
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
File: nLbmSsdFgpqjwVQHs-QCsgahrxk.mft (raw, json)
Hash identifier: re7WCQPgsEmi1qv5Z5TK6SfZ7FFPgMFhGV+9pOZQI1o=
Subject key identifier: 68:14:6A:EC:14:C7:AE:76:46:FF:68:31:1E:0D:23:08:31:6E:5C:F0
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Certificate issuer: /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
Manifest number: 11
Signing time: Tue 19 May 2026 08:56:21 +0000
Manifest this update: Tue 19 May 2026 08:56:20 +0000
Manifest next update: Tue 26 May 2026 08:56:20 +0000
Files and hashes: 1: nLbmSsdFgpqjwVQHs-QCsgahrxk.crl (hash: tBev1Iow62H77hLiLmJIVAZC9+XDZafa2wWQuJr4l6Q=)
2: 6B0AC84C3E1711F1A511DF78B0833773.roa (hash: TJJKG9BrNls63ox4QV7qWwE0OnJEumnAFR/LmFcDwfM=)
3: 6A7A4C9A3E1711F1A511DF78B0833773.roa (hash: HR3Bw4cs3A87KRfcRVJWreHgQBXYrEw5cctSabHCe08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Validity
Not Before: May 19 08:56:20 2026 GMT
Not After : May 26 08:56:20 2026 GMT
Subject: CN=6a0c25b5-3701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:2a:89:43:59:4c:fd:69:f0:8a:7a:aa:85:
8e:79:b3:36:dd:e2:7f:b5:60:9b:43:ba:fb:0c:2e:
0d:ed:2a:52:07:0c:e6:11:0b:8b:c9:8a:55:85:b3:
aa:ef:c0:2e:67:1c:ab:74:01:51:63:04:26:1f:b3:
be:c3:3a:a8:4b:d0:18:14:89:7f:44:fe:b5:ce:e7:
f2:6a:02:7e:96:d2:16:79:28:c6:a1:8a:13:c1:0c:
6e:df:a2:f4:10:65:01:9d:6b:a2:0c:d5:e7:25:60:
50:c9:5c:0f:a0:ca:19:fa:34:5a:84:ea:88:37:73:
6e:ac:ec:ae:12:44:0b:c6:24:12:ea:58:68:6d:d6:
66:15:71:f6:9f:af:62:42:93:c0:44:07:0a:87:dd:
19:19:36:ed:a9:b5:eb:68:b5:89:ca:d1:9d:04:85:
da:94:2a:f7:52:6c:0d:e8:1e:19:9d:d6:e7:a4:f5:
c1:4e:42:20:8d:8d:a3:4d:65:81:12:5e:c4:c5:b0:
27:d1:3e:d3:0b:53:9c:41:ed:4d:7b:b6:b0:fd:ff:
bf:bc:b9:dd:8a:69:81:15:9c:ec:8b:93:8d:36:1d:
5a:15:9a:f2:f9:99:94:87:9c:7c:fd:75:36:cd:6a:
4f:97:21:87:f1:33:43:ca:b2:f1:c7:fc:80:1d:4a:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:14:6A:EC:14:C7:AE:76:46:FF:68:31:1E:0D:23:08:31:6E:5C:F0
X509v3 Authority Key Identifier:
keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:16:0b:85:2d:37:86:0d:77:ba:cb:44:da:b5:4a:6a:54:05:
70:1b:78:cf:f2:5b:86:b2:25:b0:a6:1c:1e:e5:58:e1:29:8b:
ee:4e:0c:c4:19:e1:1b:72:e1:50:b3:16:96:61:7a:62:47:cf:
82:88:6e:98:63:dc:a2:87:b6:f9:17:61:b7:d6:11:2c:17:7d:
55:2d:ba:09:e5:db:63:b7:26:e2:a6:ec:ef:25:99:68:0c:b2:
57:aa:36:d6:c1:a2:b3:b3:f2:a8:7d:3d:f6:5c:db:f2:d1:e4:
d8:eb:18:0e:7f:7a:c7:aa:fb:a2:67:9a:c2:11:3b:b7:cc:19:
1d:11:75:5f:e0:99:8e:b3:7f:64:fc:ab:7f:e9:f0:bd:54:d6:
2e:a3:f7:f6:e9:29:a7:86:c1:86:c2:1d:63:f6:a9:c6:4d:32:
19:16:12:6c:4f:0b:6a:be:d6:d1:90:c9:ae:17:b0:6d:16:79:
9e:5d:7a:36:5d:ea:05:09:c3:dc:86:8e:25:1c:7c:d3:36:08:
36:51:3f:8b:2d:62:f2:8e:66:6c:ca:57:ed:14:65:4f:2f:23:
c5:45:29:e7:57:16:6b:55:ba:22:ec:c9:88:a5:53:18:1e:4c:
dc:f7:6b:9a:a2:d9:50:6b:82:0e:22:1d:cd:11:4d:a9:69:a1:
72:ef:41:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:28 2026 by rpki-client