
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json)
Hash identifier: TWWcQHm/O85d/DNW1OO3bcrUK1rA3yRQojdO3+FpozQ=
Subject key identifier: 55:62:AD:F5:38:84:21:4D:98:B5:B3:75:DA:4F:0E:68:61:5F:59:E9
Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Certificate serial: 0401
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
Manifest number: 03FA
Signing time: Mon 01 Jun 2026 01:09:49 +0000
Manifest this update: Mon 01 Jun 2026 01:09:49 +0000
Manifest next update: Mon 08 Jun 2026 01:09:49 +0000
Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: lnb3z+hBddXFMLT8Xt9fw5MIyTjrO9MuBvZcqBG2ODU=)
2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: nCTovFi354+ZfaPTQ0ztwkkd94a5/Uc+5BEDc/vwPfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 01:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Validity
Not Before: Jun 1 01:09:49 2026 GMT
Not After : Jun 8 01:09:49 2026 GMT
Subject: CN=6a1cdbdd-a7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:f7:c1:76:e2:96:e3:b7:c0:f2:b4:e0:91:
2a:ea:4d:0d:58:cc:23:3f:ca:79:9c:2a:ef:cb:f4:
ac:29:cb:ad:cb:c8:74:86:da:f3:7f:74:88:16:f1:
ed:ff:a9:30:ee:4e:23:29:70:14:5e:75:91:76:6a:
1e:e4:0b:fb:c7:6b:ca:1e:36:0c:c4:6c:6e:85:dc:
50:53:2c:fd:e2:7e:2c:d0:6b:ab:0d:16:a1:37:9d:
5c:ba:85:41:9b:5e:08:22:38:36:13:c6:88:20:8c:
49:4d:38:c0:63:74:4e:ce:ec:a3:10:b0:28:13:ee:
1b:5d:23:fb:65:13:0d:95:9e:b9:27:30:d5:c4:55:
8c:c7:f8:a6:2c:f4:35:16:91:e4:42:58:6e:f8:33:
3d:6e:d4:41:5d:89:72:96:e0:c1:80:14:f8:f4:fd:
98:c5:09:c2:e0:e7:22:9c:bd:a7:ca:28:c8:f4:94:
7c:78:54:d0:1b:36:00:77:c7:bd:51:f1:ab:5b:5a:
91:96:06:52:3e:c9:65:6e:8b:0a:c7:12:df:c7:11:
04:f6:7f:eb:02:fe:c5:64:15:d4:69:18:1e:93:dc:
3a:e6:71:30:dc:7c:eb:41:4f:4a:7c:55:cd:44:0a:
44:da:e2:19:5b:cc:32:9d:01:02:6d:f2:26:a2:df:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:62:AD:F5:38:84:21:4D:98:B5:B3:75:DA:4F:0E:68:61:5F:59:E9
X509v3 Authority Key Identifier:
keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0f:a8:c2:c6:31:7e:a6:c3:ff:51:39:9d:ff:c1:4f:c7:5d:
12:dd:f3:57:48:86:11:14:71:d4:d1:7c:ec:a5:bc:e3:77:b3:
ff:22:94:a8:1c:18:14:04:8c:c6:f9:c7:b8:df:46:4f:b8:9f:
f7:48:3b:ab:b4:0b:a6:ec:11:aa:d9:0a:da:fc:37:6b:d6:75:
a2:c1:ac:2f:8d:67:ba:4d:9e:50:61:7b:87:c6:20:0f:37:10:
11:c9:82:47:4e:a0:ff:17:69:fb:47:f5:75:9a:79:ce:78:5f:
e8:f4:94:cc:2a:07:16:27:d1:fe:91:af:43:8a:a1:86:57:7e:
49:a2:42:fe:d5:7a:75:9c:3b:b7:49:78:3b:41:db:7a:99:fa:
a6:f2:79:2a:fe:6d:69:75:16:a8:98:40:15:bb:24:e0:78:62:
ff:a3:27:4f:35:b0:61:46:95:8b:fb:22:1a:86:79:82:f8:b7:
45:92:eb:92:6e:97:89:1e:4c:89:19:cd:db:d6:c0:0f:36:03:
c4:24:92:5d:c1:95:13:e3:73:de:28:50:ff:ce:dc:d7:38:95:
61:71:bf:35:5b:f7:cd:15:ad:e5:9f:1e:b1:c8:2b:39:c7:46:
38:11:d6:b3:3c:eb:2b:52:8c:a1:1b:7d:eb:1b:c0:89:c2:aa:
1f:cc:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:29:56 2026 by rpki-client