
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json)
Hash identifier: NXMgt3yXcow9OfmTmMVwAPjwUWLJksM/TLadp463BRo=
Subject key identifier: 4B:53:EB:56:08:8B:6C:8B:2B:09:BD:D1:2E:4E:C4:BF:AB:B8:7D:5F
Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Certificate serial: 17E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
Manifest number: 17D7
Signing time: Tue 06 Oct 2026 16:35:33 +0000
Manifest this update: Tue 06 Oct 2026 16:35:32 +0000
Manifest next update: Tue 13 Oct 2026 16:35:32 +0000
Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: r5XMiL6M2+LySNSIm9PZYUHFVFd0c5aBRot2VD4DzRo=)
2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: pOUuDNhh+S+06YvmHHO2sLszLURz3ht9lYFbPAGfK8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6119 (0x17e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Validity
Not Before: Oct 6 16:35:32 2026 GMT
Not After : Oct 13 16:35:32 2026 GMT
Subject: CN=6ac52355-384c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:30:f8:5e:4c:23:2a:d6:6b:bd:6b:68:dc:
e2:1f:d9:56:fd:63:a6:f1:bf:c8:52:41:2c:aa:66:
af:b7:e1:1f:ac:72:5d:d1:6f:79:b0:2a:3d:de:34:
23:c1:19:1d:ee:0d:49:35:de:6a:11:76:d5:39:e5:
86:ab:4d:13:40:cb:5a:f6:8c:c2:96:9d:0a:84:03:
9d:e9:e3:ee:12:25:17:60:0d:d3:9f:ec:c6:78:29:
98:3d:f2:ff:cc:5c:2a:94:16:aa:72:f6:8b:eb:f4:
6b:71:ac:89:94:a4:a3:cc:e4:0d:39:49:af:24:69:
db:a2:10:a0:83:ce:e5:25:d0:eb:cd:91:2d:60:11:
62:0e:c7:49:83:ae:9e:29:37:18:32:9c:2c:5b:ed:
ef:d7:97:ce:7c:c7:46:66:76:e8:cc:99:b4:2b:b0:
5a:9b:b6:3a:46:d7:13:8f:64:09:0a:63:7b:c7:0f:
55:da:d9:64:35:67:4e:43:2d:93:9e:b8:b4:70:e0:
ea:9b:18:10:9a:94:1a:51:28:2a:66:1c:d0:2b:97:
e7:f2:89:f0:5b:74:01:c7:4d:5a:d2:29:89:8d:d5:
d6:eb:61:8d:5d:14:b1:6b:80:8c:b9:22:c2:a1:36:
ab:ba:4a:a8:91:47:df:57:8c:70:58:dc:a1:f1:29:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:EB:56:08:8B:6C:8B:2B:09:BD:D1:2E:4E:C4:BF:AB:B8:7D:5F
X509v3 Authority Key Identifier:
keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e9:a2:dc:c3:9a:2d:d3:3a:19:7b:0c:b5:bf:83:66:bd:51:
7c:65:2f:98:20:43:45:c1:5c:ea:47:1e:20:23:39:43:cf:cf:
74:51:81:94:a2:6b:15:70:89:a9:44:cd:8c:63:2b:63:52:f4:
79:b8:20:26:4e:21:61:c8:08:50:fc:2b:d7:dc:f2:22:e0:bc:
04:8c:a0:57:ab:cf:38:2d:ff:6f:31:52:29:2a:5d:77:bf:9f:
fe:e1:92:b5:63:4f:d8:17:86:a0:fd:3e:21:3a:97:58:1f:b4:
6a:f3:47:88:7d:63:04:4c:bb:2d:1d:c1:6c:ec:b7:cd:8d:ab:
f2:73:25:5f:68:62:07:ef:4b:2f:62:10:29:de:81:ab:52:33:
7a:2a:46:91:f2:d7:6c:49:42:b9:3b:0f:03:56:ea:95:32:98:
d8:ed:4f:89:7b:06:82:e4:23:a1:a0:95:39:57:a9:33:e0:60:
3b:9d:d9:12:93:e2:d3:9d:88:68:d7:d8:e2:ee:5f:4a:4e:8d:
9b:9b:bb:87:a7:f3:b8:64:ba:c9:fb:ee:ae:c7:06:0b:78:89:
07:e6:5e:2c:58:93:fe:c1:f6:17:7b:e1:bb:8a:78:53:75:fd:
a6:a1:3f:cf:de:c9:b8:26:11:70:b9:8f:8f:37:90:62:b1:b1:
57:c8:33:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:19:16 2026 by rpki-client