
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
File: nLbmSsdFgpqjwVQHs-QCsgahrxk.mft (raw, json)
Hash identifier: rMLRQs4UQvD0QQFSKJ/BE3kdHN5VPpVbB28SlVB7tQ4=
Subject key identifier: F1:EB:08:47:6B:B0:17:C3:E1:88:17:09:66:9D:5C:C7:6D:0D:6D:1A
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Certificate issuer: /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
Manifest number: 57
Signing time: Sat 03 Oct 2026 08:56:44 +0000
Manifest this update: Sat 03 Oct 2026 08:56:43 +0000
Manifest next update: Sat 10 Oct 2026 08:56:43 +0000
Files and hashes: 1: nLbmSsdFgpqjwVQHs-QCsgahrxk.crl (hash: U3FWSme+O2z3nYUCsMXr57W+Kln1UaBbbCkWCvL0CdY=)
2: 6B0AC84C3E1711F1A511DF78B0833773.roa (hash: V9OAtWmcfm4Nuv1e1Q4YP0cUaxGAb0f/aKkaOZRJSDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Validity
Not Before: Oct 3 08:56:43 2026 GMT
Not After : Oct 10 08:56:43 2026 GMT
Subject: CN=6ac0c34c-9bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:67:11:87:0c:64:12:4d:a3:76:41:c0:92:
9b:37:7d:9a:1d:89:ad:7a:26:33:7f:c5:f2:69:6b:
4b:aa:cc:1c:e5:c3:9a:13:60:d1:30:63:72:01:65:
1b:f7:72:07:4f:4e:9c:0c:50:f5:55:56:47:b9:2a:
e0:91:a7:2f:2b:68:5a:8a:e1:ed:f6:c3:62:ab:22:
e4:44:ca:44:29:b2:a2:6c:c0:4a:7b:ac:ae:2e:5f:
90:2a:eb:36:1b:42:af:1b:a3:71:3d:25:0b:dd:c4:
34:5a:c2:6a:13:48:f7:0a:10:d4:82:9c:c1:70:7f:
31:d1:a3:75:bb:75:04:d8:bd:71:56:f8:80:fa:ec:
fe:af:8a:f1:dc:b3:2c:74:b4:c9:37:6d:4a:54:ee:
99:7c:4a:21:0c:e0:55:a2:ef:0c:76:ea:bd:6a:e0:
e7:19:3b:72:af:05:e4:ba:2e:bb:82:95:58:6e:6b:
39:01:a9:40:d6:a5:3d:0b:1f:ff:09:cc:98:56:38:
ff:94:7c:98:da:ac:9e:01:18:70:d4:b5:aa:72:b7:
25:6a:22:1c:3a:f1:61:fd:73:8d:cf:9e:3c:b3:bc:
79:a7:d0:45:31:c2:4c:5c:5f:fe:05:aa:d2:37:90:
5b:5c:55:84:ba:e8:e2:42:a1:92:87:1e:66:1f:8d:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EB:08:47:6B:B0:17:C3:E1:88:17:09:66:9D:5C:C7:6D:0D:6D:1A
X509v3 Authority Key Identifier:
keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:36:3e:d9:f1:c5:fa:23:13:a8:d0:14:96:de:19:f4:8f:cb:
33:24:0c:da:26:55:f2:1e:0d:77:dc:83:da:02:58:d9:85:6d:
cd:2f:eb:95:f7:92:cf:eb:f2:9e:8a:01:55:7d:f7:e4:43:86:
ff:3c:e2:28:37:f6:24:06:b6:e1:75:20:93:3c:fd:fe:21:f1:
b3:9a:a3:37:40:bc:8e:91:85:34:99:b0:58:46:a1:8d:f3:28:
7b:67:fa:0b:f4:41:d0:ce:31:c1:9a:29:13:50:8a:78:5a:98:
7e:80:f5:2f:c5:87:50:0f:d0:55:a9:aa:6c:38:b9:7a:fe:57:
95:79:33:a0:a1:54:db:94:4b:48:e6:e2:76:36:d8:03:85:69:
11:6f:c9:7d:eb:1c:58:40:ef:39:38:b4:37:e1:c2:d4:6f:a3:
74:1f:ca:53:58:d0:38:7b:62:ed:f6:28:84:90:8e:8e:d4:3b:
e3:26:26:f7:15:9f:fa:94:4c:e5:e8:d2:e7:30:5a:93:dc:54:
c1:bd:cf:7a:8b:72:35:50:6c:64:0c:4c:18:85:1d:2c:cf:f0:
a3:16:95:5c:f0:25:ab:28:df:7f:d4:ed:0c:b9:86:71:5a:9d:
65:9f:2f:04:61:92:fc:70:1b:25:a4:a5:43:7c:cb:26:c8:95:
5c:b0:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:08:28 2026 by rpki-client