
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json)
Hash identifier: jjJJ0IznPsz2QeuCjvl4SzhrxckXmAEmrHgfOIVbCL0=
Subject key identifier: CF:E4:4C:08:AB:6E:41:06:3A:40:45:34:1B:EE:E2:C6:0A:0B:FE:6C
Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74
Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
Certificate serial: 0A65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
Manifest number: 0A56
Signing time: Wed 20 May 2026 19:42:59 +0000
Manifest this update: Wed 20 May 2026 19:42:59 +0000
Manifest next update: Wed 27 May 2026 19:42:59 +0000
Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: vy4wwfwxzNeRyifD4lei6oC9QmpCt+3ytgzYHJ3nAMg=)
2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: hntqZR06bEi96YIe77PYhaN+w+8+mUWcyue+uEJX0V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl
rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2661 (0xa65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
Validity
Not Before: May 20 19:42:59 2026 GMT
Not After : May 27 19:42:59 2026 GMT
Subject: CN=6a0e0ec3-df31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:fa:14:05:8b:fe:4c:ec:59:e6:58:55:39:
0a:a1:09:45:44:91:60:e8:e9:27:11:f3:52:d1:a1:
72:e3:e5:3f:cc:32:91:d1:1c:d6:9b:18:b8:c0:35:
bf:4c:f1:02:de:b8:04:a9:23:f6:ba:29:28:0e:52:
87:3b:63:9e:df:9d:5c:4b:18:b8:dc:0f:38:04:d3:
60:59:87:9e:df:d9:43:56:60:c3:77:40:b7:a3:b1:
e6:08:a6:75:2e:dd:4c:82:9f:03:95:85:89:88:9c:
de:65:c0:c0:87:77:a4:6a:0f:7d:c2:a6:a3:0a:95:
f8:df:95:92:0b:3d:e3:ff:1a:15:4b:69:fc:03:b5:
bd:f6:1a:cf:2f:c0:a0:8f:f7:68:da:f4:99:a7:51:
b2:ad:31:f7:97:b4:7a:8c:11:4b:5e:58:83:c0:70:
93:08:ec:c3:c7:f7:03:fc:dc:53:c4:25:c0:14:36:
43:b7:4c:51:85:79:f6:4b:4d:c9:49:cc:60:08:f8:
76:c9:0d:1a:f1:02:35:29:cb:de:00:52:85:47:1d:
52:84:a3:6c:b6:29:ba:ab:de:e0:a5:81:1b:19:e4:
da:d6:de:82:1f:36:c5:b4:5d:ad:6b:64:5f:88:55:
e9:fd:59:de:af:b9:7d:d5:ed:1c:ca:79:fc:e2:15:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:4C:08:AB:6E:41:06:3A:40:45:34:1B:EE:E2:C6:0A:0B:FE:6C
X509v3 Authority Key Identifier:
keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:59:52:47:d7:ef:d1:e6:a8:8a:9b:30:d0:69:76:e1:79:c0:
ae:66:ab:bf:46:c4:dc:7d:d1:ab:39:99:67:c4:42:4f:7e:dc:
ee:c1:78:02:04:3c:08:c8:9b:99:a1:3e:50:3a:82:1f:4f:fe:
4b:b6:da:88:7c:ce:2d:06:76:5c:cc:a9:9e:89:7a:15:f1:db:
8d:c8:98:de:ce:39:4f:21:63:0a:d3:01:15:b8:24:6c:82:c4:
b3:26:e9:74:83:35:68:f7:3c:ae:6a:81:4c:4a:f1:1e:df:bd:
62:5b:4e:87:b1:be:25:20:ca:48:27:1f:71:99:fc:49:3a:15:
85:ce:01:7b:23:a2:71:87:3d:20:7a:28:f9:5c:a0:9a:a0:44:
59:dc:e0:76:85:ab:f2:8e:53:67:e8:9e:3a:17:16:f8:30:39:
95:47:d2:cf:a9:ca:7a:a4:46:cf:41:b9:d4:6d:4c:95:df:c0:
c1:72:28:55:a6:7e:6f:df:8c:2d:3a:2b:4e:0b:2e:3f:4b:9c:
a3:0f:3e:3b:90:46:5f:76:b8:d4:f3:44:15:97:cb:bf:b2:be:
89:4c:fc:5b:e1:84:a0:15:2f:e3:f0:b5:8b:bf:b5:1b:72:d2:
64:e7:22:71:5f:96:d7:e8:c6:da:02:b3:97:e0:76:ed:bf:09:
7c:58:08:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:46 2026 by rpki-client