
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json)
Hash identifier: NrThYrB2MApfk0O6UKOGr91A454P767CmCDt4gwUou4=
Subject key identifier: D7:30:61:EE:72:57:B8:13:E9:3D:4E:75:09:4C:CE:79:C1:E6:E8:CB
Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Certificate serial: 17CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
Manifest number: 17BE
Signing time: Tue 18 Aug 2026 16:43:06 +0000
Manifest this update: Tue 18 Aug 2026 16:43:06 +0000
Manifest next update: Tue 25 Aug 2026 16:43:06 +0000
Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: +VCTq9lPn4o98ky2xIjPPUDbUXB+6fPIGP0zOr7laxs=)
2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: pOUuDNhh+S+06YvmHHO2sLszLURz3ht9lYFbPAGfK8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6094 (0x17ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Validity
Not Before: Aug 18 16:43:06 2026 GMT
Not After : Aug 25 16:43:06 2026 GMT
Subject: CN=6a848b9a-2d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ff:7a:e2:7d:fc:02:d0:10:9c:26:1e:5f:7e:
60:0e:62:1b:2d:8e:6e:6d:97:34:58:2d:ac:90:f1:
d6:6b:cc:15:01:ca:44:24:85:c2:09:21:4b:9e:e7:
d0:b0:d8:3c:c3:7a:d5:69:4d:d0:f8:32:ff:74:ab:
fb:ad:68:45:95:75:eb:50:d5:d0:16:20:cc:b2:3f:
10:7e:6e:ee:a2:4e:b5:e6:87:ef:4d:79:b8:c0:06:
dd:6b:a7:cb:4c:eb:40:24:5a:eb:f8:29:7a:42:4c:
f6:73:4c:53:95:1a:ee:2d:4c:ff:51:4f:f8:b2:f8:
45:e9:46:90:17:c1:bb:2b:a4:24:8c:4e:1a:79:fd:
85:74:b9:99:12:76:13:07:3f:bd:4a:3d:9f:75:98:
57:b5:27:80:c5:f7:cf:07:52:b8:32:24:ef:ef:ca:
e5:c4:62:2b:10:81:2a:6f:e3:71:a6:55:bb:df:fd:
44:70:35:3f:da:93:23:1a:3f:f8:c8:ca:1e:d4:4b:
b5:4d:e8:b6:77:35:c6:06:28:e4:c6:cf:07:f7:30:
c5:27:1e:cd:da:15:7a:19:1c:29:cc:1c:a5:4d:04:
f2:a1:99:37:3c:cf:57:ff:b1:37:fa:ed:c1:a0:1b:
ff:71:76:1b:f7:4b:c5:6d:b7:74:9f:39:61:4f:a2:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:30:61:EE:72:57:B8:13:E9:3D:4E:75:09:4C:CE:79:C1:E6:E8:CB
X509v3 Authority Key Identifier:
keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:d5:36:be:e5:41:a5:ed:71:f5:31:1a:0a:03:96:71:91:12:
d7:48:92:d6:f4:b2:ae:8f:a3:9d:00:0d:1c:a1:96:e7:37:db:
d6:16:30:6e:af:a6:de:69:15:d9:7e:0e:f2:ca:79:28:be:94:
25:ea:d4:c7:d1:89:78:0a:12:ba:7b:00:be:ca:2e:7a:1a:21:
51:3a:7a:45:d1:45:44:98:de:b2:67:3f:64:10:d3:e3:58:70:
19:e7:db:f1:5e:53:4d:e1:16:9a:3f:b2:55:cf:35:03:fc:f3:
93:64:70:3d:2a:2c:b4:5b:19:6f:90:5d:cd:10:22:a0:28:a3:
67:e6:ed:e4:04:56:b5:e0:cc:7e:79:c6:dd:6c:ec:0d:7d:b0:
cd:0a:6f:00:0f:79:bc:cf:21:6c:89:a2:26:ba:09:57:73:21:
f5:51:07:de:12:5b:df:bf:c2:76:fe:d6:b4:43:99:0b:ad:6e:
12:b0:e0:77:63:c7:2a:33:d4:95:b4:ec:5f:c5:b5:79:2b:b9:
b1:11:d8:62:e9:0c:57:cb:25:af:4a:c5:02:cb:64:72:c1:45:
92:85:93:14:1c:e9:64:5c:d4:99:18:9e:8d:0f:6b:dc:b0:40:
04:dd:9d:ce:d0:c1:07:65:7c:48:a2:9c:15:a3:83:37:2e:21:
f4:1a:db:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx
NTkwNUNBMkMwHhcNMjYwODE4MTY0MzA2WhcNMjYwODI1MTY0MzA2WjAYMRYwFAYD
VQQDEw02YTg0OGI5YS0yZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5/964n38AtAQnCYeX35gDmIbLY5ubZc0WC2skPHWa8wVAcpEJIXCCSFLnufQ
sNg8w3rVaU3Q+DL/dKv7rWhFlXXrUNXQFiDMsj8Qfm7uok615ofvTXm4wAbda6fL
TOtAJFrr+Cl6Qkz2c0xTlRruLUz/UU/4svhF6UaQF8G7K6QkjE4aef2FdLmZEnYT
Bz+9Sj2fdZhXtSeAxffPB1K4MiTv78rlxGIrEIEqb+NxplW73/1EcDU/2pMjGj/4
yMoe1Eu1Tei2dzXGBijkxs8H9zDFJx7N2hV6GRwpzBylTQTyoZk3PM9X/7E3+u3B
oBv/cXYb90vFbbd0nzlhT6JitQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcwYe5y
V7gT6T1OdQlMznnB5ujLMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz
QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl
MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeNU2vuVBpe1x9TEaCgOWcZES10iS1vSyro+jnQANHKGW5zfb1hYwbq+m3mkV
2X4O8sp5KL6UJerUx9GJeAoSunsAvsouehohUTp6RdFFRJjesmc/ZBDT41hwGefb
8V5TTeEWmj+yVc81A/zzk2RwPSostFsZb5BdzRAioCijZ+bt5ARWteDMfnnG3Wzs
DX2wzQpvAA95vM8hbImiJroJV3Mh9VEH3hJb37/Cdv7WtEOZC61uErDgd2PHKjPU
lbTsX8W1eSu5sRHYYukMV8slr0rFAstkcsFFkoWTFBzpZFzUmRiejQ9r3LBABN2d
ztDBB2V8SKKcFaODNy4h9BrbxA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:32 2026 by rpki-client