmmTTZtEMPdc416gyQEzwHIqQ5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl
rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 21:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Validity
Not Before: Jun 20 21:54:23 2026 GMT
Not After : Jun 27 21:54:23 2026 GMT
Subject: CN=6a370c0f-16ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:1a:90:78:97:09:7b:f2:c2:b4:8f:3e:39:
0e:1f:2c:3c:c0:7a:9b:90:98:9a:95:40:1c:20:c4:
95:5e:58:08:dd:3d:c3:cd:80:f0:31:4c:c7:a4:4e:
a2:98:96:fc:e8:de:ec:ce:cd:09:b0:a9:d5:79:49:
78:7a:02:a9:f0:48:2b:36:a5:82:a5:8c:8a:d4:47:
c4:88:75:55:a0:79:d3:63:8b:25:f1:00:fc:17:12:
5c:36:2c:c8:90:ef:e3:d5:d5:11:64:94:ae:45:c6:
7a:b1:12:af:99:4f:b6:50:ad:73:9f:40:41:42:44:
fe:96:e2:e2:48:50:10:0c:9f:24:5c:35:2d:21:20:
12:02:21:c3:7b:e3:f3:20:fd:37:74:ff:ca:7a:6e:
97:eb:c7:3d:65:21:ab:08:4c:15:f8:a0:ea:c9:76:
e6:a3:6b:a6:88:22:59:d5:96:e3:69:18:f0:37:4a:
0c:e5:03:86:b7:dd:8d:82:e9:04:93:ae:f7:9a:45:
7d:7b:cd:41:fe:1f:57:7f:12:2a:a5:60:82:5f:e0:
32:1b:e9:d5:0d:86:48:d4:11:1a:43:08:83:d5:d0:
31:29:49:18:6b:1d:cc:28:27:79:28:43:e1:28:1e:
ad:c0:b7:df:d4:e6:8e:4a:4b:1d:7a:c9:37:22:40:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:62:10:EB:A0:72:1E:67:FB:BD:F5:7D:69:7F:AF:81:C1:BC:5B:1B
X509v3 Authority Key Identifier:
keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:da:4d:93:49:a7:83:b2:32:8a:01:8b:aa:0d:ec:67:81:6b:
c7:fa:51:74:12:ea:1d:0a:a9:4e:31:51:01:3f:ff:59:d0:a9:
f5:70:22:29:21:55:a8:3f:6a:c8:4b:84:f7:4d:94:f1:ca:40:
72:cb:a2:95:b9:4f:84:eb:10:89:6f:81:d0:81:90:09:e1:0e:
60:c8:2d:11:9d:1f:98:b0:a3:d4:1b:00:35:ea:e8:6c:bc:4d:
79:c3:51:89:b4:c1:64:93:88:68:fd:37:63:da:e3:8f:93:ad:
02:b1:df:d2:a6:b2:10:a3:9b:27:bb:55:fa:b8:4f:61:bc:dd:
b1:da:79:2c:cc:0f:20:30:3e:bc:55:42:02:94:4a:77:73:06:
03:1a:12:4b:0d:55:5f:ec:17:57:a8:db:1d:54:23:3d:e0:23:
b5:e8:01:06:69:7d:f2:76:a1:c2:24:1b:8f:52:93:4c:7c:9a:
2a:34:cc:60:fc:d4:28:6b:ec:63:3d:44:f8:2d:ae:fd:85:45:
7d:51:f1:10:ae:97:4c:9a:78:e4:98:61:15:2a:65:13:3a:3c:
12:99:e9:10:4a:b2:2e:39:95:79:05:f6:bb:1a:8b:72:00:70:
6a:51:49:a4:77:c2:a3:85:cf:e8:d9:0a:c2:ae:3d:59:29:15:
1b:2b:af:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:45:23 2026 by rpki-client