
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
File: NpGJraGZWwIPq4bXdZjGDCl0d1U.mft (raw, json)
Hash identifier: DgUKhI1r1L/atsfwkvSFoMAboJXUG3DYnlzKsNGcx7A=
Subject key identifier: 6C:A2:F5:DD:BD:66:6C:E6:85:D5:34:96:E1:9A:20:6D:D8:0B:33:A9
Authority key identifier: 36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55
Certificate issuer: /CN=A91EC167/serialNumber=369189ADA1995B020FAB86D77598C60C29747755
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
Manifest number: 40
Signing time: Wed 07 Oct 2026 09:11:59 +0000
Manifest this update: Wed 07 Oct 2026 09:11:59 +0000
Manifest next update: Wed 14 Oct 2026 09:11:59 +0000
Files and hashes: 1: NpGJraGZWwIPq4bXdZjGDCl0d1U.crl (hash: JaDWGbmiLetk63Z54JwhcUxJRxdmT2v5glptuqjB/CY=)
2: B88C85348C0411F196792E7B4011F970.roa (hash: og2FsMI+6JRvqJvW9dRUgtuwJbUJvfXWEyBkZvtW874=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl
rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC167, serialNumber=369189ADA1995B020FAB86D77598C60C29747755
Validity
Not Before: Oct 7 09:11:59 2026 GMT
Not After : Oct 14 09:11:59 2026 GMT
Subject: CN=6ac60cdf-c28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:ee:82:aa:b9:01:aa:2d:9a:60:ed:54:bd:
90:5c:71:80:64:1d:07:e1:e2:54:c6:a7:8b:87:e0:
7c:ce:e2:2e:a9:2f:b1:09:50:19:6d:2e:10:df:fb:
ce:ff:0f:6f:58:93:fc:40:24:01:30:e3:e8:33:35:
76:69:e3:aa:b9:30:d1:36:57:92:fc:07:a7:dd:74:
5b:2a:fe:6c:16:ea:9c:2d:ae:4a:9f:35:0a:a5:93:
0d:c3:6c:e4:09:13:7d:a9:40:bf:d1:0c:01:3b:b3:
f0:86:a0:47:82:1e:1d:88:d8:38:50:49:52:e0:67:
14:9c:b9:9c:1a:25:2c:81:c7:ad:a1:3f:f4:b3:71:
73:4b:a9:d8:1a:ab:47:aa:73:4a:74:09:d2:5c:f7:
2e:8b:19:82:f3:45:9f:00:1a:51:89:73:8d:cd:6c:
ae:51:b2:f7:65:19:92:d1:9d:ca:21:83:03:37:22:
74:b8:6e:39:d9:2e:34:ee:e7:38:29:17:cd:f4:f4:
d7:fa:8b:f1:3b:6a:21:8a:c5:fa:b3:99:51:85:a5:
49:68:0b:6d:f0:5f:ba:c8:e6:93:66:be:d0:94:e6:
2b:15:83:91:3d:2e:cc:65:ed:fa:b2:0a:cf:8d:80:
46:29:a8:8c:15:03:d1:00:ae:60:a5:43:e7:97:97:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:F5:DD:BD:66:6C:E6:85:D5:34:96:E1:9A:20:6D:D8:0B:33:A9
X509v3 Authority Key Identifier:
keyid:36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c3:69:3a:20:07:e1:df:47:66:c8:08:7c:0c:7f:dc:bb:dc:
de:a5:ee:c8:e1:2c:8c:89:82:22:b3:05:5c:9d:ad:8f:5c:85:
2a:c5:3d:86:24:4b:15:65:34:09:9e:ab:10:4a:94:b9:17:40:
64:fa:0d:89:f0:c4:e9:e9:68:4a:b1:73:11:aa:0d:23:a0:2c:
6c:e4:eb:0d:cc:c7:c1:fd:b0:30:ae:5d:93:27:83:45:f3:70:
56:32:0b:5c:8b:6b:4a:eb:b2:66:1f:18:db:e9:13:95:f9:a1:
09:8e:6e:89:5b:bd:30:d4:0f:50:a2:5d:97:c5:e4:b2:43:c0:
0f:0e:4d:d1:74:18:65:40:3a:15:6a:5c:d3:ea:e8:2f:25:9b:
13:60:64:0e:fa:b5:7f:a6:30:2c:55:93:a9:ae:a9:e4:9d:23:
28:96:3a:30:24:68:77:34:f8:3c:01:39:b4:33:39:63:74:ff:
33:3b:cc:90:0b:d6:da:53:42:7a:e1:a8:fa:48:7c:62:82:97:
6e:77:f1:a8:e6:18:9f:4b:e1:0d:23:84:8e:4b:2c:19:dc:14:
8f:db:b9:fb:a3:4d:f9:2f:24:0a:48:de:1f:fa:9c:fc:60:7a:
f8:cd:e3:68:56:fc:32:56:2a:dd:60:3c:69:b1:56:75:e2:4b:
a8:a7:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:05:01 2026 by rpki-client