
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json)
Hash identifier: 19zxnHPab1B1D00kiQgyTZCltPPPGYRgyp6Jb8UqLWM=
Subject key identifier: AE:EE:AC:15:C6:3E:FB:E0:5B:A5:88:A1:AC:AB:19:6C:13:98:ED:DD
Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A
Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A
Certificate serial: 2AE0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
Manifest number: 2AD2
Signing time: Mon 06 Jul 2026 14:24:27 +0000
Manifest this update: Mon 06 Jul 2026 14:24:26 +0000
Manifest next update: Mon 13 Jul 2026 14:24:26 +0000
Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: 9fW4G1Rv65kV4FHiNtsOIbkWXaYgpqGoEf3uK79i/DQ=)
2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: Pj58dNaZu/U/JcWFr9d0FmcQsI/n3fUrfDxW8/v49HY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl
rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 14:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10976 (0x2ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A
Validity
Not Before: Jul 6 14:24:26 2026 GMT
Not After : Jul 13 14:24:26 2026 GMT
Subject: CN=6a4bba9b-1258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:bc:88:9c:44:b4:ea:94:a3:16:ab:2e:5a:
4a:cb:39:ed:c1:1e:5e:21:7a:14:d6:41:07:b5:40:
d0:06:40:31:a0:94:4d:44:e9:70:ef:74:e8:bf:2d:
54:66:50:c5:39:b3:e3:87:95:4d:57:27:a0:ba:78:
b0:a0:83:5a:fb:4f:29:c5:3f:93:f8:36:76:ce:eb:
ee:d6:47:07:25:79:58:56:6b:b4:99:73:a5:59:7e:
53:e2:42:39:df:70:c0:6c:53:ea:c1:1a:1e:99:f4:
98:45:38:bb:b6:ba:38:b3:ff:ef:79:a9:b1:f3:5e:
21:b6:58:c2:c2:4b:3e:99:5e:fa:75:31:fa:46:ec:
dc:3f:9f:91:7b:54:98:2b:1b:36:db:02:ff:77:22:
e5:b7:ba:36:89:16:66:c6:60:c1:57:1b:6c:da:25:
e4:e7:85:57:69:c6:e1:fd:69:8b:20:b7:6b:8c:ad:
5f:85:32:cc:ec:cf:01:d5:e8:e3:8a:e9:85:17:8a:
15:0a:3f:46:43:ee:6e:38:72:15:9c:70:44:79:7e:
2e:b0:dd:1e:e6:2e:5d:a6:1e:ad:7a:0e:c5:1f:c6:
fb:42:88:e3:91:9d:95:d5:35:f2:f7:e8:45:0a:6e:
6a:d1:96:d1:c1:71:8f:bb:84:e6:d4:8c:d8:b5:91:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EE:AC:15:C6:3E:FB:E0:5B:A5:88:A1:AC:AB:19:6C:13:98:ED:DD
X509v3 Authority Key Identifier:
keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:8c:01:54:71:47:9e:9d:ae:5f:d9:56:59:13:73:68:ef:bb:
e9:1c:4a:a0:cb:f6:8b:49:3e:e3:01:83:c3:aa:6a:05:eb:11:
63:f6:85:97:6f:4d:f9:2e:b0:5b:54:37:9e:6b:c1:f0:cb:79:
bd:0c:b1:56:e3:1b:91:8d:9a:b1:5e:62:c0:dd:5b:33:0a:8f:
5f:7a:96:0a:15:69:0d:63:4e:8f:48:f9:86:2a:d5:1c:6a:dc:
f2:d1:1e:42:04:98:c4:91:ed:63:fb:83:ff:af:37:15:79:1e:
b1:dc:e8:92:1d:b0:aa:c3:86:2c:f5:d5:c3:97:44:2d:f7:62:
12:0e:b5:6a:dd:f1:2e:ba:54:52:02:cd:29:9d:d9:5c:b4:a7:
77:70:06:08:28:0c:b9:74:8c:94:08:4b:c2:be:d6:de:6d:b0:
48:4d:73:24:86:2d:c2:90:79:66:c5:e3:12:9b:f1:93:b0:54:
80:61:a8:2e:13:c5:2b:a9:b1:11:c1:87:00:8d:ab:fd:a3:fc:
51:4b:58:6a:08:d0:48:07:80:79:5c:97:aa:18:f7:75:7f:9a:
27:4e:cd:35:9b:63:cb:f2:0c:bb:15:98:e0:cf:33:7a:a0:6f:
2a:79:9a:0e:7e:a2:3d:a6:94:60:68:08:17:a5:df:c0:bf:cb:
cf:fc:f3:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0
MzhFN0YwOEEwHhcNMjYwNzA2MTQyNDI2WhcNMjYwNzEzMTQyNDI2WjAYMRYwFAYD
VQQDEw02YTRiYmE5Yi0xMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAipm8iJxEtOqUoxarLlpKyzntwR5eIXoU1kEHtUDQBkAxoJRNROlw73Tovy1U
ZlDFObPjh5VNVyeguniwoINa+08pxT+T+DZ2zuvu1kcHJXlYVmu0mXOlWX5T4kI5
33DAbFPqwRoemfSYRTi7tro4s//veamx814htljCwks+mV76dTH6RuzcP5+Re1SY
Kxs22wL/dyLlt7o2iRZmxmDBVxts2iXk54VXacbh/WmLILdrjK1fhTLM7M8B1ejj
iumFF4oVCj9GQ+5uOHIVnHBEeX4usN0e5i5dph6teg7FH8b7QojjkZ2V1TXy9+hF
Cm5q0ZbRwXGPu4Tm1IzYtZGYtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK7urBXG
PvvgW6WIoayrGWwTmO3dMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0
MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4
N1NQdkx0cXhub1ZEam44SW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcYwBVHFHnp2uX9lWWRNzaO+76RxKoMv2i0k+4wGDw6pqBesRY/aFl29N+S6w
W1Q3nmvB8Mt5vQyxVuMbkY2asV5iwN1bMwqPX3qWChVpDWNOj0j5hirVHGrc8tEe
QgSYxJHtY/uD/683FXkesdzokh2wqsOGLPXVw5dELfdiEg61at3xLrpUUgLNKZ3Z
XLSnd3AGCCgMuXSMlAhLwr7W3m2wSE1zJIYtwpB5ZsXjEpvxk7BUgGGoLhPFK6mx
EcGHAI2r/aP8UUtYagjQSAeAeVyXqhj3dX+aJ07NNZtjy/IMuxWY4M8zeqBvKnma
Dn6iPaaUYGgIF6XfwL/Lz/zzfw==
-----END CERTIFICATE-----
Generated at Tue Jul 7 00:21:33 2026 by rpki-client