
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
File: Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json)
Hash identifier: QaymASocrsXWVtvXMX3LqMclC0JaWyvr9s2McV6n4FY=
Subject key identifier: 6E:C5:96:0F:7A:18:1A:B5:55:03:05:02:A9:65:D7:6B:E4:54:A4:08
Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
Manifest number: 0129
Signing time: Wed 19 Aug 2026 06:25:54 +0000
Manifest this update: Wed 19 Aug 2026 06:25:54 +0000
Manifest next update: Wed 26 Aug 2026 06:25:54 +0000
Files and hashes: 1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: 3EJpVB9Jyf8OyHjOpjU/mSv1PAPGqdxT7C89TovXyvQ=)
2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: Nuy8wkTfNQsDA+tWgvTQcyjhbo91R+mIegI98+xjZxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC
Validity
Not Before: Aug 19 06:25:54 2026 GMT
Not After : Aug 26 06:25:54 2026 GMT
Subject: CN=6a854c72-2297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:40:66:e3:3a:ba:d7:3a:cb:49:6c:46:a2:
45:7e:ea:c0:8b:de:9e:fa:59:62:ac:2b:3a:c9:59:
82:5a:eb:57:b2:21:20:76:04:ab:89:44:81:0a:3d:
16:50:44:3f:cd:2e:46:77:b6:31:b7:2c:d1:73:13:
d1:ad:44:c7:2e:7e:af:d4:db:83:6d:ea:47:18:68:
f1:c9:76:36:d4:29:bd:84:bd:b7:2d:59:60:ad:e3:
8a:b6:c0:63:d8:e1:a8:ad:5e:e9:ea:20:4e:e2:2f:
8a:8e:db:c1:8a:61:83:59:c9:1d:fd:a1:dd:c4:61:
22:e9:be:8f:a6:d5:d1:d2:4f:ea:9d:f0:25:b0:31:
5c:05:3e:62:31:4a:2c:8f:a1:89:e3:81:52:52:c6:
44:49:f7:3e:20:7d:ff:ec:35:4f:89:01:e9:ea:0b:
c5:b5:a9:4d:d9:b8:2c:ed:77:c9:41:6f:6b:9f:07:
08:c3:be:01:b0:5a:02:a8:1e:0f:7c:10:a8:65:84:
0a:e1:ca:6d:c6:6c:aa:d5:fd:70:04:b4:17:a4:31:
03:d3:98:07:5a:36:c5:e4:98:bd:fa:c2:98:6f:63:
71:d5:0c:b4:07:fd:13:ba:27:f5:8a:fc:c6:24:82:
76:79:20:57:0b:77:83:a0:d9:14:f1:84:09:46:c0:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:96:0F:7A:18:1A:B5:55:03:05:02:A9:65:D7:6B:E4:54:A4:08
X509v3 Authority Key Identifier:
keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:73:8b:ff:9c:15:be:38:c7:8f:7f:77:5d:ef:e7:72:91:64:
25:7e:16:ee:6d:13:de:23:5d:9c:33:d5:3f:38:1c:f6:c9:c2:
82:16:8f:47:c2:aa:b6:50:35:5f:76:e7:98:44:20:f7:e5:c2:
30:16:5a:0f:26:b3:47:d1:c2:53:01:12:9f:9d:58:8b:ab:72:
1d:96:8c:89:74:ea:5a:12:fe:cf:f8:d3:12:7b:33:46:d5:3a:
96:47:d7:96:8b:72:e0:44:92:0c:d0:38:c1:5f:79:80:11:1d:
a6:8d:e6:10:99:6d:9a:95:72:8d:56:7b:b4:5d:0d:c0:fd:23:
9b:bf:3e:8a:33:72:6d:79:96:29:8d:3c:5c:89:1b:02:82:50:
dc:76:c2:7c:57:f6:b5:87:5b:0f:28:9e:eb:15:9a:6c:e6:ab:
29:e8:b7:72:c0:89:67:3c:79:f0:01:03:d7:25:cf:9e:ea:29:
8f:a4:97:4b:ff:30:1c:2e:98:97:62:12:66:5d:63:51:26:31:
9f:bd:44:1c:40:12:3d:55:5a:8e:28:dc:5c:d8:00:c6:70:02:
18:32:0f:19:92:66:ce:c0:0f:68:16:29:cb:ef:55:25:2e:0c:
d7:37:83:82:00:d8:b5:2c:bf:3a:60:32:50:5f:31:c2:14:c5:
e9:c5:f1:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzNTcxMTAvBgNVBAUTKDM2MUZBREEyRTBBODhDRjI4N0Y0Q0U2Q0MzQjQ0NjJD
OTEzMzBCRkMwHhcNMjYwODE5MDYyNTU0WhcNMjYwODI2MDYyNTU0WjAYMRYwFAYD
VQQDEw02YTg1NGM3Mi0yMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAryRAZuM6utc6y0lsRqJFfurAi96e+llirCs6yVmCWutXsiEgdgSriUSBCj0W
UEQ/zS5Gd7YxtyzRcxPRrUTHLn6v1NuDbepHGGjxyXY21Cm9hL23LVlgreOKtsBj
2OGorV7p6iBO4i+KjtvBimGDWckd/aHdxGEi6b6PptXR0k/qnfAlsDFcBT5iMUos
j6GJ44FSUsZESfc+IH3/7DVPiQHp6gvFtalN2bgs7XfJQW9rnwcIw74BsFoCqB4P
fBCoZYQK4cptxmyq1f1wBLQXpDED05gHWjbF5Ji9+sKYb2Nx1Qy0B/0Tuif1ivzG
JIJ2eSBXC3eDoNkU8YQJRsC2kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7Flg96
GBq1VQMFAqll12vkVKQIMB8GA1UdIwQYMBaAFDYfraLgqIzyh/TObMO0RiyRMwv8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xNEE3OEYyQ0RG
OEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQS0g5TTVzdzdSR0xKRXpD
X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNfdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODM1Ny8xNEE3OEYyQ0RGOEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQ
S0g5TTVzdzdSR0xKRXpDX3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN3OL/5wVvjjHj393Xe/ncpFkJX4W7m0T3iNdnDPVPzgc9snCghaPR8KqtlA1
X3bnmEQg9+XCMBZaDyazR9HCUwESn51Yi6tyHZaMiXTqWhL+z/jTEnszRtU6lkfX
loty4ESSDNA4wV95gBEdpo3mEJltmpVyjVZ7tF0NwP0jm78+ijNybXmWKY08XIkb
AoJQ3HbCfFf2tYdbDyie6xWabOarKei3csCJZzx58AED1yXPnuopj6SXS/8wHC6Y
l2ISZl1jUSYxn71EHEASPVVajijcXNgAxnACGDIPGZJmzsAPaBYpy+9VJS4M1zeD
ggDYtSy/OmAyUF8xwhTF6cXx5A==
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:07 2026 by rpki-client