
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
File: Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json)
Hash identifier: oYlYCalrOEbjLsGVbYBDDcut40AYJs5qOP6GhavFEq4=
Subject key identifier: EB:4E:FD:31:31:CC:AA:F5:C2:12:EC:95:39:D5:33:FB:CD:9E:F6:25
Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
Manifest number: 0136
Signing time: Sun 13 Sep 2026 05:32:15 +0000
Manifest this update: Sun 13 Sep 2026 05:32:15 +0000
Manifest next update: Sun 20 Sep 2026 05:32:15 +0000
Files and hashes: 1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: FKdPOFzhua6mDMO69VEp3EdTMXHOIrGP/38vKGaY+LU=)
2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: Nuy8wkTfNQsDA+tWgvTQcyjhbo91R+mIegI98+xjZxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Sep 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Validity
Not Before: Sep 13 05:32:15 2026 GMT
Not After : Sep 20 05:32:15 2026 GMT
Subject: CN=6aa6355f-dc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:ad:3b:19:ac:02:6b:de:5f:05:e4:a3:45:
01:71:19:7b:1f:f4:1a:66:e9:75:29:1e:c6:8d:1d:
78:6d:e3:d5:a8:0a:4e:53:49:46:26:4c:31:16:d4:
db:57:06:36:93:a2:71:98:ec:8c:35:d8:02:71:82:
e6:f5:65:f2:78:29:d9:d0:e1:28:c9:dc:6e:4a:e3:
10:8a:93:e7:3d:82:4d:73:82:60:c3:e9:70:38:5f:
3b:14:b3:28:ab:9f:42:1f:37:80:14:37:c3:71:8d:
cb:24:fc:82:c9:39:4b:11:cf:19:1a:4e:e1:84:41:
9a:3b:62:13:79:39:40:f4:5c:4e:13:6e:e6:d5:b8:
5a:c2:e8:0c:91:88:af:09:53:7a:19:3d:db:e6:2b:
19:2f:e0:da:a3:2c:b6:87:e2:3d:39:d8:57:cb:d4:
67:49:99:ef:44:a5:d4:8c:00:78:ac:f7:bf:35:2c:
bd:26:ae:cf:0a:d9:e5:7f:7a:67:91:95:eb:e9:44:
fd:3d:b7:11:30:45:55:0a:cc:93:47:fb:43:70:67:
51:f4:43:8d:02:a5:2b:e1:dd:bc:ed:64:51:e2:14:
7f:7f:98:a0:35:9d:aa:65:88:36:d0:1d:06:32:4d:
6b:ec:31:a7:d4:7c:76:e3:9a:f3:3c:b5:f9:b9:85:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4E:FD:31:31:CC:AA:F5:C2:12:EC:95:39:D5:33:FB:CD:9E:F6:25
X509v3 Authority Key Identifier:
keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:4d:7b:b8:c5:c9:ec:f3:e8:52:01:d0:cf:be:5f:17:0b:24:
2c:eb:87:29:0d:ec:dc:a1:4f:d2:c0:6b:e1:d5:0e:13:b8:bc:
a4:cd:d1:ac:c5:e3:a3:ac:ae:47:7a:86:e5:fa:21:65:8e:6d:
5d:9b:ea:19:2f:b0:aa:28:92:a2:53:e9:c0:44:72:01:18:ee:
29:70:1a:b3:03:86:d5:d9:9c:b7:47:33:82:14:c1:63:a6:78:
de:9d:76:90:4f:9d:bb:1f:fa:63:d7:ae:4a:94:cd:3e:7c:ab:
40:53:a6:ee:e7:5d:81:96:46:3e:fa:cf:b4:30:e4:43:2c:c3:
3c:59:1b:a9:15:16:aa:63:6d:65:88:7f:bc:0d:c6:44:2f:8c:
96:17:32:af:3b:04:2b:b8:39:08:74:76:ea:8a:be:90:d0:26:
3d:4f:ec:0e:7a:01:1e:e4:c4:33:de:b5:74:91:e4:9f:2d:15:
41:40:c5:46:51:e7:33:19:79:78:61:fc:bb:39:86:c5:02:ba:
09:12:de:02:11:c8:b4:7a:2b:1c:26:06:00:03:44:5e:17:b6:
c5:6e:4b:35:ed:d3:48:0e:6e:dc:f7:22:f6:5f:0b:58:06:a9:
49:c6:0a:37:32:2f:af:c4:a2:82:0d:96:56:e6:64:58:59:ea:
f3:9e:89:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzNTcxMTAvBgNVBAUTKDM2MUZBREEyRTBBODhDRjI4N0Y0Q0U2Q0MzQjQ0NjJD
OTEzMzBCRkMwHhcNMjYwOTEzMDUzMjE1WhcNMjYwOTIwMDUzMjE1WjAYMRYwFAYD
VQQDEw02YWE2MzU1Zi1kYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkKStOxmsAmveXwXko0UBcRl7H/QaZul1KR7GjR14bePVqApOU0lGJkwxFtTb
VwY2k6JxmOyMNdgCcYLm9WXyeCnZ0OEoydxuSuMQipPnPYJNc4Jgw+lwOF87FLMo
q59CHzeAFDfDcY3LJPyCyTlLEc8ZGk7hhEGaO2ITeTlA9FxOE27m1bhawugMkYiv
CVN6GT3b5isZL+Daoyy2h+I9OdhXy9RnSZnvRKXUjAB4rPe/NSy9Jq7PCtnlf3pn
kZXr6UT9PbcRMEVVCsyTR/tDcGdR9EONAqUr4d287WRR4hR/f5igNZ2qZYg20B0G
Mk1r7DGn1Hx245rzPLX5uYXXvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtO/TEx
zKr1whLslTnVM/vNnvYlMB8GA1UdIwQYMBaAFDYfraLgqIzyh/TObMO0RiyRMwv8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xNEE3OEYyQ0RG
OEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQS0g5TTVzdzdSR0xKRXpD
X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNfdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODM1Ny8xNEE3OEYyQ0RGOEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQ
S0g5TTVzdzdSR0xKRXpDX3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl017uMXJ7PPoUgHQz75fFwskLOuHKQ3s3KFP0sBr4dUOE7i8pM3RrMXjo6yu
R3qG5fohZY5tXZvqGS+wqiiSolPpwERyARjuKXAaswOG1dmct0czghTBY6Z43p12
kE+dux/6Y9euSpTNPnyrQFOm7uddgZZGPvrPtDDkQyzDPFkbqRUWqmNtZYh/vA3G
RC+MlhcyrzsEK7g5CHR26oq+kNAmPU/sDnoBHuTEM961dJHkny0VQUDFRlHnMxl5
eGH8uzmGxQK6CRLeAhHItHorHCYGAANEXhe2xW5LNe3TSA5u3Pci9l8LWAapScYK
NzIvr8Sigg2WVuZkWFnq856JZQ==
-----END CERTIFICATE-----
Generated at Sun Sep 13 08:33:29 2026 by rpki-client